This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/1QUTqjVRf3WO2uBrVpxK_TeZJGI.roa
File:                     1QUTqjVRf3WO2uBrVpxK_TeZJGI.roa (raw, json)
Hash identifier:          CO13+mc4SGDYYeU1j9VlsVtCT9IIqX88ma+GQJWpzmE=
Subject key identifier:   D5:05:13:AA:35:51:7F:75:8E:DA:E0:6B:56:9C:4A:FD:37:99:24:62
Certificate issuer:       /CN=165b56e55b6fefbc20db4ace6fd756c73d741f9c
Certificate serial:       019B79ECE4D50780DF987196D5049EEA5D82
Authority key identifier: 16:5B:56:E5:5B:6F:EF:BC:20:DB:4A:CE:6F:D7:56:C7:3D:74:1F:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FltW5Vtv77wg20rOb9dWxz10H5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/1QUTqjVRf3WO2uBrVpxK_TeZJGI.roa
Signing time:             Thu 01 Jan 2026 14:18:46 +0000
ROA not before:           Thu 01 Jan 2026 14:18:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44396
IP address blocks:        194.48.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FltW5Vtv77wg20rOb9dWxz10H5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:e4:d5:07:80:df:98:71:96:d5:04:9e:ea:5d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165b56e55b6fefbc20db4ace6fd756c73d741f9c
        Validity
            Not Before: Jan  1 14:18:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d50513aa35517f758edae06b569c4afd37992462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8e:5d:b3:93:60:44:e4:de:45:50:1e:03:e6:
                    8c:07:e4:59:c9:9a:cc:61:9a:13:64:f5:4d:1a:8f:
                    ca:44:0d:d9:fe:ed:3a:07:f1:61:a9:67:6e:5d:17:
                    ce:b4:70:3f:39:ca:8e:3e:35:fb:2c:a9:82:eb:db:
                    81:5a:61:ea:72:e4:96:8e:74:3d:45:8f:01:f7:38:
                    73:8b:ce:42:a6:13:e7:12:68:21:2d:a0:c4:0f:79:
                    bd:9e:15:6b:97:71:b6:4d:ce:21:ca:29:cd:ad:d6:
                    c2:7f:56:f8:22:58:a0:54:7c:c6:41:11:14:29:67:
                    28:b9:5d:9c:c8:5e:7e:d1:f6:df:0e:bf:c7:be:70:
                    3a:e1:c0:7c:ab:3a:b9:3e:59:ee:52:b4:a1:e5:84:
                    7f:d2:fb:06:0f:73:18:84:1b:39:df:be:25:2b:b6:
                    a1:1b:ad:c9:c0:a1:d4:1d:5d:60:c3:40:70:cd:e8:
                    c5:de:11:1f:bf:73:3a:bb:6b:a3:dc:4d:38:63:70:
                    ac:78:05:f2:a6:44:d5:19:56:97:2b:5a:22:ed:ba:
                    75:c1:36:c1:74:98:3f:2d:dc:09:7f:89:c8:f5:eb:
                    c5:41:27:4e:d7:a9:b8:94:59:5a:ca:b7:66:41:19:
                    b9:37:7a:bd:08:42:67:e9:30:ed:bf:8e:40:d7:68:
                    ac:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:05:13:AA:35:51:7F:75:8E:DA:E0:6B:56:9C:4A:FD:37:99:24:62
            X509v3 Authority Key Identifier:
                keyid:16:5B:56:E5:5B:6F:EF:BC:20:DB:4A:CE:6F:D7:56:C7:3D:74:1F:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FltW5Vtv77wg20rOb9dWxz10H5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/1QUTqjVRf3WO2uBrVpxK_TeZJGI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.48.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:84:90:9b:9c:c5:3e:29:d1:5f:78:3d:a6:53:66:5a:ff:d0:
         5b:d4:5a:91:20:ff:46:e3:44:a1:d1:51:5d:07:7a:05:53:8d:
         e7:42:79:52:7c:c1:9c:df:46:21:63:55:f4:f8:c8:90:a2:b7:
         50:1d:91:b8:83:df:68:17:12:72:38:10:80:c8:4b:6a:86:95:
         95:8a:b4:72:6d:24:09:1c:d1:70:c2:1d:5f:48:c3:b4:74:47:
         69:d6:22:5e:8d:cf:fe:6b:17:9c:0e:35:e2:11:f3:af:4a:0d:
         4c:71:c5:ba:e4:49:2e:6e:a8:4e:f0:1d:f6:dd:c1:3b:4e:1e:
         90:c4:13:87:a4:f5:c5:89:a5:1a:ce:4b:c6:be:56:44:d7:f5:
         59:c3:b6:10:12:80:e7:4a:5d:0a:92:0b:ba:02:6b:82:8b:78:
         4c:16:24:8b:b9:10:c0:9c:90:6e:91:12:93:84:43:23:94:cc:
         99:5a:3c:ca:b1:d3:4f:3f:e2:0e:84:7a:2b:9c:74:e1:c6:36:
         f6:08:5c:5e:e8:82:be:f3:de:3a:bc:d1:52:6a:eb:b3:00:01:
         15:90:f4:02:5b:d5:09:fc:9b:bb:c5:e6:70:87:2f:c3:2f:21:
         10:58:57:53:9c:1a:f4:8a:c7:bd:1e:b9:54:76:62:e0:70:6a:
         7b:76:b0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:23:41 2026 by rpki-client