This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/qA3ImQcdu-q2a1X16c9AUNh8cvo.roa
File:                     qA3ImQcdu-q2a1X16c9AUNh8cvo.roa (raw, json)
Hash identifier:          0LDllHhDiUHrvufBGDxeRBb8RrRX38Z7Lp/cTDfB448=
Subject key identifier:   A8:0D:C8:99:07:1D:BB:EA:B6:6B:55:F5:E9:CF:40:50:D8:7C:72:FA
Certificate issuer:       /CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Certificate serial:       019B791031C5A749D75DF0B8D451E314CB90
Authority key identifier: 37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/qA3ImQcdu-q2a1X16c9AUNh8cvo.roa
Signing time:             Thu 01 Jan 2026 10:17:43 +0000
ROA not before:           Thu 01 Jan 2026 10:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49406
IP address blocks:        89.18.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:31:c5:a7:49:d7:5d:f0:b8:d4:51:e3:14:cb:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
        Validity
            Not Before: Jan  1 10:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a80dc899071dbbeab66b55f5e9cf4050d87c72fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4b:12:ef:b8:19:06:50:b7:1e:9c:50:53:35:
                    e7:77:c8:6f:c1:a1:a0:85:72:d5:7e:00:ca:1e:62:
                    3b:e5:ff:59:c0:71:9e:db:32:a3:7b:4b:73:61:48:
                    b4:a2:cb:86:ea:52:5f:f8:38:d8:19:c2:2c:70:aa:
                    4a:82:ca:20:0d:ae:ce:3e:c1:bb:62:89:38:f8:05:
                    51:a7:f8:bd:94:ab:30:79:22:6e:25:94:5a:54:47:
                    a8:97:5b:f2:04:0c:c6:a1:40:84:9c:d1:5b:16:63:
                    7a:b0:af:a0:16:72:5e:bd:70:e0:63:c8:b2:11:fc:
                    de:6d:e6:a5:a9:62:77:7e:89:28:ae:1d:6c:ad:87:
                    9b:f5:41:73:f2:24:43:9e:ff:52:15:ba:23:9a:5d:
                    aa:79:db:83:26:2f:ad:4c:8e:a7:3e:9a:cd:fc:8a:
                    be:0f:32:92:8e:2f:93:70:8d:a7:be:99:84:9b:fa:
                    9b:ce:f2:ec:78:46:38:3f:80:3d:cb:f2:c7:be:6f:
                    b9:8b:24:df:03:40:34:86:e7:50:e6:d6:06:ad:5d:
                    95:ef:26:d4:df:04:da:a9:5b:c9:34:a3:c0:f7:f8:
                    38:c6:b0:79:54:08:1e:84:a3:34:3a:08:07:27:2b:
                    b8:fe:0c:87:02:72:2a:e3:3e:a7:9d:26:29:fc:c3:
                    eb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0D:C8:99:07:1D:BB:EA:B6:6B:55:F5:E9:CF:40:50:D8:7C:72:FA
            X509v3 Authority Key Identifier:
                keyid:37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/qA3ImQcdu-q2a1X16c9AUNh8cvo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.18.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8a:f9:e8:98:a9:34:3d:0e:e6:f8:21:80:c1:f7:b1:26:00:8f:
         9e:61:f9:aa:8b:81:92:cc:dd:21:74:27:e6:73:af:69:e4:69:
         47:10:73:a2:b9:39:13:15:87:8a:2f:89:b6:b3:70:0e:78:b5:
         c6:56:2f:ec:79:e6:9f:3b:be:73:be:1d:3a:ce:45:62:26:fd:
         8b:13:4e:cb:48:f4:c5:d3:22:11:86:cd:ad:60:56:e7:0a:3b:
         a3:8c:95:29:3a:34:77:bf:9f:81:ad:58:6d:b0:5e:fb:53:3f:
         88:39:e4:6a:63:8f:81:66:f7:ec:03:c3:67:6c:c5:73:db:fe:
         56:5a:c4:5d:05:a7:6e:55:40:a0:ce:a1:3d:27:2b:dd:54:71:
         97:49:74:27:fc:5d:fc:a1:83:69:63:90:75:04:65:c4:47:c4:
         99:02:ff:a6:56:bb:be:a6:d1:35:a3:f0:d8:24:95:62:77:af:
         5f:b0:55:bb:ff:48:be:7b:19:80:28:18:16:27:44:73:f0:c5:
         73:ae:22:88:23:b3:31:49:d6:68:4d:f8:af:f7:49:dc:95:a1:
         af:5d:e5:3e:d1:f3:78:6a:fc:ce:7a:af:79:6f:7e:f3:91:d8:
         12:b6:3e:73:7f:8a:52:34:75:56:c2:10:4a:68:d3:eb:62:b8:
         ee:52:75:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:27:41 2026 by rpki-client