This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/quxQSGyWJhHDAfLuDkQyexSsWNo.roa
File:                     quxQSGyWJhHDAfLuDkQyexSsWNo.roa (raw, json)
Hash identifier:          QJUzp2BDkvqx7iNzEofWQzAg6trEX99bkGdAFq+EWzo=
Subject key identifier:   AA:EC:50:48:6C:96:26:11:C3:01:F2:EE:0E:44:32:7B:14:AC:58:DA
Certificate issuer:       /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial:       019BF9EFF391A3AA7D009A32D32AFDCDD477
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/quxQSGyWJhHDAfLuDkQyexSsWNo.roa
Signing time:             Mon 26 Jan 2026 10:53:30 +0000
ROA not before:           Mon 26 Jan 2026 10:53:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29802
IP address blocks:        80.174.124.0/24 maxlen: 24
                          80.174.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:ef:f3:91:a3:aa:7d:00:9a:32:d3:2a:fd:cd:d4:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
        Validity
            Not Before: Jan 26 10:53:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=aaec50486c962611c301f2ee0e44327b14ac58da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:61:db:9b:58:0e:fa:22:2a:cb:d5:02:e7:6b:
                    05:5f:41:a8:71:49:37:21:9a:17:f2:de:54:e2:49:
                    cc:8f:2f:ea:96:3d:66:2a:5e:44:20:59:04:22:9d:
                    e6:c6:29:f7:33:c4:8e:6f:b2:2b:f8:60:b9:ab:30:
                    70:bb:34:65:ef:46:3b:45:ac:32:5a:1c:59:e1:9e:
                    79:5a:08:76:ab:04:2f:aa:94:17:92:83:0e:6c:55:
                    20:62:d8:3b:02:3e:76:9c:f9:c6:c7:e1:87:67:65:
                    86:0f:2e:18:05:94:71:8e:7b:35:fd:04:82:91:e3:
                    ec:dd:75:f3:1e:8d:a7:02:17:d6:5d:34:87:2b:9c:
                    05:e6:08:77:36:9d:76:9e:1c:b2:23:17:22:81:6d:
                    af:c3:30:53:0e:10:c7:09:32:31:1c:65:39:3d:a0:
                    29:11:13:74:a6:2d:3a:bb:b3:82:ae:1f:2d:be:a4:
                    88:75:ef:43:0a:66:f0:05:fb:86:0f:b3:f7:a5:c7:
                    c3:fd:26:37:0c:62:e7:a1:a5:4c:93:13:d6:07:31:
                    92:93:ce:9d:d9:43:7d:f2:e4:f7:dd:33:3d:24:af:
                    2c:b4:8a:a9:12:4e:ec:63:38:08:48:14:26:a0:7f:
                    2b:06:59:48:b4:77:cb:37:7c:e6:a1:39:8e:f4:6c:
                    fe:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EC:50:48:6C:96:26:11:C3:01:F2:EE:0E:44:32:7B:14:AC:58:DA
            X509v3 Authority Key Identifier:
                keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/quxQSGyWJhHDAfLuDkQyexSsWNo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.174.124.0/24
                  80.174.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:26:37:24:c4:0a:38:80:9f:72:3c:1b:d1:14:9e:6b:49:be:
         ba:75:42:f7:f9:fe:3c:6e:e8:dd:7c:8d:06:1b:44:c6:c9:ae:
         ba:30:30:b4:e1:a4:fe:08:c9:20:9c:66:a6:b1:a3:43:75:df:
         97:5c:a3:c5:9f:63:89:d2:1c:b3:78:6c:2b:4c:ad:58:9d:21:
         65:be:74:ee:c6:73:63:cc:1b:d7:40:ee:8f:a2:8a:1a:18:ae:
         eb:cb:1f:af:91:fa:af:cc:e0:c4:b5:5a:e3:db:f3:2a:4b:d0:
         0d:b0:95:f2:f1:cd:17:9d:78:b3:b5:88:e4:0f:c4:0f:34:67:
         a9:95:31:3e:c1:01:5b:e5:62:0a:16:24:17:b0:57:ca:4a:24:
         ef:0d:93:b2:4e:ae:05:96:c7:7d:3d:b2:91:79:67:f6:aa:b3:
         56:5e:57:58:2f:20:db:51:06:92:87:f3:31:3c:05:e8:76:f8:
         47:29:16:85:96:cc:1e:91:c2:04:9e:9d:de:88:54:da:9d:16:
         29:49:d8:f8:93:15:73:14:03:b7:f8:1b:bf:99:ee:fe:f9:52:
         9b:8a:66:cd:31:07:07:e1:3a:2d:c4:4e:2d:05:76:1f:63:a6:
         91:c7:2c:0c:39:d3:e7:7a:cb:2b:2b:08:09:c7:e4:23:19:df:
         c8:ad:b2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:42:23 2026 by rpki-client