This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/q3vaJOTC8w8YJydcJlzdNu2t6t0.roa
File:                     q3vaJOTC8w8YJydcJlzdNu2t6t0.roa (raw, json)
Hash identifier:          6HoX9dCuUvOi7bV1+OJY+cnUcJyW0sCh4AS88KCyve8=
Subject key identifier:   AB:7B:DA:24:E4:C2:F3:0F:18:27:27:5C:26:5C:DD:36:ED:AD:EA:DD
Certificate issuer:       /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Certificate serial:       019B79ECC42C71199343B8E972899A056D75
Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/q3vaJOTC8w8YJydcJlzdNu2t6t0.roa
Signing time:             Thu 01 Jan 2026 14:18:38 +0000
ROA not before:           Thu 01 Jan 2026 14:18:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204257
IP address blocks:        141.226.184.0/21 maxlen: 21
                          141.226.184.0/23 maxlen: 23
                          141.226.184.0/24 maxlen: 24
                          141.226.185.0/24 maxlen: 24
                          141.226.186.0/23 maxlen: 23
                          141.226.186.0/24 maxlen: 24
                          141.226.187.0/24 maxlen: 24
                          141.226.188.0/24 maxlen: 24
                          141.226.189.0/24 maxlen: 24
                          141.226.190.0/24 maxlen: 24
                          141.226.191.0/24 maxlen: 24
                          185.109.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:c4:2c:71:19:93:43:b8:e9:72:89:9a:05:6d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
        Validity
            Not Before: Jan  1 14:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ab7bda24e4c2f30f1827275c265cdd36edadeadd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:59:ad:53:b5:75:41:a5:b2:fa:77:08:7c:2d:
                    88:27:e1:92:dc:34:46:3b:00:4c:c9:0d:08:12:e0:
                    be:43:40:e7:ee:19:5c:ae:44:df:96:07:9a:0e:07:
                    f7:af:35:89:eb:84:5b:1a:e5:94:72:80:0c:9b:eb:
                    0b:d2:10:fc:47:d9:5b:57:d2:96:ac:aa:8e:91:37:
                    fb:cb:88:d8:c4:71:5a:14:09:f4:06:98:67:5a:a8:
                    82:3f:0b:a6:ef:e7:23:f5:de:17:a5:46:2e:b7:ee:
                    7e:68:d0:47:18:1c:08:45:46:39:c4:63:d5:99:82:
                    06:4e:76:35:c3:59:2a:d1:ac:0c:c0:dc:32:b3:17:
                    b3:25:3a:23:c5:67:04:26:a4:c5:f2:a2:1e:36:d8:
                    30:ee:dc:87:a8:cd:63:8a:0a:a4:51:6b:df:7b:ca:
                    6d:cd:18:21:7b:f1:97:e8:d7:ff:fc:61:3b:80:47:
                    90:42:ee:dd:28:46:7d:42:6d:98:0f:17:b9:f8:c4:
                    2d:ca:7e:1b:6c:dd:63:18:fd:e6:f8:1d:22:43:76:
                    2f:47:05:8f:a0:9e:e3:62:ab:ff:e0:b5:e9:ba:69:
                    9b:32:31:cd:47:f1:8c:ed:94:ab:af:54:58:65:fd:
                    9a:d1:58:ba:1a:61:6d:dc:4d:72:f9:42:42:be:d3:
                    01:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7B:DA:24:E4:C2:F3:0F:18:27:27:5C:26:5C:DD:36:ED:AD:EA:DD
            X509v3 Authority Key Identifier:
                keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/q3vaJOTC8w8YJydcJlzdNu2t6t0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.226.184.0/21
                  185.109.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:d1:82:81:ac:b2:d9:c6:ba:3e:22:2c:d4:9e:53:46:23:8f:
         71:47:82:8f:c8:86:60:ed:8b:23:a7:23:c4:d8:13:53:85:84:
         6f:b3:3f:62:e6:8f:35:e7:ea:85:28:51:25:4e:e8:e8:55:16:
         00:f9:28:46:bb:ac:6d:8e:3d:83:48:d6:aa:b7:ae:7d:db:b4:
         1c:ef:48:6a:44:6c:52:a2:4b:1a:6f:06:3e:4f:e8:a0:d2:33:
         6b:16:f3:2b:1e:49:f8:a7:5f:73:18:43:ef:79:ea:a0:40:66:
         7f:0d:59:f8:64:5e:32:f4:f0:b5:16:43:2f:f4:07:d0:99:f3:
         2c:31:19:f1:2a:7f:52:6b:91:f3:af:dc:8c:94:01:ea:75:c6:
         b2:53:7c:91:45:31:df:91:78:f1:97:4b:5b:8b:12:02:63:90:
         b1:27:4f:85:9e:09:ec:02:09:e1:38:cf:79:cd:a5:a1:86:9a:
         9e:59:dc:e6:ff:64:ca:61:d1:8b:22:73:4e:69:ce:bc:91:3d:
         5d:7b:d6:5e:3d:27:7d:a5:f2:2c:23:ee:d0:13:c4:de:bf:75:
         70:6b:f9:47:06:e9:81:da:5b:da:b4:5b:f3:50:2d:3d:8e:a5:
         5e:ba:f7:74:5f:18:12:2f:12:98:bf:49:1b:7e:ba:73:56:9a:
         dc:0b:e5:f6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt57MQscRmTQ7jpcomaBW11MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZWVlMjdmM2MyYzVjOWVjNTc4MGFjZGEyYjZlYjA0MGE2
ZDI1YTEwHhcNMjYwMTAxMTQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjdiZGEyNGU0YzJmMzBmMTgyNzI3NWMyNjVjZGQzNmVkYWRlYWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlmtU7V1QaWy+ncIfC2IJ+GS3DRG
OwBMyQ0IEuC+Q0Dn7hlcrkTflgeaDgf3rzWJ64RbGuWUcoAMm+sL0hD8R9lbV9KW
rKqOkTf7y4jYxHFaFAn0BphnWqiCPwum7+cj9d4XpUYut+5+aNBHGBwIRUY5xGPV
mYIGTnY1w1kq0awMwNwysxezJTojxWcEJqTF8qIeNtgw7tyHqM1jigqkUWvfe8pt
zRghe/GX6Nf//GE7gEeQQu7dKEZ9Qm2YDxe5+MQtyn4bbN1jGP3m+B0iQ3YvRwWP
oJ7jYqv/4LXpummbMjHNR/GM7ZSrr1RYZf2a0Vi6GmFt3E1y+UJCvtMBBQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKt72iTkwvMPGCcnXCZc3TbtrerdMB8GA1UdIwQY
MBaAFNbu4n88LFyexXgKzaK26wQKbSWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXU3aWZ6d3NYSjdGZUFyTm9yYnJCQXB0SmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iODIyODUtOTY5Zi00YzJmLWEwNGMt
N2QzYzMzNTE0OTJjLzEvcTN2YUpPVEM4dzhZSnlkY0psemROdTJ0NnQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9iODIyODUtOTY5Zi00YzJmLWEwNGMtN2QzYzMzNTE0OTJj
LzEvMXU3aWZ6d3NYSjdGZUFyTm9yYnJCQXB0SmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDjeK4AwQC
uW2UMA0GCSqGSIb3DQEBCwUAA4IBAQBJ0YKBrLLZxro+IizUnlNGI49xR4KPyIZg
7YsjpyPE2BNThYRvsz9i5o815+qFKFElTujoVRYA+ShGu6xtjj2DSNaqt65927Qc
70hqRGxSoksabwY+T+ig0jNrFvMrHkn4p19zGEPveeqgQGZ/DVn4ZF4y9PC1FkMv
9AfQmfMsMRnxKn9Sa5Hzr9yMlAHqdcayU3yRRTHfkXjxl0tbixICY5CxJ0+Fngns
AgnhOM95zaWhhpqeWdzm/2TKYdGLInNOac68kT1de9ZePSd9pfIsI+7QE8Tev3Vw
a/lHBumB2lvatFvzUC09jqVeuvd0XxgSLxKYv0kbfrpzVprcC+X2
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:05 2026 by rpki-client