This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/QEuK3g5nWid2Im-7Fk2VW83QJhw.roa
File:                     QEuK3g5nWid2Im-7Fk2VW83QJhw.roa (raw, json)
Hash identifier:          Z6ID1oyX7akSrTMSHKsqBsGsnPHioopH175FHYq82M4=
Subject key identifier:   40:4B:8A:DE:0E:67:5A:27:76:22:6F:BB:16:4D:95:5B:CD:D0:26:1C
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       019AA098BC6DD2AC590A0B209130EDC7D78D
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/QEuK3g5nWid2Im-7Fk2VW83QJhw.roa
Signing time:             Thu 20 Nov 2025 09:29:15 +0000
ROA not before:           Thu 20 Nov 2025 09:29:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     274212
IP address blocks:        185.28.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 17:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:a0:98:bc:6d:d2:ac:59:0a:0b:20:91:30:ed:c7:d7:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Nov 20 09:29:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=404b8ade0e675a2776226fbb164d955bcdd0261c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a7:57:48:79:51:12:30:4f:5b:6a:7e:d3:fc:
                    0c:8e:ac:d9:e0:c7:b6:e0:43:d3:e6:74:a9:e8:b1:
                    5d:77:b4:6b:b9:6c:31:b8:02:68:23:e4:0e:fd:62:
                    60:b1:48:e7:23:f5:fd:fa:52:99:be:f8:e9:d6:0c:
                    a0:77:7d:54:6e:99:bc:ee:38:0e:f0:03:27:1f:e1:
                    1b:91:87:d9:b6:df:c4:2a:b0:80:7f:9a:f8:78:1d:
                    69:c9:e4:95:62:da:be:7c:01:36:c4:ab:82:3f:21:
                    46:d7:7b:d4:96:ab:11:c8:f5:d4:2d:27:0e:0b:f2:
                    ca:6b:1c:4c:3c:bc:3a:4a:53:4a:c9:08:62:02:00:
                    e4:3f:e7:d7:50:9e:36:77:77:e4:d8:c1:53:9f:69:
                    b4:6e:f9:d8:6e:3f:86:3f:37:ef:6b:cb:f1:05:33:
                    8e:0d:87:1f:1d:ab:fa:30:71:bb:8a:0a:df:ce:05:
                    8e:de:38:68:ca:f7:b5:e4:4e:5b:59:53:25:e8:00:
                    3e:bf:70:05:b1:06:af:30:78:82:b5:0e:0c:06:38:
                    c2:24:17:49:8f:fa:4f:66:de:db:1b:ac:f2:f6:90:
                    67:a6:20:24:4f:d0:50:a9:30:b6:40:18:49:80:54:
                    a5:7c:f3:96:cd:3c:3d:8d:fd:8d:51:68:cd:ac:60:
                    95:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4B:8A:DE:0E:67:5A:27:76:22:6F:BB:16:4D:95:5B:CD:D0:26:1C
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/QEuK3g5nWid2Im-7Fk2VW83QJhw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.28.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:3a:d3:c3:1b:dd:5f:51:a2:f7:8c:9a:a6:ae:50:13:32:4c:
         c0:d3:b0:c4:31:6d:0e:03:43:14:12:8e:21:00:08:3d:d7:a0:
         41:4c:64:bf:b2:00:5c:81:ae:1d:be:5a:fa:5f:0c:2c:cf:35:
         05:89:43:d8:3a:80:66:12:aa:39:8d:2d:95:7b:f4:e0:ba:95:
         84:b3:5a:3d:3f:93:a8:72:0b:55:9f:ad:6a:77:f0:5d:f8:ca:
         40:41:e1:41:3e:04:1c:d9:90:c9:1c:9a:6d:10:95:d7:c4:ec:
         b4:bd:de:d7:b6:a2:40:87:35:da:54:56:13:c9:d9:c2:36:16:
         47:f6:23:35:b7:e7:c5:ad:4b:ee:ef:ff:66:fe:0a:15:26:5d:
         d7:ac:90:8b:ab:55:ff:08:ab:f5:eb:19:91:c3:f2:63:b6:7a:
         83:91:9e:15:f1:7a:a2:63:b7:a0:c3:ca:62:25:8f:4e:91:eb:
         98:4d:8a:1e:71:38:b4:c0:b9:2d:53:87:cc:c5:3e:03:f4:60:
         47:af:a1:41:be:70:78:15:24:83:0c:6c:a2:bd:76:83:1b:10:
         fb:4e:8c:45:ac:57:f8:f0:e9:d7:4b:96:84:f0:b4:5c:3a:3a:
         e7:79:81:d1:16:21:2f:c6:2c:50:e3:c5:67:e2:aa:c5:e2:5e:
         5f:4d:f2:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZqgmLxt0qxZCgsgkTDtx9eNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjUxMTIwMDkyOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDRiOGFkZTBlNjc1YTI3NzYyMjZmYmIxNjRkOTU1YmNkZDAyNjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApadXSHlREjBPW2p+0/wMjqzZ4Me2
4EPT5nSp6LFdd7RruWwxuAJoI+QO/WJgsUjnI/X9+lKZvvjp1gygd31Ubpm87jgO
8AMnH+EbkYfZtt/EKrCAf5r4eB1pyeSVYtq+fAE2xKuCPyFG13vUlqsRyPXULScO
C/LKaxxMPLw6SlNKyQhiAgDkP+fXUJ42d3fk2MFTn2m0bvnYbj+GPzfva8vxBTOO
DYcfHav6MHG7igrfzgWO3jhoyve15E5bWVMl6AA+v3AFsQavMHiCtQ4MBjjCJBdJ
j/pPZt7bG6zy9pBnpiAkT9BQqTC2QBhJgFSlfPOWzTw9jf2NUWjNrGCVKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEBLit4OZ1ondiJvuxZNlVvN0CYcMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvUUV1SzNnNW5XaWQySW0tN0ZrMlZXODNRSmh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRwzMA0G
CSqGSIb3DQEBCwUAA4IBAQC+OtPDG91fUaL3jJqmrlATMkzA07DEMW0OA0MUEo4h
AAg916BBTGS/sgBcga4dvlr6XwwszzUFiUPYOoBmEqo5jS2Ve/TgupWEs1o9P5Oo
cgtVn61qd/Bd+MpAQeFBPgQc2ZDJHJptEJXXxOy0vd7XtqJAhzXaVFYTydnCNhZH
9iM1t+fFrUvu7/9m/goVJl3XrJCLq1X/CKv16xmRw/JjtnqDkZ4V8XqiY7egw8pi
JY9OkeuYTYoecTi0wLktU4fMxT4D9GBHr6FBvnB4FSSDDGyivXaDGxD7ToxFrFf4
8OnXS5aE8LRcOjrneYHRFiEvxixQ48Vn4qrF4l5fTfI0
-----END CERTIFICATE-----
Generated at Mon Dec 8 01:40:39 2025 by rpki-client