This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/PQvYJRaDPLduNRM19RIULh1iH1E.roa
File:                     PQvYJRaDPLduNRM19RIULh1iH1E.roa (raw, json)
Hash identifier:          9+eYJbeeIsnY4uSYOqJAx4dOFxxz6YxL8bPsLR/VBqA=
Subject key identifier:   3D:0B:D8:25:16:83:3C:B7:6E:35:13:35:F5:12:14:2E:1D:62:1F:51
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       019B7758C43B34229DFBA41BE2DBECC6C70D
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/PQvYJRaDPLduNRM19RIULh1iH1E.roa
Signing time:             Thu 01 Jan 2026 02:17:44 +0000
ROA not before:           Thu 01 Jan 2026 02:17:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215645
IP address blocks:        185.243.181.0/24 maxlen: 24
                          185.254.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:c4:3b:34:22:9d:fb:a4:1b:e2:db:ec:c6:c7:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Jan  1 02:17:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3d0bd82516833cb76e351335f512142e1d621f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2f:5a:e0:4b:b1:0b:35:c6:93:66:08:0c:08:
                    ab:76:ac:00:de:c5:77:06:0c:2c:69:10:61:bf:1c:
                    8b:d2:ba:2e:5f:97:74:8e:46:d1:b3:62:07:cc:b8:
                    68:00:9c:93:73:d2:51:60:14:e5:22:8b:d6:dc:89:
                    81:9d:e5:3c:0b:71:58:65:30:8d:6f:bd:a2:d4:22:
                    b1:f7:e2:19:b5:a5:f5:da:34:2f:3e:15:43:c3:fe:
                    20:3d:6c:bb:6c:91:1e:2b:62:5b:04:1b:df:38:87:
                    d2:9b:de:61:23:e9:5b:f6:48:e2:62:01:2b:fd:c5:
                    e7:b0:aa:71:ac:42:59:5b:ed:4a:3d:4c:b7:5c:5b:
                    32:cf:37:b7:12:f3:2e:2e:6c:69:51:18:2d:d9:84:
                    e8:74:3a:65:7d:3e:19:0d:90:d9:97:8e:4e:d2:b4:
                    d2:22:7d:ac:79:3e:85:fd:21:b6:b4:22:f0:2c:30:
                    20:a8:75:99:06:c5:ae:38:2c:ea:8e:eb:92:d0:33:
                    e2:4a:e3:f3:e5:2d:9d:9a:f4:9d:dd:75:b2:fd:18:
                    db:23:e5:4e:22:fd:98:de:63:4f:05:29:39:f6:e6:
                    e7:5e:92:71:01:73:2e:18:28:fd:d1:39:9e:d8:c9:
                    91:e4:ce:99:52:28:b9:3c:b8:e8:db:0d:7f:43:67:
                    5d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0B:D8:25:16:83:3C:B7:6E:35:13:35:F5:12:14:2E:1D:62:1F:51
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/PQvYJRaDPLduNRM19RIULh1iH1E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.243.181.0/24
                  185.254.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:c1:21:f2:83:cf:36:ae:41:1a:8f:c1:c8:99:88:41:62:80:
         0e:57:e5:49:00:25:b7:60:bb:ad:95:16:8e:e6:03:98:53:ec:
         83:b8:83:9f:a2:3d:a8:49:da:1e:95:af:b2:76:ea:59:ae:f4:
         f5:87:c5:d9:4e:1f:c4:a8:3e:a4:13:7c:b0:31:82:f2:09:c9:
         60:36:33:82:90:b5:c9:a1:c1:1a:63:16:66:fb:6a:0b:2f:41:
         33:1e:5a:be:16:4a:c3:a9:a5:75:63:cc:75:2d:02:39:e0:b8:
         e2:ca:0b:6b:05:15:9e:0e:23:42:d4:a3:21:36:72:e3:12:56:
         93:0c:ce:35:56:26:26:bd:9a:8a:93:f5:bf:59:80:95:6c:5b:
         a7:77:63:1b:23:e4:51:34:b9:8c:0a:76:6b:4f:8f:e9:85:44:
         59:4c:80:b7:ff:00:07:90:ca:67:f5:20:b1:e3:06:29:ba:47:
         aa:1f:9a:d0:c2:e4:d0:b1:03:b9:29:52:6c:40:d3:d0:18:b5:
         76:bc:90:16:be:96:80:4d:27:ad:0d:8a:65:35:37:f1:b1:f5:
         b5:5e:53:7c:67:c4:a5:e8:bd:c9:a7:d7:1d:75:0f:89:9d:f7:
         fb:52:45:28:c2:56:1b:93:3f:24:5d:80:b1:e4:52:77:b6:47:
         24:b7:ab:9c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt3WMQ7NCKd+6Qb4tvsxscNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDBiZDgyNTE2ODMzY2I3NmUzNTEzMzVmNTEyMTQyZTFkNjIxZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC9a4EuxCzXGk2YIDAirdqwA3sV3
BgwsaRBhvxyL0rouX5d0jkbRs2IHzLhoAJyTc9JRYBTlIovW3ImBneU8C3FYZTCN
b72i1CKx9+IZtaX12jQvPhVDw/4gPWy7bJEeK2JbBBvfOIfSm95hI+lb9kjiYgEr
/cXnsKpxrEJZW+1KPUy3XFsyzze3EvMuLmxpURgt2YTodDplfT4ZDZDZl45O0rTS
In2seT6F/SG2tCLwLDAgqHWZBsWuOCzqjuuS0DPiSuPz5S2dmvSd3XWy/RjbI+VO
Iv2Y3mNPBSk59ubnXpJxAXMuGCj90Tme2MmR5M6ZUii5PLjo2w1/Q2ddDQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD0L2CUWgzy3bjUTNfUSFC4dYh9RMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvUFF2WUpSYURQTGR1TlJNMTlSSVVMaDFpSDFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAufO1AwQA
uf4cMA0GCSqGSIb3DQEBCwUAA4IBAQAuwSHyg882rkEaj8HImYhBYoAOV+VJACW3
YLutlRaO5gOYU+yDuIOfoj2oSdoela+ydupZrvT1h8XZTh/EqD6kE3ywMYLyCclg
NjOCkLXJocEaYxZm+2oLL0EzHlq+FkrDqaV1Y8x1LQI54LjiygtrBRWeDiNC1KMh
NnLjElaTDM41ViYmvZqKk/W/WYCVbFund2MbI+RRNLmMCnZrT4/phURZTIC3/wAH
kMpn9SCx4wYpukeqH5rQwuTQsQO5KVJsQNPQGLV2vJAWvpaATSetDYplNTfxsfW1
XlN8Z8Sl6L3Jp9cddQ+Jnff7UkUowlYbkz8kXYCx5FJ3tkckt6uc
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:11:46 2026 by rpki-client