This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/GQuqiJCjADcOHZotsrXYJd_Wc00.roa
File:                     GQuqiJCjADcOHZotsrXYJd_Wc00.roa (raw, json)
Hash identifier:          L+5tYtA+LDnIm5xyBc0OjV0H0SUAJm6feygTs+2eqRo=
Subject key identifier:   19:0B:AA:88:90:A3:00:37:0E:1D:9A:2D:B2:B5:D8:25:DF:D6:73:4D
Certificate issuer:       /CN=be9fc3884705c4aedcfe7a4d17ddb752e1fe6198
Certificate serial:       019B7E38CE392D55B350F5BB08DA3950974F
Authority key identifier: BE:9F:C3:88:47:05:C4:AE:DC:FE:7A:4D:17:DD:B7:52:E1:FE:61:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/GQuqiJCjADcOHZotsrXYJd_Wc00.roa
Signing time:             Fri 02 Jan 2026 10:20:10 +0000
ROA not before:           Fri 02 Jan 2026 10:20:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212737
IP address blocks:        2001:67c:2de0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:ce:39:2d:55:b3:50:f5:bb:08:da:39:50:97:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9fc3884705c4aedcfe7a4d17ddb752e1fe6198
        Validity
            Not Before: Jan  2 10:20:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=190baa8890a300370e1d9a2db2b5d825dfd6734d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:a4:57:cc:9c:af:58:60:24:52:cf:18:b4:
                    fa:69:b0:ce:d3:4d:f7:74:09:0f:57:3a:43:4b:76:
                    b9:56:f0:a8:d2:4d:5f:59:a9:6c:c5:aa:c4:0d:ad:
                    7a:18:b8:6c:67:45:1a:e4:4d:d2:90:b9:6b:4b:16:
                    06:bc:f9:5b:01:88:bd:e9:55:62:53:1b:c0:2a:12:
                    4f:37:e8:f4:8d:31:9d:1b:18:f0:1d:41:55:cc:e3:
                    05:65:fb:dc:69:d1:2d:97:48:b3:d1:1e:77:eb:49:
                    57:5f:ae:c8:a7:04:0f:34:03:89:46:d6:da:81:c7:
                    e1:6d:ae:f5:ed:e4:02:d5:90:c5:b5:cf:a5:ab:2e:
                    af:e8:71:58:74:bf:2b:3a:b5:59:51:70:dc:e0:41:
                    c6:61:5d:1f:d3:10:44:99:28:e5:f3:39:4e:74:6a:
                    d5:38:83:1d:6e:02:d5:55:82:40:13:15:cb:39:37:
                    78:cb:6a:8f:8d:8d:f7:fa:2d:b8:43:aa:ea:22:cf:
                    e6:f5:81:ce:07:ca:c6:67:0e:59:5c:5c:1c:a4:32:
                    21:83:1e:45:7d:7d:ab:b7:fe:e6:0c:cc:3a:4c:42:
                    46:86:ce:98:66:3b:db:af:6a:85:01:41:da:5e:4e:
                    66:32:f6:3a:5c:bb:4a:bf:01:06:6e:25:b8:8f:3f:
                    12:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0B:AA:88:90:A3:00:37:0E:1D:9A:2D:B2:B5:D8:25:DF:D6:73:4D
            X509v3 Authority Key Identifier:
                keyid:BE:9F:C3:88:47:05:C4:AE:DC:FE:7A:4D:17:DD:B7:52:E1:FE:61:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/GQuqiJCjADcOHZotsrXYJd_Wc00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2de0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:12:e4:94:7d:1f:99:1c:a5:c7:69:2e:8e:52:0b:e5:a4:7c:
         58:a9:69:57:25:48:07:74:ef:e3:c3:ac:6e:63:80:34:91:98:
         47:53:00:c7:82:ce:8f:ac:1a:be:da:eb:4e:d3:81:6c:60:79:
         b7:2e:64:97:cc:d3:9d:7e:f8:f0:5f:8b:38:54:31:fb:b0:64:
         14:30:ed:60:7c:e3:aa:e8:c7:09:80:4d:ad:ad:17:0f:f4:73:
         ab:4a:37:7d:c0:b7:10:fa:35:14:5c:6e:62:59:ca:e8:41:74:
         06:4b:8f:95:f6:85:c1:ce:c4:50:4f:33:8d:c6:1d:cd:c7:62:
         15:69:31:0f:b2:33:ea:61:a7:9a:74:19:cd:d2:ea:53:05:15:
         21:11:57:1e:c2:53:f8:cb:18:4d:e1:33:10:e6:03:90:2b:b0:
         c7:5f:48:df:d7:52:49:2d:cc:cb:38:d6:f8:3b:d5:13:e8:9f:
         3c:ab:f5:7f:b8:7a:ef:bc:98:08:6f:26:a9:55:48:cd:c0:28:
         c9:23:4c:bc:6d:54:31:37:e4:5f:07:d9:a3:42:de:6f:97:53:
         d6:ef:45:4b:c9:41:93:36:e0:aa:77:bd:ab:ee:35:1e:c2:5b:
         c5:1d:cc:a6:88:0e:cc:91:6c:e4:f5:b6:e5:3b:33:c1:3f:b1:
         e1:d8:cc:ed
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt+OM45LVWzUPW7CNo5UJdPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlOWZjMzg4NDcwNWM0YWVkY2ZlN2E0ZDE3ZGRiNzUyZTFm
ZTYxOTgwHhcNMjYwMTAyMTAyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTBiYWE4ODkwYTMwMDM3MGUxZDlhMmRiMmI1ZDgyNWRmZDY3MzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ6kV8ycr1hgJFLPGLT6abDO0033
dAkPVzpDS3a5VvCo0k1fWalsxarEDa16GLhsZ0Ua5E3SkLlrSxYGvPlbAYi96VVi
UxvAKhJPN+j0jTGdGxjwHUFVzOMFZfvcadEtl0iz0R5360lXX67IpwQPNAOJRtba
gcfhba717eQC1ZDFtc+lqy6v6HFYdL8rOrVZUXDc4EHGYV0f0xBEmSjl8zlOdGrV
OIMdbgLVVYJAExXLOTd4y2qPjY33+i24Q6rqIs/m9YHOB8rGZw5ZXFwcpDIhgx5F
fX2rt/7mDMw6TEJGhs6YZjvbr2qFAUHaXk5mMvY6XLtKvwEGbiW4jz8SgwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBkLqoiQowA3Dh2aLbK12CXf1nNNMB8GA1UdIwQY
MBaAFL6fw4hHBcSu3P56TRfdt1Lh/mGYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnBfRGlFY0Z4SzdjX25wTkY5MjNVdUgtWVpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC82MjIyZjEtZjRkYy00NzA0LWI5NDYt
MTkwNmE0YTFmOTkzLzEvR1F1cWlKQ2pBRGNPSFpvdHNyWFlKZF9XYzAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC82MjIyZjEtZjRkYy00NzA0LWI5NDYtMTkwNmE0YTFmOTkz
LzEvdnBfRGlFY0Z4SzdjX25wTkY5MjNVdUgtWVpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC3g
MA0GCSqGSIb3DQEBCwUAA4IBAQAqEuSUfR+ZHKXHaS6OUgvlpHxYqWlXJUgHdO/j
w6xuY4A0kZhHUwDHgs6PrBq+2utO04FsYHm3LmSXzNOdfvjwX4s4VDH7sGQUMO1g
fOOq6McJgE2trRcP9HOrSjd9wLcQ+jUUXG5iWcroQXQGS4+V9oXBzsRQTzONxh3N
x2IVaTEPsjPqYaeadBnN0upTBRUhEVcewlP4yxhN4TMQ5gOQK7DHX0jf11JJLczL
ONb4O9UT6J88q/V/uHrvvJgIbyapVUjNwCjJI0y8bVQxN+RfB9mjQt5vl1PW70VL
yUGTNuCqd72r7jUewlvFHcymiA7MkWzk9bblOzPBP7Hh2Mzt
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:26:59 2026 by rpki-client