This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RTqCEGNf9OMaitBqo4B_DoCFJHk.roa
File:                     RTqCEGNf9OMaitBqo4B_DoCFJHk.roa (raw, json)
Hash identifier:          zoEz975jluJRhKn35F3eLvxRBY7Vyd18GY4dHBjnios=
Subject key identifier:   45:3A:82:10:63:5F:F4:E3:1A:8A:D0:6A:A3:80:7F:0E:80:85:24:79
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       019B78A31830CBBB8788C66A30D1FAB8EC7F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RTqCEGNf9OMaitBqo4B_DoCFJHk.roa
Signing time:             Thu 01 Jan 2026 08:18:33 +0000
ROA not before:           Thu 01 Jan 2026 08:18:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137517
IP address blocks:        193.37.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 02:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:18:30:cb:bb:87:88:c6:6a:30:d1:fa:b8:ec:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan  1 08:18:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=453a8210635ff4e31a8ad06aa3807f0e80852479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:06:e4:93:45:02:07:9f:a0:64:aa:60:ba:fa:
                    0c:c0:93:c6:a2:f0:09:8f:ec:a2:10:74:25:3d:2c:
                    5c:65:a6:fc:05:ab:b5:3b:3f:e4:5a:46:0a:25:02:
                    21:5a:32:08:95:a0:fc:e2:ad:bc:26:20:b4:c3:da:
                    aa:e0:57:63:2a:f2:c1:e6:76:bf:44:33:d7:68:22:
                    84:8f:e5:2e:68:97:88:cb:07:f1:53:43:8f:3d:8d:
                    25:48:d0:bd:bb:79:7e:6a:b9:a9:62:3c:dc:6d:e3:
                    77:d9:a9:99:a7:ff:90:36:e3:1d:ee:81:f3:74:f2:
                    00:12:9b:ac:c2:5a:c5:70:11:b4:dc:11:75:55:93:
                    7f:a0:9d:93:4e:7c:14:3d:12:56:55:a1:24:13:6c:
                    7a:e3:71:da:a9:fa:a6:ef:e0:fa:5f:90:08:41:6a:
                    9e:d0:7f:8b:f5:db:37:7a:82:7d:46:42:8c:7c:6a:
                    4f:8e:ca:49:32:68:91:e3:7b:21:34:9b:fd:98:3f:
                    d7:0e:a5:8c:76:c9:b7:1a:15:43:18:c3:aa:86:64:
                    92:50:b6:ee:a3:e8:62:57:02:e1:d0:44:d1:83:f3:
                    53:48:0e:3f:08:1a:69:0f:39:3f:6b:55:96:b5:6a:
                    85:ee:f5:70:6e:04:40:10:0d:2e:4b:eb:4e:b7:4b:
                    a3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3A:82:10:63:5F:F4:E3:1A:8A:D0:6A:A3:80:7F:0E:80:85:24:79
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RTqCEGNf9OMaitBqo4B_DoCFJHk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.37.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:f0:8e:00:f4:78:84:d0:36:52:7a:e0:82:80:5b:3f:61:40:
         21:fb:c4:7e:50:c5:4d:7e:11:04:99:ef:63:9b:9d:72:f2:dc:
         ea:ff:3f:8a:6b:55:ef:51:cd:5d:75:67:70:a2:6a:cc:1d:78:
         92:1f:3c:df:b0:95:33:80:2f:bc:36:c1:18:b1:90:9f:0d:35:
         d7:7c:59:36:aa:e6:4e:9b:12:3b:b9:c0:2f:37:f1:48:f1:20:
         e4:3d:25:94:24:22:57:aa:1a:e0:f2:60:f9:30:88:f3:63:57:
         a3:c5:a8:09:f5:56:6a:61:85:7a:f0:f7:b5:50:68:28:c4:e6:
         e9:dc:2e:a7:b1:f4:1f:27:c3:26:dd:9d:41:30:1a:33:3a:43:
         17:36:db:7d:19:fe:48:39:a3:19:ff:83:f4:32:4b:4f:1c:43:
         c0:5b:65:f5:08:da:76:d8:ae:c8:c1:75:0e:31:a6:18:4f:41:
         5f:da:64:04:d1:09:14:12:9d:14:6a:59:59:f5:b3:25:e7:98:
         fc:9c:ae:d4:81:21:6d:49:f0:82:cf:56:6c:32:d6:b4:81:b6:
         bc:d2:f8:9d:8a:c6:9e:71:2d:3d:d5:35:a3:a1:66:dd:ac:d9:
         7f:cc:23:71:21:1e:ff:62:2f:27:e4:3f:bc:bc:fb:e7:20:0b:
         7b:5a:6f:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4oxgwy7uHiMZqMNH6uOx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwMTAxMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTNhODIxMDYzNWZmNGUzMWE4YWQwNmFhMzgwN2YwZTgwODUyNDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwbkk0UCB5+gZKpguvoMwJPGovAJ
j+yiEHQlPSxcZab8Bau1Oz/kWkYKJQIhWjIIlaD84q28JiC0w9qq4FdjKvLB5na/
RDPXaCKEj+UuaJeIywfxU0OPPY0lSNC9u3l+armpYjzcbeN32amZp/+QNuMd7oHz
dPIAEpuswlrFcBG03BF1VZN/oJ2TTnwUPRJWVaEkE2x643Haqfqm7+D6X5AIQWqe
0H+L9ds3eoJ9RkKMfGpPjspJMmiR43shNJv9mD/XDqWMdsm3GhVDGMOqhmSSULbu
o+hiVwLh0ETRg/NTSA4/CBppDzk/a1WWtWqF7vVwbgRAEA0uS+tOt0ujfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEU6ghBjX/TjGorQaqOAfw6AhSR5MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvUlRxQ0VHTmY5T01haXRCcW80Ql9Eb0NGSkhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSUsMA0G
CSqGSIb3DQEBCwUAA4IBAQBA8I4A9HiE0DZSeuCCgFs/YUAh+8R+UMVNfhEEme9j
m51y8tzq/z+Ka1XvUc1ddWdwomrMHXiSHzzfsJUzgC+8NsEYsZCfDTXXfFk2quZO
mxI7ucAvN/FI8SDkPSWUJCJXqhrg8mD5MIjzY1ejxagJ9VZqYYV68Pe1UGgoxObp
3C6nsfQfJ8Mm3Z1BMBozOkMXNtt9Gf5IOaMZ/4P0MktPHEPAW2X1CNp22K7IwXUO
MaYYT0Ff2mQE0QkUEp0UallZ9bMl55j8nK7UgSFtSfCCz1ZsMta0gba80vidisae
cS091TWjoWbdrNl/zCNxIR7/Yi8n5D+8vPvnIAt7Wm8w
-----END CERTIFICATE-----
Generated at Fri Jan 2 12:04:31 2026 by rpki-client