This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/uJnEIKPWJw-326x5IBBMzolFrLM.roa
File:                     uJnEIKPWJw-326x5IBBMzolFrLM.roa (raw, json)
Hash identifier:          moDOTpNm3tFCIAX5WqMAOpWVKX58N/OLMiWutEeF9mo=
Subject key identifier:   B8:99:C4:20:A3:D6:27:0F:B7:DB:AC:79:20:10:4C:CE:89:45:AC:B3
Certificate issuer:       /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial:       019B7F15244F9BE626596DC7D9DC582BCBB7
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/uJnEIKPWJw-326x5IBBMzolFrLM.roa
Signing time:             Fri 02 Jan 2026 14:20:50 +0000
ROA not before:           Fri 02 Jan 2026 14:20:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60339
IP address blocks:        92.41.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:24:4f:9b:e6:26:59:6d:c7:d9:dc:58:2b:cb:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
        Validity
            Not Before: Jan  2 14:20:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b899c420a3d6270fb7dbac7920104cce8945acb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:73:a6:dc:51:24:cc:7b:ea:a3:f6:64:e6:d3:
                    66:2f:9a:34:60:93:47:dc:32:98:de:46:bd:5e:6b:
                    30:7c:74:a5:0f:34:d9:c6:04:4e:5a:82:d6:45:b8:
                    12:b8:61:10:38:10:8e:b9:43:f8:8d:d1:0e:a0:bc:
                    cc:fa:d0:7e:92:6d:c7:d9:4b:e0:21:42:d1:6f:5b:
                    07:a2:5c:a9:da:0c:d3:eb:8d:3b:5f:e2:d3:6e:d2:
                    f4:fd:05:8f:c1:b1:e7:b0:57:7f:83:af:1f:fc:68:
                    c1:bb:f2:70:3e:38:68:48:68:2d:6d:1a:8e:63:7b:
                    56:80:c0:0b:74:26:cf:69:e1:f3:71:98:5d:d8:79:
                    e5:9d:17:e7:3e:3d:e0:b7:f1:b6:c9:90:c1:a6:61:
                    7c:7a:90:87:1d:ec:36:d2:b0:ee:a8:c1:00:a9:76:
                    71:82:bd:d7:21:72:83:e7:00:82:12:ce:6c:0c:69:
                    52:60:40:8a:fb:38:e7:38:f8:14:12:82:4e:44:5c:
                    14:34:74:da:c6:ee:03:b2:f1:e2:c5:b5:61:15:ed:
                    ca:d2:88:db:e8:75:fa:94:1c:f2:ba:a1:05:12:1e:
                    18:b8:a1:8e:98:dc:95:35:57:2f:7a:06:28:8e:50:
                    85:d6:e2:a5:2f:6c:41:ad:91:91:68:c0:49:ef:5b:
                    51:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:99:C4:20:A3:D6:27:0F:B7:DB:AC:79:20:10:4C:CE:89:45:AC:B3
            X509v3 Authority Key Identifier:
                keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/uJnEIKPWJw-326x5IBBMzolFrLM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.41.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:b8:d2:9c:f9:8d:1b:e3:1b:79:ca:34:9c:83:06:9b:13:25:
         ca:18:76:7b:6a:df:16:60:3a:5d:7b:b2:be:55:3c:b4:09:c5:
         02:7b:a5:08:a3:e2:02:86:4b:f9:bd:8f:4c:7f:b8:3f:bd:29:
         0a:a2:bb:17:90:3a:23:1b:89:d3:2c:05:32:00:bf:3f:16:a7:
         96:c6:ae:6c:cf:f2:20:e3:bc:2e:2f:30:40:e8:55:7b:60:e2:
         12:49:fa:84:eb:c5:89:83:f6:58:68:d0:23:11:7f:90:59:6b:
         df:3a:4c:5a:5d:aa:cc:26:2d:a6:d8:e0:6c:d0:79:34:ea:da:
         15:97:ba:62:46:56:00:fb:b5:66:74:56:5a:f1:dd:10:43:ce:
         f6:96:24:d2:62:8a:23:18:25:34:97:a7:7e:e3:d5:fa:73:4f:
         55:4c:8a:7c:7f:a5:ec:14:0d:d9:1f:37:04:e1:47:d7:7a:fc:
         23:85:e0:f9:4a:57:17:b5:76:bc:03:12:07:ed:c2:14:fd:1f:
         dd:ec:63:f6:52:c7:6b:f0:06:f4:16:da:67:fd:b1:35:10:7b:
         20:6c:0b:53:eb:1d:48:1c:72:e7:64:4b:d0:cf:5b:df:54:9c:
         ee:50:61:65:46:4b:39:59:8d:ca:cd:d8:2d:e0:72:56:63:60:
         68:72:b8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:41:59 2026 by rpki-client