This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/q1BEcW3yDL01Np_jgFRFv-1DHcU.roa
File:                     q1BEcW3yDL01Np_jgFRFv-1DHcU.roa (raw, json)
Hash identifier:          Y97YBZ6a5ecPlLjsFAxO1R/MZtwx3Kn20kQbNzjd2go=
Subject key identifier:   AB:50:44:71:6D:F2:0C:BD:35:36:9F:E3:80:54:45:BF:ED:43:1D:C5
Certificate issuer:       /CN=57d993319dcc9297694318b246eb36f55ff1370e
Certificate serial:       019B7EA6E7143667CB54477938A8DF7A76C4
Authority key identifier: 57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/q1BEcW3yDL01Np_jgFRFv-1DHcU.roa
Signing time:             Fri 02 Jan 2026 12:20:25 +0000
ROA not before:           Fri 02 Jan 2026 12:20:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41692
IP address blocks:        194.54.92.0/22 maxlen: 22
                          2001:7f8:3a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:e7:14:36:67:cb:54:47:79:38:a8:df:7a:76:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d993319dcc9297694318b246eb36f55ff1370e
        Validity
            Not Before: Jan  2 12:20:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ab5044716df20cbd35369fe3805445bfed431dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b6:57:1a:0b:58:f8:d3:90:16:6b:63:60:19:
                    46:64:f6:a1:bd:97:f5:bf:a2:5b:32:2e:1e:92:fd:
                    e4:28:7e:b8:f1:e9:a4:31:e3:4d:e9:8c:5a:2a:86:
                    85:31:d6:eb:9f:5e:11:6c:9b:ac:91:38:77:09:df:
                    de:c5:9f:67:18:f8:71:3d:00:b6:36:18:4f:23:25:
                    d4:86:25:95:da:9e:2a:d9:49:ef:e8:97:db:6b:a9:
                    43:a2:5a:dd:da:3f:ed:99:14:fc:e3:26:d3:3b:86:
                    a0:bb:85:69:c5:0c:8e:ae:1d:2f:39:58:73:e4:47:
                    d2:26:d6:b8:6f:48:e9:de:ea:be:28:07:44:09:ce:
                    9b:f2:a9:f5:41:f8:ce:de:0b:1a:a3:24:49:13:7f:
                    75:68:c6:5a:e8:c8:a5:f5:e5:bb:65:e8:0d:2f:83:
                    6e:b3:fe:a0:99:0e:e6:b1:5b:b6:e3:96:aa:37:ba:
                    11:c2:47:a5:a7:3f:48:14:63:87:85:88:80:7d:e9:
                    a5:78:52:61:18:65:b4:da:8c:45:50:96:10:23:94:
                    b6:0a:b2:80:88:2b:88:77:0f:35:99:7b:e3:00:25:
                    26:58:b6:8b:91:de:0e:25:06:9f:e3:0c:08:ba:fb:
                    9e:35:9a:c8:d3:24:d5:40:01:9c:a1:c9:36:e3:09:
                    15:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:50:44:71:6D:F2:0C:BD:35:36:9F:E3:80:54:45:BF:ED:43:1D:C5
            X509v3 Authority Key Identifier:
                keyid:57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/q1BEcW3yDL01Np_jgFRFv-1DHcU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.54.92.0/22
                IPv6:
                  2001:7f8:3a::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:85:aa:d6:7e:d5:94:7d:e5:4d:83:6a:d2:03:21:aa:ee:11:
         e2:90:c1:d5:2e:bc:ea:f7:0c:74:81:f9:3a:39:57:de:95:0e:
         51:0c:0c:3d:94:2c:21:c7:df:ba:2c:65:9b:e9:43:01:c0:f6:
         1c:3f:c6:1c:1e:ec:37:40:5e:5f:1e:56:ba:fd:10:9c:1c:43:
         d3:2c:e3:79:57:22:20:36:f7:13:01:72:bf:c6:d0:35:66:8a:
         a5:6f:5b:45:55:52:bb:fd:81:96:9f:6d:3f:4f:f2:48:09:9f:
         e3:6c:12:96:2d:87:fe:21:e0:aa:f4:ee:b3:f4:2e:19:77:4f:
         17:35:df:50:00:01:f0:e4:cf:b5:95:39:c3:da:cd:c9:76:83:
         94:5a:9c:49:33:97:cc:fc:3a:a3:bb:50:d1:40:7a:f6:f0:21:
         10:62:60:32:1f:3c:95:a4:33:ee:56:dd:9e:8a:34:68:a3:dc:
         3d:bf:5e:62:df:2e:57:e7:f9:58:76:48:f4:22:98:51:d2:d3:
         b8:40:76:b3:85:a7:50:6a:0e:28:77:d3:24:dc:75:0a:02:91:
         99:09:60:f3:9b:3e:9c:b4:db:5c:49:c5:29:31:05:ca:32:63:
         d0:8c:f1:f5:78:12:76:f3:6b:5d:db:26:9a:2f:4f:3f:9a:87:
         f3:17:20:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:17 2026 by rpki-client