This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/quNtYWBjqvvDoKYNR4UlZqtF5-s.roa
File:                     quNtYWBjqvvDoKYNR4UlZqtF5-s.roa (raw, json)
Hash identifier:          MxAuaNeYKwApf/bmNvm0Do0ftTLNbZaWSwjnaNo2/4M=
Subject key identifier:   AA:E3:6D:61:60:63:AA:FB:C3:A0:A6:0D:47:85:25:66:AB:45:E7:EB
Certificate issuer:       /CN=49596cecc21dd02677a727ef37f0689546ea5097
Certificate serial:       019B77588D2B647CFD52846F01C8B0B8D860
Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/quNtYWBjqvvDoKYNR4UlZqtF5-s.roa
Signing time:             Thu 01 Jan 2026 02:17:30 +0000
ROA not before:           Thu 01 Jan 2026 02:17:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60781
IP address blocks:        83.118.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:8d:2b:64:7c:fd:52:84:6f:01:c8:b0:b8:d8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097
        Validity
            Not Before: Jan  1 02:17:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=aae36d616063aafbc3a0a60d47852566ab45e7eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6f:c3:86:9a:fa:c4:62:7a:87:ca:ab:e1:24:
                    ab:e4:b8:d4:3a:59:a5:ab:d6:97:3d:ed:41:12:07:
                    58:72:01:e6:f3:07:23:5d:20:74:4a:aa:c6:b1:9c:
                    8e:5c:01:cd:99:e0:8f:69:e7:ff:1f:5c:c6:47:b9:
                    46:b0:79:c9:30:5e:84:e5:a7:00:f0:9f:06:8f:cc:
                    c4:06:72:df:6a:42:05:86:ed:ed:4e:3d:02:d0:4c:
                    70:77:17:13:60:39:8f:32:1e:da:2c:7f:aa:b1:22:
                    86:71:1e:02:84:bf:25:8d:7b:ac:16:79:be:e5:97:
                    23:98:eb:3f:a5:1f:ef:48:57:a3:a9:1b:3c:63:f1:
                    f3:75:78:46:a1:94:10:4f:7f:4b:f1:23:de:9f:ff:
                    be:d4:ba:e1:1f:f7:fb:2c:d6:3e:44:e8:ea:7f:5a:
                    87:e2:fe:e6:b0:fd:d9:e5:d7:83:81:62:8b:14:d4:
                    a8:50:5b:fa:f3:6a:e7:b5:d8:7f:82:3e:16:e0:20:
                    d8:78:be:6c:5c:78:10:0c:18:09:f2:0c:d6:d3:c7:
                    91:8b:40:18:ad:52:3a:fa:dd:ab:b7:06:b3:fd:8c:
                    70:0f:30:57:51:33:27:5c:b2:41:3d:30:0f:4d:48:
                    10:02:ea:ed:66:8c:3f:fb:9d:40:6b:b4:d9:61:bd:
                    ab:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E3:6D:61:60:63:AA:FB:C3:A0:A6:0D:47:85:25:66:AB:45:E7:EB
            X509v3 Authority Key Identifier:
                keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/quNtYWBjqvvDoKYNR4UlZqtF5-s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.118.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:9e:9c:1c:ab:65:09:c7:96:76:07:22:20:ac:7e:96:fe:b2:
         82:3f:70:ea:fe:12:27:ed:62:39:aa:66:45:c9:f0:b3:97:a2:
         b3:fa:31:1c:1e:ae:f6:63:12:df:5f:64:9f:d8:04:ca:31:67:
         2b:cc:c6:55:21:f9:e3:b8:aa:4e:ee:c8:3f:3b:be:0d:73:62:
         56:81:5f:28:d9:3e:87:e8:14:65:82:40:68:72:3c:bb:c5:8b:
         29:25:a0:e9:f1:05:d8:54:1d:c8:fd:d7:a5:d0:58:4e:49:35:
         cc:25:e5:bc:90:42:0d:de:e0:8c:29:99:9f:8a:46:42:e3:3f:
         0f:09:e2:72:6b:2e:d2:d7:9d:d9:95:41:f4:67:46:81:28:99:
         51:da:78:70:4c:5d:41:d4:b3:69:06:3c:42:1d:61:6e:19:1a:
         0c:01:42:e7:f0:90:18:74:e2:21:2f:d9:28:54:20:6a:0e:c9:
         20:05:9e:94:b2:c1:2c:d4:bd:51:c7:df:61:4e:f6:95:38:21:
         13:d1:65:f9:40:f5:68:71:0a:21:ed:6e:9c:dd:10:c0:4b:7c:
         73:99:29:69:e3:63:c8:40:28:f9:b7:15:a6:67:03:55:f8:b5:
         65:ef:2e:03:82:c3:d0:7b:f0:16:19:38:fa:24:35:ca:38:6c:
         4b:be:90:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 16:53:31 2026 by rpki-client