This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/qpK9bGVpoJ1_2A7jsTToUcBIOFo.roa
File:                     qpK9bGVpoJ1_2A7jsTToUcBIOFo.roa (raw, json)
Hash identifier:          OSwv3kGbAdseNszoSvtsWgvPvnvhz1wnT6vO5PnHJME=
Subject key identifier:   AA:92:BD:6C:65:69:A0:9D:7F:D8:0E:E3:B1:34:E8:51:C0:48:38:5A
Certificate issuer:       /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial:       019C5683F04BEB97B8166D860E82A99051F4
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/qpK9bGVpoJ1_2A7jsTToUcBIOFo.roa
Signing time:             Fri 13 Feb 2026 10:20:13 +0000
ROA not before:           Fri 13 Feb 2026 10:20:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201070
IP address blocks:        195.64.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Feb 2026 15:20:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:56:83:f0:4b:eb:97:b8:16:6d:86:0e:82:a9:90:51:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
        Validity
            Not Before: Feb 13 10:20:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=aa92bd6c6569a09d7fd80ee3b134e851c048385a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:58:28:d8:58:ab:93:90:1e:5f:6c:30:23:cb:
                    d9:aa:a7:b7:36:5d:2b:14:67:76:80:ea:b3:8b:33:
                    a9:b4:57:23:aa:6e:0d:52:08:33:c1:1e:d9:f2:8a:
                    45:7f:7c:43:70:c0:82:ba:aa:a8:92:06:30:81:75:
                    6f:3f:44:31:53:76:27:87:6c:aa:67:bb:12:39:da:
                    d3:7d:7a:1e:cb:1a:25:51:92:82:65:51:8e:0b:33:
                    29:d3:8c:9e:ec:bc:be:93:36:ad:91:76:0b:d9:75:
                    f4:67:ff:24:80:ea:5c:ff:70:37:e8:52:ce:9e:bb:
                    a6:b7:d5:49:09:78:b5:f4:ad:39:d7:f1:f3:26:be:
                    ed:99:09:e9:cb:1f:fe:ce:a7:1b:6d:30:2e:02:d8:
                    22:e9:bb:b2:be:dd:27:4a:5a:d1:3e:2e:b5:eb:b9:
                    94:3b:bf:07:b4:e4:94:8e:2f:d9:5a:a0:bf:1c:d6:
                    22:1f:67:2e:15:ee:86:c3:5c:d0:cc:40:d4:fe:12:
                    ca:e7:d6:bf:0b:84:1f:63:96:84:55:ff:f4:f7:40:
                    36:87:63:71:47:15:bf:d2:9c:d9:e7:ce:e6:5c:f5:
                    69:5c:b7:45:df:97:03:fc:87:4e:36:44:75:b6:0b:
                    ba:61:be:b9:a3:b7:03:d8:4f:85:e2:c3:9a:b0:5f:
                    9c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:92:BD:6C:65:69:A0:9D:7F:D8:0E:E3:B1:34:E8:51:C0:48:38:5A
            X509v3 Authority Key Identifier:
                keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/qpK9bGVpoJ1_2A7jsTToUcBIOFo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.64.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:77:41:82:43:3a:a0:cd:f7:76:86:e8:b1:b9:eb:e9:cb:a8:
         e6:27:c5:94:70:98:28:59:90:a5:64:d4:1b:b0:a6:c2:7f:35:
         bc:27:27:18:de:5f:38:2c:00:52:1f:ef:2e:f5:de:51:c1:17:
         3e:83:b4:92:fc:7c:33:11:39:14:0b:e1:3f:1d:90:08:e2:6c:
         4a:d9:b7:90:7d:56:51:e1:bf:0f:c0:dd:b7:e0:7e:a6:a2:79:
         94:30:1e:60:74:eb:dc:6f:6f:22:ac:e5:bf:a6:40:71:46:f8:
         a1:71:f5:c9:67:2f:b2:ef:37:dd:3d:27:69:d8:ac:01:de:ad:
         c7:9c:dc:45:ed:0a:c9:87:3f:66:c4:b2:0d:a4:c0:4e:59:76:
         53:79:c7:d5:8a:a3:48:ff:36:75:96:2c:c0:9b:2a:7f:9a:50:
         ad:e3:f1:75:0f:e3:7c:71:05:e7:9f:14:cd:47:40:cc:b1:7d:
         09:50:68:a6:aa:99:0b:db:33:c3:f3:df:72:8f:e8:da:a1:77:
         86:ba:37:47:fc:18:b7:cb:00:7f:66:3d:f2:d5:4d:8e:64:f7:
         f1:3d:b6:2e:4a:70:0e:da:68:1d:5e:ab:7a:5d:f0:00:71:8d:
         9e:11:8d:fd:fc:ab:15:e7:91:29:71:7c:3e:b9:61:39:e2:7c:
         55:77:e2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 00:03:48 2026 by rpki-client