This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/qbbxFuzSkULQOBICM7rqsaqrwu4.roa
File:                     qbbxFuzSkULQOBICM7rqsaqrwu4.roa (raw, json)
Hash identifier:          hvKhotK2pMOwPjulJduMi4iCjCSu8N/+Goyf1aqun7Y=
Subject key identifier:   A9:B6:F1:16:EC:D2:91:42:D0:38:12:02:33:BA:EA:B1:AA:AB:C2:EE
Certificate issuer:       /CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Certificate serial:       019B783542DB27ECFDBB9F7533520B93976A
Authority key identifier: 83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/qbbxFuzSkULQOBICM7rqsaqrwu4.roa
Signing time:             Thu 01 Jan 2026 06:18:34 +0000
ROA not before:           Thu 01 Jan 2026 06:18:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44477
IP address blocks:        176.100.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:42:db:27:ec:fd:bb:9f:75:33:52:0b:93:97:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
        Validity
            Not Before: Jan  1 06:18:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a9b6f116ecd29142d038120233baeab1aaabc2ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3a:dd:5e:2e:37:ef:44:6b:86:65:de:af:0b:
                    68:8c:73:68:1b:4a:64:a5:f9:28:76:2b:8f:5b:a9:
                    14:79:21:b1:f9:f9:82:83:b1:5d:95:5c:bc:e1:75:
                    b6:0a:b4:99:fb:e4:a4:52:98:07:da:4a:00:ca:3e:
                    d7:02:b5:d4:e1:94:e5:4b:dc:25:bd:6c:c4:15:8c:
                    f5:1b:73:5f:05:bf:38:ca:a8:40:24:50:7a:59:8a:
                    07:bb:e7:47:07:1d:3f:41:27:aa:af:ea:8e:f6:9e:
                    28:b3:c4:0e:82:6c:a6:43:86:14:03:79:d0:aa:4d:
                    e9:c2:30:b1:d0:7d:37:57:df:cb:35:54:fd:9e:a3:
                    e8:e1:1c:41:9e:6e:7d:ef:a5:58:6c:e6:b7:59:f7:
                    9b:21:7c:e2:ed:0c:9b:79:ba:c9:cc:e7:23:a6:46:
                    0a:23:82:88:96:64:27:67:80:cf:e3:aa:57:d7:d2:
                    c5:dd:29:fd:c0:4b:fa:c8:9f:26:4d:55:ca:7f:a3:
                    35:b2:cf:11:49:8b:3f:81:49:47:d6:ff:68:f8:7b:
                    34:9c:0b:ed:12:34:c4:16:30:04:b1:e7:85:4a:bb:
                    e1:bd:9e:7b:df:41:6c:e4:d4:00:d1:bc:e4:cb:49:
                    c8:dd:8b:09:35:92:e8:5f:a8:56:a0:10:cc:6c:ae:
                    a7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B6:F1:16:EC:D2:91:42:D0:38:12:02:33:BA:EA:B1:AA:AB:C2:EE
            X509v3 Authority Key Identifier:
                keyid:83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/qbbxFuzSkULQOBICM7rqsaqrwu4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.100.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:e4:f0:df:80:24:1f:ac:a6:63:d0:25:f8:41:76:6c:32:74:
         1a:ce:af:bb:26:a8:2c:cd:30:7d:23:b8:63:5d:4c:21:69:11:
         cd:0c:ac:7c:65:cc:ea:d0:48:b7:4f:31:89:bc:37:b9:c4:c2:
         d0:5a:9b:47:c2:01:11:a6:93:36:88:ef:cd:34:b9:d1:24:aa:
         04:e4:8b:aa:c7:e9:b0:8e:2e:18:b7:ec:b5:84:36:9a:91:21:
         98:02:33:e0:30:d7:33:ed:51:fb:41:5f:c5:ad:99:15:e7:17:
         19:f6:0d:e5:26:80:81:4c:b3:17:e5:d4:f5:03:5f:e4:33:9a:
         f1:0c:d1:1e:2f:c1:04:7c:c7:65:46:7d:a8:b2:54:13:2f:27:
         ca:90:de:37:50:10:71:8a:36:98:7b:70:4d:c9:f4:04:43:5c:
         28:41:d7:7e:4b:f6:6e:71:f2:ad:0f:10:b1:74:a5:00:6e:95:
         7a:c7:be:75:e8:9c:81:25:18:f3:29:1b:5a:fb:26:f3:ed:e1:
         62:20:94:9c:3c:0b:60:34:0c:cb:89:0b:dd:38:b5:be:66:de:
         4b:a7:bc:7f:b6:91:a6:0f:99:e4:f6:70:20:bb:e6:86:1b:6c:
         ae:f1:b4:94:35:30:8d:c3:50:50:f4:81:ee:03:71:65:17:eb:
         62:28:63:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 12:06:13 2026 by rpki-client