This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/qXdelnsdyQRcPFuVDg1r9uhkMb8.roa
File:                     qXdelnsdyQRcPFuVDg1r9uhkMb8.roa (raw, json)
Hash identifier:          Zz/NJsQ5buSND3nAuKQK+Iksl6KnLu1EGEXtAA7iwCY=
Subject key identifier:   A9:77:5E:96:7B:1D:C9:04:5C:3C:5B:95:0E:0D:6B:F6:E8:64:31:BF
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       019B7F82D09316788E4EE780C89E42729D2C
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/qXdelnsdyQRcPFuVDg1r9uhkMb8.roa
Signing time:             Fri 02 Jan 2026 16:20:38 +0000
ROA not before:           Fri 02 Jan 2026 16:20:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208328
IP address blocks:        194.56.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 07:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:82:d0:93:16:78:8e:4e:e7:80:c8:9e:42:72:9d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  2 16:20:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a9775e967b1dc9045c3c5b950e0d6bf6e86431bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:10:c2:da:b6:73:a3:d2:62:a6:d8:e1:74:a6:
                    d3:e7:a4:d0:6f:79:43:8a:8f:c9:aa:e8:d6:d4:07:
                    1d:8c:cf:a9:4f:c2:62:e0:7d:31:7b:2a:85:0a:d9:
                    d8:a3:84:38:93:4e:b0:69:05:b3:47:cf:c9:a5:67:
                    d2:10:c7:0c:f1:84:af:c6:2a:b6:5c:c0:a8:52:e7:
                    db:97:e5:2a:e8:e5:a9:df:b7:f3:e7:02:21:02:da:
                    3f:6d:3b:30:bb:b8:30:da:33:de:24:a9:37:f8:f0:
                    15:d5:20:ea:2e:87:f6:f7:e9:f5:4d:2a:ab:8d:a0:
                    1a:b5:ed:42:52:12:5e:b2:17:d5:19:98:e8:fe:5b:
                    a0:6b:97:fc:fe:f5:20:13:74:96:a8:79:18:ee:ca:
                    1b:6c:cb:ca:b3:6e:18:06:c2:34:c1:c1:6a:07:9d:
                    c7:f8:62:ad:40:09:e4:31:f7:ad:ec:1f:55:8d:83:
                    3d:f2:ad:31:9a:01:87:6a:cb:d9:93:8e:c0:23:c1:
                    d0:e8:3a:2e:d4:93:be:62:58:ff:ce:9c:f3:b8:a3:
                    ea:d3:1e:f0:5a:97:18:55:0c:d0:91:c9:b1:63:a4:
                    23:85:66:d8:d8:32:31:c4:84:7c:10:a8:91:b4:43:
                    df:48:fb:49:56:55:0d:5a:c9:a9:9a:6b:b1:b5:42:
                    7f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:77:5E:96:7B:1D:C9:04:5C:3C:5B:95:0E:0D:6B:F6:E8:64:31:BF
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/qXdelnsdyQRcPFuVDg1r9uhkMb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.56.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:d5:aa:1b:22:9d:77:c3:1f:db:c3:ba:62:64:17:bc:0c:66:
         d0:8d:b2:36:26:24:79:27:76:a3:28:7c:69:d3:5d:bd:55:0f:
         8a:9f:0c:0a:65:6f:55:e8:9d:3c:9c:9a:62:32:8e:44:d4:47:
         65:d2:87:d4:e0:75:aa:db:6e:6d:47:3c:d3:ad:de:fb:f0:c0:
         12:5c:e7:10:cb:b9:99:70:1f:3f:d5:f8:16:1d:c4:35:b5:64:
         5d:76:9b:68:9c:9d:39:3a:1f:0d:a8:0a:0f:d9:7f:98:a8:30:
         93:0d:da:fd:50:51:19:9f:a4:54:81:9f:d4:51:c6:b5:ea:51:
         e9:c5:9e:43:47:08:5f:61:29:1d:e4:c2:c5:20:b5:53:99:41:
         10:ce:a3:f1:ee:cf:15:a3:5e:20:1e:57:01:d4:c6:1d:73:d3:
         df:e1:e3:f4:2b:8f:b2:17:83:42:6f:e4:75:fb:0e:f9:8b:55:
         d0:1e:98:6e:e1:1f:8c:88:70:6c:bf:99:c8:cb:2c:f6:b9:eb:
         16:90:f6:02:00:f9:75:23:2b:9c:e3:2b:c4:64:93:0c:60:80:
         0f:92:7e:7b:81:e5:c9:24:95:ce:a1:bb:b7:67:6a:6f:8d:19:
         81:09:84:bd:8f:ea:50:42:15:8d:e1:c3:f4:7c:8f:db:7c:21:
         53:dc:0e:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/gtCTFniOTueAyJ5Ccp0sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjYwMTAyMTYyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTc3NWU5NjdiMWRjOTA0NWMzYzViOTUwZTBkNmJmNmU4NjQzMWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhDC2rZzo9JiptjhdKbT56TQb3lD
io/JqujW1AcdjM+pT8Ji4H0xeyqFCtnYo4Q4k06waQWzR8/JpWfSEMcM8YSvxiq2
XMCoUufbl+Uq6OWp37fz5wIhAto/bTswu7gw2jPeJKk3+PAV1SDqLof29+n1TSqr
jaAate1CUhJeshfVGZjo/luga5f8/vUgE3SWqHkY7sobbMvKs24YBsI0wcFqB53H
+GKtQAnkMfet7B9VjYM98q0xmgGHasvZk47AI8HQ6Dou1JO+Ylj/zpzzuKPq0x7w
WpcYVQzQkcmxY6QjhWbY2DIxxIR8EKiRtEPfSPtJVlUNWsmpmmuxtUJ/9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKl3XpZ7HckEXDxblQ4Na/boZDG/MB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvcVhkZWxuc2R5UVJjUEZ1VkRnMXI5dWhrTWI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjjgMA0G
CSqGSIb3DQEBCwUAA4IBAQDA1aobIp13wx/bw7piZBe8DGbQjbI2JiR5J3ajKHxp
0129VQ+KnwwKZW9V6J08nJpiMo5E1Edl0ofU4HWq225tRzzTrd778MASXOcQy7mZ
cB8/1fgWHcQ1tWRddptonJ05Oh8NqAoP2X+YqDCTDdr9UFEZn6RUgZ/UUca16lHp
xZ5DRwhfYSkd5MLFILVTmUEQzqPx7s8Vo14gHlcB1MYdc9Pf4eP0K4+yF4NCb+R1
+w75i1XQHphu4R+MiHBsv5nIyyz2uesWkPYCAPl1Iyuc4yvEZJMMYIAPkn57geXJ
JJXOobu3Z2pvjRmBCYS9j+pQQhWN4cP0fI/bfCFT3A6V
-----END CERTIFICATE-----
Generated at Tue Jan 20 15:19:05 2026 by rpki-client