This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/turqiMI7RCL64rtwabusAU3h4Y4.roa
File:                     turqiMI7RCL64rtwabusAU3h4Y4.roa (raw, json)
Hash identifier:          D8Hw63u312sddbf+MqkyGnEXwFYQiMq9Y7E4Hhv9r4I=
Subject key identifier:   B6:EA:EA:88:C2:3B:44:22:FA:E2:BB:70:69:BB:AC:01:4D:E1:E1:8E
Certificate issuer:       /CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Certificate serial:       019B7910C80E5BFE55C2FD4833C5F799D428
Authority key identifier: F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/turqiMI7RCL64rtwabusAU3h4Y4.roa
Signing time:             Thu 01 Jan 2026 10:18:21 +0000
ROA not before:           Thu 01 Jan 2026 10:18:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57024
IP address blocks:        146.0.24.0/24 maxlen: 24
                          2a01:9680::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:c8:0e:5b:fe:55:c2:fd:48:33:c5:f7:99:d4:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f77390fc61608c01785d1a80685ae9e56a5b2583
        Validity
            Not Before: Jan  1 10:18:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b6eaea88c23b4422fae2bb7069bbac014de1e18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:47:00:23:69:6c:a2:43:5b:9a:63:b0:e9:c4:
                    4a:b9:6c:c1:87:2a:90:71:62:ae:59:30:de:a9:22:
                    8c:d9:20:6a:28:59:a1:39:8c:8d:1f:2a:1e:b7:f0:
                    32:03:8a:88:6a:4a:99:05:8c:5c:75:73:85:96:38:
                    4d:c5:30:52:13:bb:3c:dd:fd:bf:88:19:e8:b4:35:
                    77:7a:c6:4d:e4:04:46:5e:72:97:f0:6e:a4:ce:b7:
                    58:8f:8f:e4:94:46:36:84:55:08:40:23:e8:a1:51:
                    f8:bb:43:c1:1c:d8:1e:18:c2:53:1d:4c:eb:f8:9d:
                    ef:e3:14:9d:5b:81:60:4d:6b:c4:09:3d:fa:81:e6:
                    cf:91:f6:cc:f4:99:6b:c1:6c:ca:d5:07:b8:4c:6d:
                    d5:cc:eb:3b:6f:67:7d:b5:17:17:5f:b3:66:7a:cb:
                    52:f6:77:57:77:24:f1:50:38:5c:33:a8:89:6a:b9:
                    e9:f2:cf:59:ce:cd:da:4f:79:99:61:ea:56:21:f5:
                    7a:8d:3d:2f:9f:06:84:c9:7d:35:13:01:d3:bc:fd:
                    5c:d7:a4:99:2d:cb:eb:39:f4:8f:e5:7c:71:34:ef:
                    ea:c8:12:a3:9d:52:6e:0f:ab:c9:0c:d0:70:f9:b8:
                    53:01:ea:e4:ed:4d:cc:f8:86:26:d5:d7:9a:10:0f:
                    80:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EA:EA:88:C2:3B:44:22:FA:E2:BB:70:69:BB:AC:01:4D:E1:E1:8E
            X509v3 Authority Key Identifier:
                keyid:F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/turqiMI7RCL64rtwabusAU3h4Y4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.0.24.0/24
                IPv6:
                  2a01:9680::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:35:23:b9:fa:2f:c9:30:bf:94:01:0d:8f:1d:c3:6c:78:eb:
         bf:57:04:23:03:44:90:98:58:67:9a:bf:ec:d8:06:78:67:2f:
         c8:68:ec:30:f7:27:a1:c7:ef:11:e0:ff:c3:4e:fc:06:fb:b6:
         2b:8a:b5:1c:7b:0e:20:2f:20:b9:85:16:a1:d1:55:43:ef:fe:
         29:22:b9:dd:85:66:18:2d:d6:24:aa:04:45:01:8c:78:68:f8:
         4e:96:6f:7d:28:bf:9a:c3:2f:87:15:65:9b:1c:29:79:00:f3:
         ae:c6:d2:73:08:78:19:4f:44:03:ef:7f:5a:74:10:44:14:d7:
         bf:88:0b:a1:5d:48:5a:bb:0f:d1:4e:95:2b:61:09:a5:0c:33:
         89:c1:6d:ac:fb:b5:09:60:03:37:e5:df:8a:72:be:08:34:cb:
         46:e2:29:b4:91:0b:1f:e6:12:de:43:44:eb:8b:4a:68:cd:69:
         c7:8f:90:ca:1a:1d:0a:45:d0:91:44:53:11:05:30:0b:b9:10:
         6d:5a:f3:e4:33:d8:12:ad:54:6b:1b:9a:67:d2:6c:e4:55:0f:
         98:06:8d:06:f3:7a:d7:a1:1d:38:f5:d2:c5:5e:db:7f:5b:7a:
         a5:78:59:74:72:00:e0:25:d2:1f:18:89:b7:6d:47:ba:ad:68:
         eb:dd:a6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:01:37 2026 by rpki-client