This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/qpvV9fOX8ujuAaYFsFown62YW_g.roa
File:                     qpvV9fOX8ujuAaYFsFown62YW_g.roa (raw, json)
Hash identifier:          U49DsLcR6LRC5D2MbbCYSaLcoyct2J3IM/Bllvh4fI0=
Subject key identifier:   AA:9B:D5:F5:F3:97:F2:E8:EE:01:A6:05:B0:5A:30:9F:AD:98:5B:F8
Certificate issuer:       /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial:       019B77C682872FBC178D65DB2A6EE586FDC2
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/qpvV9fOX8ujuAaYFsFown62YW_g.roa
Signing time:             Thu 01 Jan 2026 04:17:36 +0000
ROA not before:           Thu 01 Jan 2026 04:17:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59940
IP address blocks:        103.112.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:82:87:2f:bc:17:8d:65:db:2a:6e:e5:86:fd:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
        Validity
            Not Before: Jan  1 04:17:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=aa9bd5f5f397f2e8ee01a605b05a309fad985bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:56:1d:a2:92:1c:da:80:fa:98:a6:e4:3c:3b:
                    6a:6c:0c:44:25:58:c3:25:48:53:f1:fd:db:17:1a:
                    d1:87:14:23:a4:f2:35:71:7f:cb:d7:9d:60:c1:f8:
                    7e:39:a9:33:bf:fa:cc:70:b4:38:d1:df:0b:2c:31:
                    80:db:e3:4f:ed:17:ce:e3:62:4b:21:7e:09:da:5d:
                    fa:b8:33:70:39:17:78:80:63:39:a6:a7:67:be:f5:
                    d3:b2:1f:90:30:41:75:ea:29:ac:eb:75:a7:51:2d:
                    39:89:4e:c8:a8:d3:ce:fb:c2:1e:f6:ef:c0:8e:28:
                    05:05:49:7a:92:ba:97:05:f4:2d:ca:07:71:f7:71:
                    20:75:10:1f:6b:53:19:85:62:d4:64:be:77:35:b6:
                    bf:f2:b2:06:c6:37:70:de:89:1a:74:e7:86:c0:a2:
                    7c:e3:24:29:86:d2:f3:72:30:50:80:55:db:83:a4:
                    f7:42:4c:c2:07:c1:91:52:37:36:57:08:85:79:13:
                    cf:87:3d:5d:ef:cc:eb:da:b8:0a:2e:36:fe:81:98:
                    b0:ab:a3:f8:1d:22:03:a0:0e:ad:e8:63:22:e2:13:
                    dd:85:d0:b3:67:62:cb:9a:d1:2e:e4:32:f5:91:8b:
                    22:49:cf:9f:74:18:18:6e:a6:cb:43:55:19:3f:c7:
                    90:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9B:D5:F5:F3:97:F2:E8:EE:01:A6:05:B0:5A:30:9F:AD:98:5B:F8
            X509v3 Authority Key Identifier:
                keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/qpvV9fOX8ujuAaYFsFown62YW_g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:12:14:48:79:19:81:59:df:3a:a0:72:b8:99:be:0b:ff:af:
         b2:65:a4:c1:ed:01:89:8c:5f:ce:9d:14:03:50:eb:18:59:f0:
         3b:59:70:15:22:f1:a3:58:c4:f5:b3:19:12:91:3b:88:e9:cc:
         5c:75:4a:41:89:22:b3:10:6c:69:46:39:a2:c5:a3:d9:39:0f:
         2d:cc:83:49:8c:44:63:02:07:2d:86:b5:78:f1:26:bd:1a:fc:
         21:4c:34:4c:97:cb:b9:2a:78:49:21:61:fc:b5:88:1a:33:9d:
         4c:65:3d:07:e6:7f:08:c2:3d:16:fd:3f:f1:22:43:8a:83:59:
         41:a8:c1:2e:2b:21:f0:8d:86:67:a3:f1:b2:4e:b2:88:fd:43:
         95:b4:10:5a:42:a6:f9:68:7f:82:b3:c3:bd:14:0b:6f:60:b1:
         b1:a5:2b:d9:84:12:4d:22:91:e1:12:81:75:b3:fe:09:65:a8:
         be:8e:b2:7d:d2:a4:d3:aa:a2:f2:f7:d4:d8:42:44:9e:90:5c:
         68:4e:ab:07:fa:e7:3d:49:c5:2c:65:77:ee:52:62:b3:ac:d5:
         dd:d3:3a:bb:42:a9:35:87:04:ed:25:d8:5f:13:bc:4a:36:2f:
         2a:c8:b0:7d:b9:da:4b:01:fa:c0:e4:f3:6d:a7:0b:ce:89:0a:
         48:67:27:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3xoKHL7wXjWXbKm7lhv3CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYjUwZTUzODZjODA5YTBmYWU2NTMwYWE1ZThkOTgyNTI1
MWRlZDAwHhcNMjYwMTAxMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTliZDVmNWYzOTdmMmU4ZWUwMWE2MDViMDVhMzA5ZmFkOTg1YmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FYdopIc2oD6mKbkPDtqbAxEJVjD
JUhT8f3bFxrRhxQjpPI1cX/L151gwfh+Oakzv/rMcLQ40d8LLDGA2+NP7RfO42JL
IX4J2l36uDNwORd4gGM5pqdnvvXTsh+QMEF16ims63WnUS05iU7IqNPO+8Ie9u/A
jigFBUl6krqXBfQtygdx93EgdRAfa1MZhWLUZL53Nba/8rIGxjdw3okadOeGwKJ8
4yQphtLzcjBQgFXbg6T3QkzCB8GRUjc2VwiFeRPPhz1d78zr2rgKLjb+gZiwq6P4
HSIDoA6t6GMi4hPdhdCzZ2LLmtEu5DL1kYsiSc+fdBgYbqbLQ1UZP8eQ0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKqb1fXzl/Lo7gGmBbBaMJ+tmFv4MB8GA1UdIwQY
MBaAFJ61DlOGyAmg+uZTCqXo2YJSUd7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUt
MWNhZGE2ZThiMWE5LzEvcXB2VjlmT1g4dWp1QWFZRnNGb3duNjJZV19nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUtMWNhZGE2ZThiMWE5
LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3CqMA0G
CSqGSIb3DQEBCwUAA4IBAQBUEhRIeRmBWd86oHK4mb4L/6+yZaTB7QGJjF/OnRQD
UOsYWfA7WXAVIvGjWMT1sxkSkTuI6cxcdUpBiSKzEGxpRjmixaPZOQ8tzINJjERj
AgcthrV48Sa9GvwhTDRMl8u5KnhJIWH8tYgaM51MZT0H5n8Iwj0W/T/xIkOKg1lB
qMEuKyHwjYZno/GyTrKI/UOVtBBaQqb5aH+Cs8O9FAtvYLGxpSvZhBJNIpHhEoF1
s/4JZai+jrJ90qTTqqLy99TYQkSekFxoTqsH+uc9ScUsZXfuUmKzrNXd0zq7Qqk1
hwTtJdhfE7xKNi8qyLB9udpLAfrA5PNtpwvOiQpIZyeo
-----END CERTIFICATE-----
Generated at Mon Jan 19 20:00:48 2026 by rpki-client