This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/q-dlc0RnKGXQQKCzBekmdoQdLBc.roa
File:                     q-dlc0RnKGXQQKCzBekmdoQdLBc.roa (raw, json)
Hash identifier:          BVWF+eiynzBU7NWIb18jSV9kqUVVHyUBCS+BjOc+ZKU=
Subject key identifier:   AB:E7:65:73:44:67:28:65:D0:40:A0:B3:05:E9:26:76:84:1D:2C:17
Certificate issuer:       /CN=6319295d3ada7e6eb329844961caa1002caa4d86
Certificate serial:       019B7C80652C979747774FE3395A68F11FB2
Authority key identifier: 63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/q-dlc0RnKGXQQKCzBekmdoQdLBc.roa
Signing time:             Fri 02 Jan 2026 02:19:07 +0000
ROA not before:           Fri 02 Jan 2026 02:19:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199131
IP address blocks:        91.244.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:65:2c:97:97:47:77:4f:e3:39:5a:68:f1:1f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6319295d3ada7e6eb329844961caa1002caa4d86
        Validity
            Not Before: Jan  2 02:19:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=abe7657344672865d040a0b305e92676841d2c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a8:e0:a6:fa:06:2e:54:09:3d:fe:48:f3:16:
                    3f:b9:8c:d1:87:2b:9e:0e:10:fa:6b:54:40:39:73:
                    0c:e5:9b:02:e3:cc:99:66:a3:17:03:30:54:c9:3a:
                    de:60:3f:98:03:9b:e4:58:f2:0d:35:c1:e2:4b:a0:
                    e3:a6:bb:5d:0f:71:3e:42:73:7f:76:2c:6b:c8:5e:
                    8d:77:3b:3b:93:82:38:19:c7:f4:85:c9:ca:a0:6b:
                    fb:59:c9:f2:b8:87:22:76:52:34:ad:0b:b4:72:31:
                    fc:1d:b9:7f:80:91:ab:6c:44:c1:2e:cb:b8:76:9b:
                    16:8d:95:b9:e2:ad:aa:2b:a7:0e:78:d4:3a:41:2c:
                    ed:86:f1:24:86:b6:71:90:47:2e:82:9b:fc:90:c5:
                    95:d1:10:f7:5a:72:63:0b:a3:c5:fe:1a:e3:bc:e8:
                    94:fe:77:72:04:8e:a7:a3:de:36:cb:21:e8:ed:71:
                    60:b7:4b:da:81:a2:38:44:1a:ec:fe:08:90:f6:7d:
                    ee:ff:94:60:75:fc:d2:77:16:a4:ff:71:2f:fb:a9:
                    fa:de:4a:9e:1c:80:6e:7a:62:7c:e5:63:60:a9:08:
                    79:43:12:2e:28:a0:0d:56:64:51:46:8e:d2:4f:41:
                    4f:7d:5a:bd:13:61:aa:35:31:58:54:13:e6:a8:59:
                    eb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E7:65:73:44:67:28:65:D0:40:A0:B3:05:E9:26:76:84:1D:2C:17
            X509v3 Authority Key Identifier:
                keyid:63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/q-dlc0RnKGXQQKCzBekmdoQdLBc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.244.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:cd:e1:19:10:79:f8:4a:cd:14:80:3b:a3:ec:89:a7:1c:9a:
         01:bd:d0:06:ca:df:3d:fd:f5:14:4a:bd:31:22:e9:2b:f8:80:
         22:7a:ad:53:01:0c:39:dc:bb:20:50:59:a8:bb:a0:a1:05:1e:
         2a:86:50:fb:67:7c:d8:39:56:0f:e5:ee:c3:7d:63:ce:05:eb:
         b8:0e:71:b6:31:5d:0d:54:85:25:25:dc:9a:7e:94:ea:a0:0c:
         a9:dd:ad:44:2d:d2:e0:38:7e:21:b0:6c:2b:c9:4c:12:52:1f:
         a2:46:48:8d:1e:fc:39:99:b4:4a:2f:39:cb:8f:e0:32:71:7a:
         90:62:f6:53:c6:52:99:48:4e:ba:4c:07:04:10:97:a3:27:bf:
         4d:0a:ed:01:71:f0:7a:8b:1d:cd:12:ff:13:31:b9:23:19:5a:
         77:7e:f5:14:d3:4e:b2:ab:c0:9e:03:fe:8c:b8:f2:44:19:2d:
         d3:ca:8c:fa:32:a5:8a:76:ca:45:73:b7:d7:a6:7c:79:be:72:
         2f:3c:c7:db:05:f6:9a:a8:2b:67:f1:51:5c:4d:9d:b7:36:54:
         f6:55:f1:0c:4e:1d:47:ed:c7:56:4d:ce:fb:b2:a1:c6:e1:43:
         d5:52:3b:03:ef:0d:33:f0:5e:e6:5d:30:f3:3a:23:9a:01:19:
         ff:24:93:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8gGUsl5dHd0/jOVpo8R+yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMTkyOTVkM2FkYTdlNmViMzI5ODQ0OTYxY2FhMTAwMmNh
YTRkODYwHhcNMjYwMTAyMDIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmU3NjU3MzQ0NjcyODY1ZDA0MGEwYjMwNWU5MjY3Njg0MWQyYzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6jgpvoGLlQJPf5I8xY/uYzRhyue
DhD6a1RAOXMM5ZsC48yZZqMXAzBUyTreYD+YA5vkWPINNcHiS6DjprtdD3E+QnN/
dixryF6Ndzs7k4I4Gcf0hcnKoGv7WcnyuIcidlI0rQu0cjH8Hbl/gJGrbETBLsu4
dpsWjZW54q2qK6cOeNQ6QSzthvEkhrZxkEcugpv8kMWV0RD3WnJjC6PF/hrjvOiU
/ndyBI6no942yyHo7XFgt0vagaI4RBrs/giQ9n3u/5RgdfzSdxak/3Ev+6n63kqe
HIBuemJ85WNgqQh5QxIuKKANVmRRRo7ST0FPfVq9E2GqNTFYVBPmqFnrDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKvnZXNEZyhl0ECgswXpJnaEHSwXMB8GA1UdIwQY
MBaAFGMZKV062n5usymESWHKoQAsqk2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXhrcFhUcmFmbTZ6S1lSSlljcWhBQ3lxVFlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yNmNjOTItOGJmNy00OGUwLTkzN2Et
N2U0ZTJmOGI1YjE2LzEvcS1kbGMwUm5LR1hRUUtDekJla21kb1FkTEJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8yNmNjOTItOGJmNy00OGUwLTkzN2EtN2U0ZTJmOGI1YjE2
LzEvWXhrcFhUcmFmbTZ6S1lSSlljcWhBQ3lxVFlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/TlMA0G
CSqGSIb3DQEBCwUAA4IBAQCOzeEZEHn4Ss0UgDuj7ImnHJoBvdAGyt89/fUUSr0x
Iukr+IAieq1TAQw53LsgUFmou6ChBR4qhlD7Z3zYOVYP5e7DfWPOBeu4DnG2MV0N
VIUlJdyafpTqoAyp3a1ELdLgOH4hsGwryUwSUh+iRkiNHvw5mbRKLznLj+AycXqQ
YvZTxlKZSE66TAcEEJejJ79NCu0BcfB6ix3NEv8TMbkjGVp3fvUU006yq8CeA/6M
uPJEGS3Tyoz6MqWKdspFc7fXpnx5vnIvPMfbBfaaqCtn8VFcTZ23NlT2VfEMTh1H
7cdWTc77sqHG4UPVUjsD7w0z8F7mXTDzOiOaARn/JJOe
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:15:36 2026 by rpki-client