This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/qCoveAVX32HIopIBireH9gp8zEU.roa
File:                     qCoveAVX32HIopIBireH9gp8zEU.roa (raw, json)
Hash identifier:          gtdKvptn4CgaUavZ31yxeWK0Q3MkTStDIsjYh4vSeXE=
Subject key identifier:   A8:2A:2F:78:05:57:DF:61:C8:A2:92:01:8A:B7:87:F6:0A:7C:CC:45
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       019B7758C307B1CD90F469D20F01E0CC76E5
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/qCoveAVX32HIopIBireH9gp8zEU.roa
Signing time:             Thu 01 Jan 2026 02:17:44 +0000
ROA not before:           Thu 01 Jan 2026 02:17:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215238
IP address blocks:        185.243.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:c3:07:b1:cd:90:f4:69:d2:0f:01:e0:cc:76:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Jan  1 02:17:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a82a2f780557df61c8a292018ab787f60a7ccc45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9b:00:e6:15:85:1e:e3:df:60:60:ed:8b:ba:
                    1e:cd:03:87:a1:83:5e:4d:8b:37:c8:de:d3:21:9b:
                    4c:d0:c7:ef:80:14:8e:3e:5f:38:3f:1d:c9:e5:06:
                    10:d9:17:0c:cf:1b:9a:ef:a2:f8:37:c9:3b:28:86:
                    83:d2:72:49:d2:04:19:61:97:74:48:75:b2:df:ea:
                    54:90:47:89:7f:ab:ca:d3:11:30:3a:e2:82:b6:6e:
                    2e:95:46:b3:0e:86:82:30:e2:bb:13:4c:24:8e:bb:
                    e6:3f:41:ae:7f:28:31:ef:71:ce:12:02:2b:02:ca:
                    1e:39:87:1e:0a:bc:a5:62:de:de:f8:52:b5:56:f5:
                    23:89:06:e3:72:b4:35:3a:b2:bc:10:29:51:55:5b:
                    00:86:b8:14:00:e4:5f:54:72:ee:f4:56:eb:88:62:
                    f9:9a:47:09:fa:d3:27:c7:04:2b:4d:f6:c9:66:7e:
                    9c:5f:88:f7:76:73:30:f5:46:6c:81:2f:28:b1:30:
                    37:74:a9:51:cc:87:c8:a2:86:51:34:45:75:f1:77:
                    cb:d5:07:f4:00:67:25:4b:5c:35:27:c0:c9:3b:5a:
                    17:0e:b2:84:e3:0b:92:80:dc:33:5c:de:38:ac:15:
                    67:04:ec:40:42:45:0d:b6:26:49:52:f8:fb:76:23:
                    8b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2A:2F:78:05:57:DF:61:C8:A2:92:01:8A:B7:87:F6:0A:7C:CC:45
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/qCoveAVX32HIopIBireH9gp8zEU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.243.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:28:3d:26:ce:99:0c:da:a2:39:a8:23:ef:26:02:0e:2e:98:
         1e:3b:59:4b:d5:c4:98:6b:92:dd:49:20:95:8c:fa:1a:e9:95:
         7f:7e:9f:c9:1b:0c:17:62:c5:05:32:1b:7b:f0:92:b7:70:ca:
         b3:92:24:4b:fd:5a:c9:94:66:61:e5:e0:7e:b1:35:53:a8:d5:
         87:eb:b6:53:f4:b0:b8:f5:c9:8c:6a:a9:29:a6:df:33:13:f1:
         c4:fd:7f:cc:18:5f:a6:e7:da:62:7e:e2:a0:9d:24:c8:7d:b1:
         37:38:64:34:7b:6a:30:d7:50:57:0a:76:e7:83:f1:6c:30:41:
         2e:b6:9e:0a:9d:e5:89:97:5b:78:8d:84:6e:56:9c:34:13:b2:
         33:4d:cb:7e:8b:ef:3a:43:a6:30:cd:10:f6:dc:12:36:83:ca:
         af:62:94:42:c0:c4:74:5b:6b:ed:e2:0f:04:b9:80:4c:8c:ca:
         a7:2d:c5:77:1d:84:c7:89:86:2e:64:a7:7d:91:7a:17:2f:8b:
         2b:d3:d9:d8:c0:8b:1a:33:70:8b:7e:43:62:6a:2f:7f:4d:31:
         b7:fe:40:dd:09:e5:26:f5:d8:c1:6e:12:59:77:62:7f:8d:9d:
         7c:2b:f3:76:5b:27:93:63:d3:db:38:85:76:5c:56:fe:da:c2:
         bb:8b:c8:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WMMHsc2Q9GnSDwHgzHblMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODJhMmY3ODA1NTdkZjYxYzhhMjkyMDE4YWI3ODdmNjBhN2NjYzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpsA5hWFHuPfYGDti7oezQOHoYNe
TYs3yN7TIZtM0MfvgBSOPl84Px3J5QYQ2RcMzxua76L4N8k7KIaD0nJJ0gQZYZd0
SHWy3+pUkEeJf6vK0xEwOuKCtm4ulUazDoaCMOK7E0wkjrvmP0Gufygx73HOEgIr
AsoeOYceCrylYt7e+FK1VvUjiQbjcrQ1OrK8EClRVVsAhrgUAORfVHLu9FbriGL5
mkcJ+tMnxwQrTfbJZn6cX4j3dnMw9UZsgS8osTA3dKlRzIfIooZRNEV18XfL1Qf0
AGclS1w1J8DJO1oXDrKE4wuSgNwzXN44rBVnBOxAQkUNtiZJUvj7diOLAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKgqL3gFV99hyKKSAYq3h/YKfMxFMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvcUNvdmVBVlgzMkhJb3BJQmlyZUg5Z3A4ekVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufO2MA0G
CSqGSIb3DQEBCwUAA4IBAQCTKD0mzpkM2qI5qCPvJgIOLpgeO1lL1cSYa5LdSSCV
jPoa6ZV/fp/JGwwXYsUFMht78JK3cMqzkiRL/VrJlGZh5eB+sTVTqNWH67ZT9LC4
9cmMaqkppt8zE/HE/X/MGF+m59pifuKgnSTIfbE3OGQ0e2ow11BXCnbng/FsMEEu
tp4KneWJl1t4jYRuVpw0E7IzTct+i+86Q6YwzRD23BI2g8qvYpRCwMR0W2vt4g8E
uYBMjMqnLcV3HYTHiYYuZKd9kXoXL4sr09nYwIsaM3CLfkNiai9/TTG3/kDdCeUm
9djBbhJZd2J/jZ18K/N2WyeTY9PbOIV2XFb+2sK7i8hk
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:12:23 2026 by rpki-client