This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/qzDVPJjwkiKMmIw2RcHgiamnABM.roa
File:                     qzDVPJjwkiKMmIw2RcHgiamnABM.roa (raw, json)
Hash identifier:          xT+W6De5eWZz4XKVbRVPuP+LFXCQC6a/MFcFgjxi2KU=
Subject key identifier:   AB:30:D5:3C:98:F0:92:22:8C:98:8C:36:45:C1:E0:89:A9:A7:00:13
Certificate issuer:       /CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Certificate serial:       019B76EB86D4619D8A771A929E5F94A1D193
Authority key identifier: 2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/qzDVPJjwkiKMmIw2RcHgiamnABM.roa
Signing time:             Thu 01 Jan 2026 00:18:25 +0000
ROA not before:           Thu 01 Jan 2026 00:18:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56426
IP address blocks:        178.215.144.0/20 maxlen: 20
                          178.215.144.0/24 maxlen: 24
                          178.215.145.0/24 maxlen: 24
                          178.215.146.0/24 maxlen: 24
                          178.215.147.0/24 maxlen: 24
                          178.215.148.0/24 maxlen: 24
                          178.215.149.0/24 maxlen: 24
                          178.215.150.0/24 maxlen: 24
                          178.215.151.0/24 maxlen: 24
                          178.215.152.0/24 maxlen: 24
                          178.215.153.0/24 maxlen: 24
                          178.215.154.0/24 maxlen: 24
                          178.215.155.0/24 maxlen: 24
                          178.215.156.0/24 maxlen: 24
                          178.215.157.0/24 maxlen: 24
                          178.215.158.0/24 maxlen: 24
                          178.215.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:86:d4:61:9d:8a:77:1a:92:9e:5f:94:a1:d1:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
        Validity
            Not Before: Jan  1 00:18:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ab30d53c98f092228c988c3645c1e089a9a70013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ba:3e:c3:22:b0:aa:74:4c:3a:a5:4b:82:84:
                    10:10:5b:a9:07:7e:ac:af:6e:c4:9f:5c:70:db:ff:
                    ea:76:e8:a7:e3:08:d3:15:8a:21:be:97:70:34:68:
                    e2:27:b4:66:2b:8b:e8:89:81:59:09:cf:c5:9e:ce:
                    55:0a:34:b6:f2:c9:ed:cc:7e:f4:99:20:f5:a5:d7:
                    4c:83:34:3c:3a:5a:81:e8:b3:66:77:79:ea:8c:2e:
                    d5:ea:e8:9c:b0:85:12:7e:26:4d:be:5d:9a:da:45:
                    37:6e:9f:7f:da:58:9c:aa:97:17:5e:29:ab:4f:99:
                    b9:d4:74:69:1a:86:64:cd:c9:33:a3:fe:e9:b9:6c:
                    e3:6c:3d:be:0d:4f:c2:c9:c5:66:ad:69:48:75:0e:
                    f3:26:14:12:6c:a4:36:fe:f3:48:4e:c4:2b:b8:97:
                    ad:72:d2:e4:0f:35:dd:9f:fb:e3:0b:e0:c4:ac:32:
                    07:d4:ab:b8:df:4a:24:a3:cb:0a:65:c9:e4:38:5e:
                    ba:68:89:aa:ea:71:36:3c:ab:7f:46:7f:f4:08:1f:
                    21:0b:3c:09:e3:e1:8a:6f:c8:dc:95:e5:4a:39:51:
                    01:bf:f3:f6:2d:1b:29:ff:30:5d:70:f1:ea:fd:46:
                    8d:99:74:42:75:1b:df:ae:49:3d:39:7a:89:4d:e0:
                    3e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:30:D5:3C:98:F0:92:22:8C:98:8C:36:45:C1:E0:89:A9:A7:00:13
            X509v3 Authority Key Identifier:
                keyid:2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/qzDVPJjwkiKMmIw2RcHgiamnABM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.215.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6b:58:2e:5f:bd:fd:e8:31:2c:eb:70:ec:35:74:f1:be:a5:2d:
         a7:5f:57:46:e6:cb:73:64:9b:64:0d:03:40:02:4f:c0:59:ae:
         f2:35:ce:c2:e0:b1:88:01:06:88:2f:2a:0d:44:46:71:95:07:
         fc:fe:42:f7:65:64:98:72:fa:3d:13:cf:be:0f:7e:7d:a5:86:
         4d:aa:6d:8d:1b:40:9a:0c:5c:1f:b7:70:21:42:e3:cf:01:27:
         68:09:8f:c8:b7:57:48:d9:53:3b:c0:02:2f:85:b6:d0:db:dd:
         b0:57:00:4d:9a:cd:d7:c7:3c:9d:91:67:d1:33:66:ec:c7:8f:
         b2:dc:98:34:9d:88:ca:1a:5e:ff:3c:08:ad:5b:bc:08:ec:3b:
         65:cf:24:f0:5d:dc:08:8a:02:0a:1f:2b:8a:d4:8f:a1:cd:d3:
         d9:90:45:95:13:f6:37:1e:8d:10:ee:f2:08:51:f9:d9:4f:30:
         30:63:d4:e2:5c:4f:19:15:b3:61:72:83:22:8e:3c:fa:42:f4:
         ca:1a:9c:e5:5b:27:c0:53:ea:05:46:c1:b6:f3:cb:72:32:92:
         59:41:06:7f:74:ec:6e:f2:b1:b9:45:e0:60:db:ad:92:3f:d3:
         9e:2e:85:97:c6:1e:6a:d5:99:9b:93:6f:d2:6b:57:70:d1:74:
         7b:bd:72:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:40:14 2026 by rpki-client