This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/cQeZ1_q5JNwz0pMRutkcBufg2Ew.roa
File:                     cQeZ1_q5JNwz0pMRutkcBufg2Ew.roa (raw, json)
Hash identifier:          BXcSci66lT63ijcP93PpzmARSVHVmydFOb78pUokZu4=
Subject key identifier:   71:07:99:D7:FA:B9:24:DC:33:D2:93:11:BA:D9:1C:06:E7:E0:D8:4C
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019B7B359B7E4660F4858B265692498CD48E
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/cQeZ1_q5JNwz0pMRutkcBufg2Ew.roa
Signing time:             Thu 01 Jan 2026 20:17:49 +0000
ROA not before:           Thu 01 Jan 2026 20:17:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214641
IP address blocks:        80.96.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:9b:7e:46:60:f4:85:8b:26:56:92:49:8c:d4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:17:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=710799d7fab924dc33d29311bad91c06e7e0d84c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:da:30:37:c2:73:20:a6:56:36:e2:d1:71:1b:
                    cf:7c:bf:3b:7c:3c:99:32:15:43:0e:e9:e3:dd:ba:
                    d6:9f:4e:0b:04:41:50:35:91:38:e5:98:70:12:43:
                    b2:ca:d6:ec:14:dd:0e:a4:0a:0c:70:22:69:6a:aa:
                    9b:42:c8:47:0d:9e:c3:d6:41:92:b7:81:e1:67:27:
                    f8:5c:2a:7f:87:fe:d7:a5:0b:00:05:ce:fd:04:73:
                    01:bb:dc:bc:7a:2b:b4:5a:38:ae:58:99:d3:f6:b1:
                    d2:4b:03:6b:71:30:6f:ce:75:7c:74:ee:4c:03:e0:
                    58:1e:34:b3:eb:b9:74:a6:d7:52:be:dd:18:a6:55:
                    7d:5a:39:40:76:a8:a3:2c:53:42:68:1a:47:9a:de:
                    d2:1a:a8:f8:ae:a8:4f:34:66:d7:32:5a:45:40:2d:
                    d7:52:65:f9:87:0e:91:43:f5:ad:61:3c:10:9e:bc:
                    0c:da:89:0b:b3:23:a6:f1:d1:1c:80:38:cc:48:fd:
                    86:98:0b:92:ca:8a:da:a0:0f:b4:33:d9:0b:20:00:
                    4e:9e:ff:28:2c:0b:fb:4e:23:74:34:cd:40:12:1e:
                    56:87:04:f2:de:e8:a9:70:60:4d:ef:6f:b0:e9:1f:
                    bd:90:b7:46:07:14:73:50:91:8c:8d:32:0a:c7:a8:
                    85:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:07:99:D7:FA:B9:24:DC:33:D2:93:11:BA:D9:1C:06:E7:E0:D8:4C
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/cQeZ1_q5JNwz0pMRutkcBufg2Ew.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:21:2e:38:b3:89:da:b6:be:8f:3b:14:55:1f:80:9d:d8:0c:
         cc:f5:88:24:31:59:c0:b8:57:20:80:99:b6:05:70:36:33:21:
         65:90:30:ef:5a:cc:47:ac:4b:0a:c3:c4:44:23:e2:24:40:3e:
         45:c1:6f:ca:e6:bb:1f:b0:31:e6:4f:76:31:db:20:37:27:61:
         0e:af:d0:8c:18:20:6a:78:c9:e3:0a:39:a6:12:6f:fb:af:54:
         35:2f:ef:57:44:93:3b:46:c6:a1:6c:90:9b:3f:70:08:27:ee:
         2e:c1:87:58:c2:69:f9:95:c6:42:a3:88:de:98:0e:fb:a4:f1:
         0f:3a:f0:4b:ab:c0:29:96:6c:29:4a:4b:84:07:ea:b4:24:4b:
         60:c1:5b:bd:d5:0b:a6:22:e4:77:32:a2:43:fc:fd:a6:96:04:
         93:ee:89:5f:c5:e5:02:17:ed:cb:35:17:6b:82:f7:6a:d9:73:
         84:d3:3b:de:7e:65:bb:8d:6c:de:e1:dc:6c:97:8b:f1:5a:e0:
         1f:97:ad:ca:3c:06:1e:78:44:c8:20:fc:09:03:56:a3:c2:cd:
         ad:16:f2:7a:13:93:70:69:f2:da:1e:05:a0:d5:d6:8c:e7:ee:
         9d:e0:a9:65:1c:a4:50:02:cb:22:98:bb:83:9e:74:bc:b7:d8:
         72:fc:ee:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:49:13 2026 by rpki-client