This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/QqwVs6ujXMn3DSmmGHQFcdeFCxo.roa
File:                     QqwVs6ujXMn3DSmmGHQFcdeFCxo.roa (raw, json)
Hash identifier:          zH1l24LQuWBz7KLAK+1iU8XV7rSwOG1Mc8RqtTgTEz0=
Subject key identifier:   42:AC:15:B3:AB:A3:5C:C9:F7:0D:29:A6:18:74:05:71:D7:85:0B:1A
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       019AC46C808A50E945E489C79CA879F38D33
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/QqwVs6ujXMn3DSmmGHQFcdeFCxo.roa
Signing time:             Thu 27 Nov 2025 08:27:16 +0000
ROA not before:           Thu 27 Nov 2025 08:27:16 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     270035
IP address blocks:        45.10.104.0/24 maxlen: 24
                          45.10.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 17:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:c4:6c:80:8a:50:e9:45:e4:89:c7:9c:a8:79:f3:8d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Nov 27 08:27:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=42ac15b3aba35cc9f70d29a618740571d7850b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7c:0b:14:aa:75:cd:c2:4f:50:c8:f8:27:a0:
                    10:36:a8:d9:31:b4:0d:fb:54:e6:a0:e9:77:3c:51:
                    45:4c:66:0e:9e:88:47:fb:9b:b4:fc:ee:be:35:32:
                    21:76:77:5c:36:73:b3:e9:11:86:36:e8:0d:90:ba:
                    df:2f:42:2c:8e:2c:19:07:69:96:f5:35:80:cb:46:
                    6d:61:0c:2d:68:04:15:47:55:44:e4:7e:7d:0a:6b:
                    94:b1:0b:ae:2f:30:4b:8f:0c:82:3b:ba:11:65:98:
                    f4:07:15:23:ef:6d:d8:a5:3e:a6:8b:1a:a5:08:bc:
                    d8:16:2e:b3:71:d4:ab:54:dc:2b:88:52:d5:0f:c3:
                    50:2c:69:1c:88:af:fa:2e:48:92:82:95:79:e2:86:
                    b5:70:38:39:cd:c4:8e:81:8c:85:01:fb:d6:91:f4:
                    ec:53:50:1f:1d:49:ad:61:d7:53:05:52:92:1b:e5:
                    6c:48:de:8d:4e:a4:04:d8:75:1f:6f:29:80:81:c0:
                    4f:14:31:b2:35:82:35:a5:5c:97:e9:3f:60:af:87:
                    bf:b2:48:f7:0a:e2:ff:4b:3b:3c:06:a2:db:fd:d6:
                    f0:3f:97:50:c1:bb:09:50:a9:cc:57:3e:18:26:a1:
                    63:cc:88:01:cb:0c:54:3c:18:b7:f5:aa:61:a3:71:
                    86:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AC:15:B3:AB:A3:5C:C9:F7:0D:29:A6:18:74:05:71:D7:85:0B:1A
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/QqwVs6ujXMn3DSmmGHQFcdeFCxo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:a0:e7:97:54:c7:57:78:cb:7b:d3:dc:11:a1:5e:90:17:f4:
         93:e9:1c:4e:c5:67:24:70:b0:8f:53:87:9d:1d:5a:1a:03:49:
         15:95:ec:18:3b:6d:28:f8:51:99:f7:55:c9:fe:0c:98:04:6d:
         8e:04:5d:b6:fa:e3:74:fc:06:fc:3d:47:6f:de:3b:84:32:d7:
         2d:31:c8:22:d4:c4:e0:1f:43:48:d0:0a:4b:43:de:d9:1b:8e:
         62:ea:fd:03:25:67:dd:42:f4:af:9f:d1:f2:4d:ce:ac:80:5d:
         15:78:3a:8e:15:3b:e1:df:51:58:99:c2:0c:d1:07:0f:5a:67:
         0e:eb:d6:e8:a6:87:e7:53:bf:7e:9e:7a:62:05:f3:83:34:16:
         98:bf:d5:90:10:8b:28:90:22:b3:b5:a0:92:fc:93:b0:78:f5:
         09:9a:3a:4b:0d:5b:36:12:49:87:ca:67:b6:91:aa:40:8b:1d:
         b3:c2:d0:42:25:ae:56:90:c6:2e:1c:85:00:47:87:9c:43:a0:
         7a:75:35:9a:ec:1c:55:6e:8a:8f:5a:2e:03:c3:7e:97:87:f8:
         37:9b:73:89:10:81:27:fe:1e:8b:c9:58:33:b4:41:3b:13:cf:
         56:86:06:58:ca:88:53:40:60:e9:68:b1:0d:58:3e:c2:07:61:
         27:7a:21:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 01:40:40 2025 by rpki-client