This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Q1G132nj6F_UfZNr5_5dkezP8AM.roa
File:                     Q1G132nj6F_UfZNr5_5dkezP8AM.roa (raw, json)
Hash identifier:          vh7PSiv8NCGoSBEEQL74DtkgX37GqqH6Z5NyGtmUyNM=
Subject key identifier:   43:51:B5:DF:69:E3:E8:5F:D4:7D:93:6B:E7:FE:5D:91:EC:CF:F0:03
Certificate issuer:       /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial:       019B7AC7BF3F332C1D9998046E0F053CD087
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Q1G132nj6F_UfZNr5_5dkezP8AM.roa
Signing time:             Thu 01 Jan 2026 18:17:49 +0000
ROA not before:           Thu 01 Jan 2026 18:17:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     6830
IP address blocks:        80.81.48.0/24 maxlen: 24
                          80.81.53.0/24 maxlen: 24
                          80.81.58.0/24 maxlen: 24
                          80.255.224.0/20 maxlen: 20
                          83.223.130.0/24 maxlen: 24
                          83.223.134.0/24 maxlen: 24
                          83.223.135.0/24 maxlen: 24
                          83.223.137.0/24 maxlen: 24
                          83.223.142.0/24 maxlen: 24
                          83.223.153.0/24 maxlen: 24
                          83.223.154.0/24 maxlen: 24
                          91.190.47.0/24 maxlen: 24
                          94.101.226.0/24 maxlen: 24
                          94.101.237.0/24 maxlen: 24
                          159.148.149.0/24 maxlen: 24
                          159.148.240.0/24 maxlen: 24
                          185.7.237.0/24 maxlen: 24
                          185.7.238.0/24 maxlen: 24
                          185.7.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 16:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:bf:3f:33:2c:1d:99:98:04:6e:0f:05:3c:d0:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
        Validity
            Not Before: Jan  1 18:17:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4351b5df69e3e85fd47d936be7fe5d91eccff003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:55:e6:e8:88:9b:1a:63:b9:2f:cd:b2:18:5b:
                    69:13:30:ef:7d:cd:22:74:45:da:79:57:97:05:f9:
                    a7:17:ad:78:4e:51:1a:b1:73:20:ee:a3:2a:70:2f:
                    78:06:a7:fc:0f:5a:19:cc:aa:31:f2:36:38:a3:44:
                    b0:a8:bb:13:ee:ca:bb:d8:c4:77:a7:18:2d:f4:a8:
                    d6:c3:71:6c:82:82:ba:95:cb:e2:af:a7:f7:cd:f9:
                    4b:33:88:03:e9:62:e3:29:74:6e:0a:98:86:24:7b:
                    b5:d9:c1:25:72:6d:70:db:d2:fd:6d:0d:0d:72:05:
                    8e:bb:c9:bc:d5:55:4c:89:3f:1e:75:8a:19:8f:83:
                    13:2e:09:64:6c:87:78:7c:41:d5:24:f2:9c:87:6e:
                    95:2c:68:38:ac:5b:f1:f0:c9:b7:3c:55:84:1b:8c:
                    9e:91:9f:b9:4a:9e:bb:b3:9a:4d:f0:ed:b4:6b:e8:
                    56:0d:0d:4b:0b:78:67:ff:72:99:ee:2d:a1:69:b4:
                    db:e1:ad:ea:5e:87:fa:1c:fb:ec:49:80:65:56:c8:
                    68:60:60:9b:51:71:96:35:cc:06:63:5d:2c:d6:dc:
                    b8:1b:0f:ee:3c:74:30:66:a4:12:6d:1c:ab:a8:d9:
                    3b:e2:13:33:f3:d5:2e:a0:3e:94:24:72:e9:52:93:
                    21:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:51:B5:DF:69:E3:E8:5F:D4:7D:93:6B:E7:FE:5D:91:EC:CF:F0:03
            X509v3 Authority Key Identifier:
                keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Q1G132nj6F_UfZNr5_5dkezP8AM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.81.48.0/24
                  80.81.53.0/24
                  80.81.58.0/24
                  80.255.224.0/20
                  83.223.130.0/24
                  83.223.134.0/23
                  83.223.137.0/24
                  83.223.142.0/24
                  83.223.153.0-83.223.154.255
                  91.190.47.0/24
                  94.101.226.0/24
                  94.101.237.0/24
                  159.148.149.0/24
                  159.148.240.0/24
                  185.7.237.0-185.7.239.255

    Signature Algorithm: sha256WithRSAEncryption
         c0:2f:c6:67:07:9e:f9:0d:26:1f:33:af:75:3f:5e:62:30:e2:
         f5:c1:fc:24:0e:6b:fc:8a:e5:f1:50:a9:22:19:24:d4:87:b8:
         db:51:eb:68:d0:02:ad:2e:6a:54:0f:e9:5e:dc:99:bf:73:4d:
         b1:57:d0:21:48:56:e9:06:e5:38:7b:2d:49:0b:12:07:f0:fc:
         d4:2e:f4:f0:f8:71:ea:44:a6:b6:94:a6:19:26:f1:d1:ab:c8:
         06:84:b0:a5:54:d8:4e:86:f7:45:c6:0d:fb:41:56:ad:1f:64:
         d2:4a:8f:93:e2:dd:e5:72:84:d6:5b:d1:c9:18:e8:19:be:8a:
         45:69:52:6b:ab:3a:6a:94:05:a4:58:4c:ef:9b:ec:7b:ea:c1:
         a2:26:ed:4d:7c:b5:bb:d2:dd:53:20:3f:51:b4:0a:c7:d1:cb:
         6d:53:e5:69:c4:ba:85:fe:26:ae:c0:01:f6:66:1f:0c:ff:fb:
         ab:e4:e3:f3:b6:2f:8d:44:31:f7:5b:ce:c1:ab:27:22:28:93:
         90:a3:cd:aa:fb:f7:df:38:f2:41:a1:49:91:0c:a7:6e:8b:7a:
         e4:c9:fd:16:4c:ae:91:f3:c0:bb:c9:be:91:ec:1d:7f:93:95:
         a3:e3:07:05:c2:e9:af:74:9a:04:f0:d8:c0:07:4e:d3:f0:d4:
         45:df:85:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:00:48 2026 by rpki-client