This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/QnMddkeb3FVGZPBuGGKujauDOJs.roa
File:                     QnMddkeb3FVGZPBuGGKujauDOJs.roa (raw, json)
Hash identifier:          YogBzL16R0D5UDC4+LS6YXOzf2jmPz5hgi2hOD2LlH8=
Subject key identifier:   42:73:1D:76:47:9B:DC:55:46:64:F0:6E:18:62:AE:8D:AB:83:38:9B
Certificate issuer:       /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial:       019B7C1303278765EED5743BFA361FADB654
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/QnMddkeb3FVGZPBuGGKujauDOJs.roa
Signing time:             Fri 02 Jan 2026 00:19:39 +0000
ROA not before:           Fri 02 Jan 2026 00:19:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205218
IP address blocks:        193.246.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:03:27:87:65:ee:d5:74:3b:fa:36:1f:ad:b6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
        Validity
            Not Before: Jan  2 00:19:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=42731d76479bdc554664f06e1862ae8dab83389b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e5:2c:22:4f:49:50:5b:be:66:cd:7e:10:5e:
                    b7:64:08:d5:a7:fa:59:7c:a4:2b:bf:fd:5a:fc:15:
                    51:30:d7:eb:b3:60:79:54:f9:f9:21:08:ea:a8:0f:
                    c3:98:79:b4:cf:76:3b:41:90:a3:db:bb:c9:7e:a2:
                    03:ed:23:de:74:cb:47:c7:8f:d2:6e:68:32:9a:28:
                    91:f0:54:56:47:9b:ba:2c:63:0c:4e:3f:20:e8:aa:
                    27:a9:1d:42:65:cb:21:3d:0b:12:e6:47:7a:d1:9a:
                    54:6d:7a:cf:59:fc:b2:a4:75:fe:51:18:00:db:49:
                    52:d1:00:9f:c2:e7:b9:29:b1:4f:0e:70:66:1d:09:
                    94:a9:23:b6:f0:d2:28:4d:e0:bf:b3:42:4a:46:e9:
                    98:e7:17:a3:7a:31:60:8a:7c:53:0e:1e:6b:88:f5:
                    d3:2a:21:51:56:ff:c7:85:ff:d9:7c:fa:a9:e9:7a:
                    9f:d5:c3:ea:75:6b:20:24:8b:68:78:31:05:d5:6e:
                    4c:dd:f9:0c:ac:fe:20:31:e1:5d:cc:98:12:d1:f8:
                    91:70:37:22:58:ca:66:8f:bb:5c:8e:f2:ea:fa:b9:
                    12:b7:ff:da:b6:34:e7:01:76:60:26:ec:1d:88:58:
                    35:c8:32:4b:b1:fc:85:43:95:c9:41:4b:b2:96:c8:
                    2c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:73:1D:76:47:9B:DC:55:46:64:F0:6E:18:62:AE:8D:AB:83:38:9B
            X509v3 Authority Key Identifier:
                keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/QnMddkeb3FVGZPBuGGKujauDOJs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.246.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:ea:9f:cc:77:96:0f:6f:c9:a0:5f:a1:ba:0e:78:b8:f4:9e:
         64:72:85:32:b8:66:e0:22:53:22:45:5d:a6:d3:4a:76:15:fb:
         8e:23:5f:e6:fa:42:fa:4d:36:a7:83:90:37:3c:39:6e:11:f0:
         97:b9:f9:6b:ae:65:a9:53:dc:54:ec:4a:d5:2f:77:a0:92:d4:
         cb:f3:f5:de:bb:db:ba:6b:c3:0c:6a:aa:f5:02:b2:dd:24:fe:
         a6:ba:6f:01:20:44:50:4e:9e:18:b2:5c:33:8d:46:bb:cd:50:
         1f:bc:70:41:9c:f5:2d:f3:9a:e3:d8:7a:86:de:e2:da:1c:d2:
         b6:5c:48:6e:29:32:49:ff:6c:e4:77:b5:9a:0e:fb:3d:76:1f:
         b3:89:46:38:c5:12:26:b7:15:4a:95:f7:ac:53:98:fb:48:d2:
         f9:9a:db:3e:e9:3f:ce:2b:b4:93:36:94:bb:59:4b:1a:9e:d7:
         86:60:95:02:28:3e:b1:66:3e:49:0c:25:7a:c3:7b:31:51:9b:
         94:16:19:1b:5e:67:35:cc:cb:5c:65:f5:10:18:a0:d4:a7:4e:
         d3:b6:b6:2e:f5:e8:1a:8e:62:f6:98:4e:55:71:c4:3c:28:23:
         a1:23:45:00:30:b4:e8:57:4f:dd:01:13:64:d7:37:53:ed:1b:
         0a:5c:58:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 17:44:25 2026 by rpki-client