This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/_qeKgQV4YyvDP3FhgdytthiDJXQ.roa
File:                     _qeKgQV4YyvDP3FhgdytthiDJXQ.roa (raw, json)
Hash identifier:          94DaY/N+Pi5r/GoDumGOEfU7J+SovdZjttg7Ii1+hmc=
Subject key identifier:   FE:A7:8A:81:05:78:63:2B:C3:3F:71:61:81:DC:AD:B6:18:83:25:74
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       019B79ED1FF484A0BAE9A41F423FD0F5DF99
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/_qeKgQV4YyvDP3FhgdytthiDJXQ.roa
Signing time:             Thu 01 Jan 2026 14:19:01 +0000
ROA not before:           Thu 01 Jan 2026 14:19:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201143
IP address blocks:        193.59.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:1f:f4:84:a0:ba:e9:a4:1f:42:3f:d0:f5:df:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Jan  1 14:19:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fea78a810578632bc33f716181dcadb618832574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:48:ef:a1:77:fa:90:78:9e:59:ee:40:77:b0:
                    94:6e:f5:cb:d1:14:07:06:4c:63:cc:04:01:50:cb:
                    dc:ed:f5:87:7f:d5:1e:9c:0d:86:9d:4a:b8:7f:16:
                    46:6c:ce:17:da:c2:72:45:8f:9f:cd:66:ca:47:fe:
                    ed:de:f2:81:37:83:3b:4c:00:13:ac:e3:56:58:19:
                    e3:51:bd:55:ce:84:34:68:a3:f4:2a:14:7f:7b:30:
                    9f:d0:4a:e0:d9:b9:5f:5f:d8:e8:e4:f7:31:c1:94:
                    86:03:0d:cd:25:84:b0:35:03:5d:ab:34:dd:21:0a:
                    9a:b8:03:c1:39:d8:89:f4:8b:f6:06:05:f6:ef:e3:
                    61:a3:38:3b:2d:a3:b5:92:3e:2b:a4:c2:43:50:1e:
                    83:ed:be:83:67:15:d7:35:5b:74:c8:3a:dc:7e:c2:
                    67:ae:50:b6:88:a0:59:69:41:3f:31:be:7b:7e:69:
                    53:55:a1:d4:a7:d7:7c:41:60:47:b9:df:87:aa:df:
                    31:03:7d:94:49:d0:b2:68:06:8b:6b:96:93:b0:34:
                    a0:14:c1:0a:7d:d3:9f:f0:7b:56:d7:56:52:45:a1:
                    95:e7:c8:24:2f:60:6e:59:d8:b4:83:37:7b:8c:28:
                    af:66:16:84:42:06:9e:f9:48:30:98:0a:64:76:ba:
                    49:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A7:8A:81:05:78:63:2B:C3:3F:71:61:81:DC:AD:B6:18:83:25:74
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/_qeKgQV4YyvDP3FhgdytthiDJXQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.59.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:42:f6:45:42:02:d7:65:61:55:09:ed:e7:60:b4:17:b3:7c:
         b1:59:33:fa:a8:48:e8:99:d6:4d:65:a5:e0:06:36:0b:68:e8:
         e4:2d:aa:60:80:06:46:7e:cc:9d:0f:37:a6:40:52:d4:1b:3f:
         0c:2c:4f:32:04:9f:d0:d0:15:eb:8c:c3:4b:c8:84:e2:37:4e:
         6e:89:94:d1:21:be:2f:ea:9c:3f:fd:a0:e8:f9:60:35:1a:a4:
         15:4e:56:46:e7:99:05:fc:10:d6:07:8a:25:3f:0f:32:c9:ad:
         d0:6e:cb:da:3b:c4:58:70:17:33:e0:0c:07:b9:55:f4:c0:fd:
         0a:77:00:98:8c:b6:80:6b:9b:52:2e:f0:b9:01:c4:d2:29:90:
         ad:42:ac:86:88:59:3e:80:55:29:42:3b:7c:e4:73:11:a8:c0:
         d9:9b:f1:ec:91:0b:2a:85:fa:26:c5:dd:2d:e3:b2:1e:d4:3b:
         cc:dc:14:fd:de:a7:c9:19:46:ba:e8:fe:02:68:25:97:22:80:
         53:dc:37:ec:16:51:09:2b:e6:c5:e8:9e:da:cf:44:19:27:e0:
         c4:c8:2c:eb:59:66:5a:2d:af:5e:c4:04:d8:a2:9a:9f:6d:65:
         03:48:9a:f0:15:65:0f:a8:48:a1:ea:df:10:dc:06:b7:95:6a:
         c8:68:bb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:21:11 2026 by rpki-client