This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/Q92n5As_StLfCEOsCZRxLPjQigk.roa
File:                     Q92n5As_StLfCEOsCZRxLPjQigk.roa (raw, json)
Hash identifier:          m0A5cImf1wfkQyI07Q9zPZS2LIiSLajm2W221r5jirk=
Subject key identifier:   43:DD:A7:E4:0B:3F:4A:D2:DF:08:43:AC:09:94:71:2C:F8:D0:8A:09
Certificate issuer:       /CN=e6bb4b9e8df6d664efcb77b410415c834a617782
Certificate serial:       019B7AC900FF483A963499ED0462DF5B92FB
Authority key identifier: E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/Q92n5As_StLfCEOsCZRxLPjQigk.roa
Signing time:             Thu 01 Jan 2026 18:19:11 +0000
ROA not before:           Thu 01 Jan 2026 18:19:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214517
IP address blocks:        2001:678:3b4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:00:ff:48:3a:96:34:99:ed:04:62:df:5b:92:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6bb4b9e8df6d664efcb77b410415c834a617782
        Validity
            Not Before: Jan  1 18:19:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=43dda7e40b3f4ad2df0843ac0994712cf8d08a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:02:00:02:68:8e:95:4a:bf:fb:ec:c6:10:c6:
                    d8:3a:82:9b:31:43:b4:33:4a:17:5d:78:30:d8:0f:
                    df:40:0a:4f:ce:f8:5a:21:aa:ab:ff:f6:a7:03:c7:
                    54:72:92:ca:95:5a:00:30:a1:77:a0:e5:d3:13:96:
                    2e:5c:05:17:2b:c0:f9:35:a5:6f:cf:9e:ad:83:68:
                    2f:aa:00:53:6b:bf:d4:e0:96:3b:7c:84:e7:40:34:
                    05:4f:cb:97:70:9b:9b:d3:f9:f8:ee:98:19:fa:fd:
                    62:97:bb:ff:20:b5:1a:c0:cb:dd:35:21:59:5c:b3:
                    c8:f4:67:25:1e:9b:67:cb:a1:91:4c:71:0f:31:1d:
                    e2:66:9f:ea:6b:ee:3b:6d:00:47:51:0a:c9:58:45:
                    9d:09:56:6d:a7:19:68:0b:5c:d1:4c:10:b1:3e:ba:
                    b0:7b:27:52:9d:50:04:c3:8d:bd:3e:ce:f4:14:f1:
                    5d:54:0d:3a:13:91:88:10:65:3d:25:4c:ce:ce:fc:
                    0a:a0:0b:09:b8:e3:ad:de:7b:6c:3f:ce:99:79:4d:
                    23:ef:32:fd:c9:ff:a9:17:f7:42:ed:4b:53:45:00:
                    d5:1e:11:66:6e:45:c0:dd:e3:62:65:f1:b0:ec:f4:
                    0d:56:37:22:49:55:9c:ec:15:62:c9:58:8c:78:52:
                    5c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DD:A7:E4:0B:3F:4A:D2:DF:08:43:AC:09:94:71:2C:F8:D0:8A:09
            X509v3 Authority Key Identifier:
                keyid:E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/Q92n5As_StLfCEOsCZRxLPjQigk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:3b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:b4:6f:7f:ab:0d:3b:0d:3d:ee:00:0b:cb:3f:37:39:4e:b1:
         61:17:05:b1:12:78:0c:89:ca:95:71:da:67:9b:28:5a:4d:75:
         19:2f:6b:70:f2:4d:f3:da:1a:50:9c:71:08:b1:8c:aa:aa:03:
         42:0e:83:5d:11:4e:cc:6a:e4:aa:9a:54:ed:63:0a:87:d5:d4:
         cc:79:06:2d:e0:53:9a:47:6a:f3:88:9f:5d:91:68:c4:95:e4:
         b5:dc:3b:f6:30:83:cf:a0:d7:49:89:1d:6e:09:f7:98:2b:8e:
         c4:b6:6a:82:92:46:df:d4:68:b3:c1:d5:b4:d0:3b:21:84:37:
         9c:e3:89:18:8b:92:e5:23:37:6a:86:52:91:ef:89:b2:04:4f:
         6f:20:0f:ab:3d:b3:51:e4:b8:16:d6:96:a3:ab:af:74:9c:42:
         ef:e9:73:b2:9f:8e:b0:2d:f8:e4:e1:d4:e9:f3:61:51:6d:06:
         a1:e3:fc:d3:95:cb:a2:d6:ac:f5:c0:1a:ac:4c:05:5e:33:98:
         76:ba:b3:90:69:7d:55:6a:5e:fb:f1:6b:04:b9:87:dd:d1:2a:
         bf:6e:77:b2:fe:e5:16:bf:6b:46:51:e5:61:eb:15:66:f1:f5:
         a4:d5:7f:55:75:23:33:17:bf:4e:e1:09:ac:ef:eb:54:98:81:
         d7:51:cc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:01:41 2026 by rpki-client