This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/pqWAwtSrVWHhYeLyoOZYwb_89MY.roa
File:                     pqWAwtSrVWHhYeLyoOZYwb_89MY.roa (raw, json)
Hash identifier:          UtepypB/1E+cJ1/s4IJjEbaQqJ0MlYB18cpRtSY7yhY=
Subject key identifier:   A6:A5:80:C2:D4:AB:55:61:E1:61:E2:F2:A0:E6:58:C1:BF:FC:F4:C6
Certificate issuer:       /CN=67b3b58b452239001eac2e221ba56c3afed7a790
Certificate serial:       019B7AC9334AE4ADC8D60B07E267B2D08C96
Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/pqWAwtSrVWHhYeLyoOZYwb_89MY.roa
Signing time:             Thu 01 Jan 2026 18:19:24 +0000
ROA not before:           Thu 01 Jan 2026 18:19:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50137
IP address blocks:        193.104.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:33:4a:e4:ad:c8:d6:0b:07:e2:67:b2:d0:8c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790
        Validity
            Not Before: Jan  1 18:19:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a6a580c2d4ab5561e161e2f2a0e658c1bffcf4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:94:72:6e:49:18:12:b7:1a:f2:52:a7:89:75:
                    3e:26:7b:1a:51:bb:00:3e:2c:05:af:96:73:ad:e2:
                    87:c1:32:40:bd:83:7e:17:55:2c:e2:09:69:96:1c:
                    b2:25:b5:ba:f9:1c:d2:ef:da:48:ea:9e:d8:28:32:
                    cf:87:ef:f9:45:8a:5b:9f:cb:b6:8d:2b:cb:c5:6e:
                    02:21:5b:0b:8e:8e:0d:cd:0c:e4:8d:4c:30:33:31:
                    6d:05:d8:e0:ac:94:d9:d6:bb:c3:95:dc:a7:db:62:
                    4d:67:7d:95:f9:37:b9:1b:7d:85:9e:c8:d5:56:d1:
                    a1:07:3c:00:95:db:08:aa:a0:df:27:8a:08:11:7d:
                    e4:b5:e2:88:7d:dc:89:ac:75:c8:3a:a4:e6:12:e9:
                    b7:7c:70:02:f4:8d:5a:cc:cb:18:de:62:4e:e1:1c:
                    33:94:f5:74:c0:93:51:e1:4b:d4:cd:47:be:16:71:
                    1c:e0:b7:ee:9b:0e:23:b8:ba:3a:e2:fd:31:e9:b1:
                    34:89:6b:05:fb:ea:e1:3d:c4:8b:50:3c:d9:1c:72:
                    06:2f:0b:db:42:91:98:ca:08:ff:26:42:41:ef:20:
                    37:ee:43:19:9c:d3:a4:e8:f8:90:7b:fb:af:99:1e:
                    63:73:24:5e:e4:fa:69:5c:ec:ca:70:d1:1b:cb:2d:
                    ab:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A5:80:C2:D4:AB:55:61:E1:61:E2:F2:A0:E6:58:C1:BF:FC:F4:C6
            X509v3 Authority Key Identifier:
                keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/pqWAwtSrVWHhYeLyoOZYwb_89MY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:34:8d:c7:20:24:5f:8a:81:72:6a:fb:4c:73:b8:f5:08:c4:
         25:42:93:ba:9b:59:cb:0f:b5:e2:e7:cc:8d:95:54:a9:64:20:
         14:eb:2f:2c:68:a1:de:62:d4:f8:46:f7:cf:ec:99:c5:a2:56:
         99:7a:3d:54:a6:02:b6:51:11:b9:b1:aa:14:eb:44:e3:fb:f6:
         51:92:d4:5d:c3:0d:d3:aa:6a:e3:b0:df:2a:3b:9e:f2:a6:fe:
         07:a3:c5:b0:42:10:67:92:39:19:9c:6f:b7:31:7a:60:df:6f:
         ff:48:a1:75:7a:8a:d4:4d:cd:fc:ae:6d:80:b2:7c:c8:d0:93:
         d1:9f:ad:0f:dd:23:94:d7:15:39:e7:dd:0f:75:76:81:0f:99:
         4c:13:a4:0b:7f:31:d0:f9:6b:7a:c6:ed:89:e2:dd:0e:25:1c:
         e3:42:63:56:f4:c7:b1:49:85:46:94:72:9c:37:40:a5:9c:9d:
         5b:0e:de:83:2b:0b:8c:b6:fe:e9:f9:fa:33:4e:b3:39:f3:2b:
         ca:66:01:99:99:7e:e1:25:42:41:e0:89:be:bb:36:4a:dc:f9:
         63:02:70:a2:e8:17:3d:e2:99:ad:f2:80:a2:cf:37:68:42:78:
         38:17:1d:6d:fd:bb:ce:ff:12:a8:21:28:5d:73:ef:20:4b:d1:
         ce:85:37:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:31:34 2026 by rpki-client