This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/q5YOOrxuiSWXoPgrKO2ByRV2Pag.roa
File:                     q5YOOrxuiSWXoPgrKO2ByRV2Pag.roa (raw, json)
Hash identifier:          MIH8GtLHKwDBxta0prsle3vWb5PxVdZjd+6vSDHesjk=
Subject key identifier:   AB:96:0E:3A:BC:6E:89:25:97:A0:F8:2B:28:ED:81:C9:15:76:3D:A8
Certificate issuer:       /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial:       019B7DCB30771512ED7C4F6594112115B992
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/q5YOOrxuiSWXoPgrKO2ByRV2Pag.roa
Signing time:             Fri 02 Jan 2026 08:20:26 +0000
ROA not before:           Fri 02 Jan 2026 08:20:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200491
IP address blocks:        185.75.151.0/24 maxlen: 24
                          2a03:4b27:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:30:77:15:12:ed:7c:4f:65:94:11:21:15:b9:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
        Validity
            Not Before: Jan  2 08:20:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ab960e3abc6e892597a0f82b28ed81c915763da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f5:ec:81:e2:09:74:ba:92:b3:4b:48:d1:17:
                    cc:9e:3e:60:0e:c0:eb:46:f2:ba:31:da:6c:60:76:
                    9b:06:f2:17:49:92:78:ae:f5:ae:86:82:cc:eb:76:
                    24:de:e1:da:92:85:d4:d6:1c:90:17:02:ba:33:9f:
                    1d:97:c1:41:98:6b:ea:d3:77:2b:d9:57:46:5e:8d:
                    92:4e:3d:f6:9f:04:31:98:84:94:a7:82:45:4b:7d:
                    c2:97:4b:bb:80:76:32:40:34:b1:82:ee:10:b8:f5:
                    43:dc:a0:84:8e:f1:46:c3:ec:0d:7b:98:f9:28:46:
                    da:66:4b:9b:d2:fb:f2:44:60:7d:aa:a3:49:6b:82:
                    35:fc:79:3e:c8:d1:09:1b:cf:c7:2a:fe:1e:49:75:
                    12:60:1d:63:82:8f:b7:db:f4:92:05:76:f4:14:07:
                    4d:86:c0:43:c0:ca:65:ef:ed:82:45:f0:03:1c:31:
                    8a:3b:44:d9:dc:5a:d8:bb:29:bd:93:aa:25:4b:ca:
                    6e:f4:9b:da:bd:9a:c6:ee:8e:2a:b5:24:a3:b2:24:
                    6e:6f:0b:e2:f5:f4:5f:c9:d3:1b:20:17:b3:46:9b:
                    bb:cb:23:9a:c6:ab:f1:49:c4:25:27:34:a2:2f:57:
                    15:ac:73:00:15:f0:e2:af:a8:f3:22:34:1a:51:a4:
                    fe:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:96:0E:3A:BC:6E:89:25:97:A0:F8:2B:28:ED:81:C9:15:76:3D:A8
            X509v3 Authority Key Identifier:
                keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/q5YOOrxuiSWXoPgrKO2ByRV2Pag.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.75.151.0/24
                IPv6:
                  2a03:4b27:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         42:c2:4b:35:4d:00:dd:b1:cf:85:18:3e:d9:95:e4:2a:82:21:
         52:b6:0f:e6:84:a9:1b:2b:71:30:94:f5:a2:31:0b:ac:d0:6f:
         70:18:9f:a8:86:cd:f0:bd:c6:9e:eb:dc:84:2b:ce:51:91:78:
         1e:d9:59:39:78:88:0a:51:f2:c2:7a:0c:59:8e:ed:69:49:29:
         a3:28:50:bd:1e:f0:9e:1e:e1:60:98:71:6d:67:42:1d:8f:21:
         fd:87:33:65:3c:0f:89:27:ff:5b:5c:ae:7a:66:dd:5d:db:bd:
         f0:88:a2:88:ea:b0:35:91:78:30:bc:83:e9:78:75:c1:56:b2:
         6d:ef:d4:21:9b:36:29:40:84:c1:21:cf:05:ca:02:7e:1a:f8:
         3c:33:02:fb:62:9a:e8:46:23:7e:ed:bd:1f:56:a9:9f:56:8a:
         00:ef:7a:fb:8d:5b:f7:93:05:c7:ff:51:4c:fc:55:f3:ca:56:
         a4:12:31:43:d1:a8:dd:ca:ca:d8:14:87:97:32:a3:0a:26:45:
         31:01:ae:89:89:79:66:83:2d:66:05:4e:8b:cb:54:a6:48:2b:
         10:a6:98:15:1f:67:2d:95:93:7f:70:ac:b6:89:d4:b7:b3:5f:
         04:4e:db:cf:2f:0b:53:cb:d0:29:bd:8a:02:20:67:5c:f4:60:
         f6:3e:81:31
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZt9yzB3FRLtfE9llBEhFbmSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOWYxYTZlODRjMDI3N2VmY2I1NmQ5NDJiMGViNWU0NTY0
NzExMjkwHhcNMjYwMTAyMDgyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjk2MGUzYWJjNmU4OTI1OTdhMGY4MmIyOGVkODFjOTE1NzYzZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/XsgeIJdLqSs0tI0RfMnj5gDsDr
RvK6MdpsYHabBvIXSZJ4rvWuhoLM63Yk3uHakoXU1hyQFwK6M58dl8FBmGvq03cr
2VdGXo2STj32nwQxmISUp4JFS33Cl0u7gHYyQDSxgu4QuPVD3KCEjvFGw+wNe5j5
KEbaZkub0vvyRGB9qqNJa4I1/Hk+yNEJG8/HKv4eSXUSYB1jgo+32/SSBXb0FAdN
hsBDwMpl7+2CRfADHDGKO0TZ3FrYuym9k6olS8pu9JvavZrG7o4qtSSjsiRubwvi
9fRfydMbIBezRpu7yyOaxqvxScQlJzSiL1cVrHMAFfDir6jzIjQaUaT+6QIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFKuWDjq8bokll6D4KyjtgckVdj2oMB8GA1UdIwQY
MBaAFOOfGm6EwCd+/LVtlCsOteRWRxEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xNjBhNzctNzU2ZC00NDFhLTg2YzMt
MGU1MzkyNzU3ZjgyLzEvcTVZT09yeHVpU1dYb1BncktPMkJ5UlYyUGFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8xNjBhNzctNzU2ZC00NDFhLTg2YzMtMGU1MzkyNzU3Zjgy
LzEvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAuUuXMA4E
AgACMAgDBgQqA0sn4DANBgkqhkiG9w0BAQsFAAOCAQEAQsJLNU0A3bHPhRg+2ZXk
KoIhUrYP5oSpGytxMJT1ojELrNBvcBifqIbN8L3GnuvchCvOUZF4HtlZOXiIClHy
wnoMWY7taUkpoyhQvR7wnh7hYJhxbWdCHY8h/YczZTwPiSf/W1yuembdXdu98Iii
iOqwNZF4MLyD6Xh1wVaybe/UIZs2KUCEwSHPBcoCfhr4PDMC+2Ka6EYjfu29H1ap
n1aKAO96+41b95MFx/9RTPxV88pWpBIxQ9Go3crK2BSHlzKjCiZFMQGuiYl5ZoMt
ZgVOi8tUpkgrEKaYFR9nLZWTf3CstonUt7NfBE7bzy8LU8vQKb2KAiBnXPRg9j6B
MQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:46:47 2026 by rpki-client