This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/Qmu3wW12Nt0wC-4fyX9XhN0sy00.roa
File:                     Qmu3wW12Nt0wC-4fyX9XhN0sy00.roa (raw, json)
Hash identifier:          3puXzcVdaiUqy4sNyffXvbU1Eh7Kt4nob6sCXMDl8Go=
Subject key identifier:   42:6B:B7:C1:6D:76:36:DD:30:0B:EE:1F:C9:7F:57:84:DD:2C:CB:4D
Certificate issuer:       /CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Certificate serial:       019B7A5B6A1D64EC6BD72B681FC424B0DEAA
Authority key identifier: 18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/Qmu3wW12Nt0wC-4fyX9XhN0sy00.roa
Signing time:             Thu 01 Jan 2026 16:19:29 +0000
ROA not before:           Thu 01 Jan 2026 16:19:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     58183
IP address blocks:        195.62.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:6a:1d:64:ec:6b:d7:2b:68:1f:c4:24:b0:de:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
        Validity
            Not Before: Jan  1 16:19:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=426bb7c16d7636dd300bee1fc97f5784dd2ccb4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6a:3c:96:68:a0:c6:86:f0:2a:6a:4d:81:f1:
                    13:ab:bd:5c:90:a9:c4:85:80:16:62:fe:8b:10:6e:
                    a2:12:6e:f5:6a:6f:fe:b3:f4:92:97:c3:cb:01:e8:
                    90:06:1f:0c:33:e2:b9:42:71:b6:9f:c3:32:54:08:
                    aa:fe:2d:44:f9:9c:f1:77:cf:6e:ae:ad:79:27:4a:
                    f2:1a:73:55:e1:63:05:00:8f:5a:97:80:f5:f9:05:
                    75:84:e9:8a:6d:40:80:fd:07:96:89:c6:19:ea:59:
                    0e:d0:86:f1:a9:10:33:33:c3:26:c6:ee:d1:f4:47:
                    30:e7:e0:56:39:f5:60:ed:c0:96:85:fd:b5:d5:90:
                    9b:b9:4a:8e:21:67:4d:a5:da:79:2a:62:32:39:1d:
                    e4:b6:e1:f7:f3:1d:82:20:b6:3f:e4:bc:dd:43:44:
                    8d:ea:97:b9:12:c6:03:a4:b2:3f:8f:0f:60:0e:75:
                    27:64:e4:66:e3:6f:ae:bb:90:97:8c:da:e3:ab:00:
                    d6:a8:95:e4:e4:54:19:4d:0e:58:49:8a:e9:3b:46:
                    26:80:71:5c:e4:b1:88:cf:5a:4b:35:29:a8:54:71:
                    f7:cb:89:11:6d:91:0f:49:e1:68:80:6a:36:3b:28:
                    6c:9e:f2:50:71:50:db:2a:61:5d:f4:f8:5d:b6:79:
                    63:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6B:B7:C1:6D:76:36:DD:30:0B:EE:1F:C9:7F:57:84:DD:2C:CB:4D
            X509v3 Authority Key Identifier:
                keyid:18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/Qmu3wW12Nt0wC-4fyX9XhN0sy00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.62.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:3d:54:2d:57:de:c5:d5:18:d4:2e:4d:41:f4:5e:65:00:00:
         06:01:7e:a4:4f:4f:38:72:44:03:91:c8:e6:d4:75:57:a6:3e:
         7e:e4:f7:b3:9a:7e:84:c6:70:f0:d5:83:41:da:1a:87:0e:e1:
         f2:6d:61:88:96:0c:af:8a:f9:96:07:ff:a9:ca:3a:ec:1c:ce:
         b7:99:48:55:bb:c6:9b:a9:9b:98:45:7f:69:62:85:1f:55:da:
         ce:42:e7:06:6e:80:88:63:e4:7c:b7:44:7a:1b:ce:96:63:b3:
         c4:18:46:4a:58:59:ed:ac:c0:08:9a:ba:c4:2f:59:d3:0e:4f:
         78:56:c9:14:df:19:f3:4c:f0:4e:a7:f0:ab:cc:6c:92:39:31:
         18:17:35:80:c7:32:c2:b2:75:7d:8f:c5:f0:ef:1c:5c:76:1e:
         78:62:32:23:29:d6:43:87:40:dd:37:a7:71:e6:2b:61:d3:31:
         74:67:06:53:b5:98:e9:b8:28:a8:9d:05:68:57:aa:b4:e4:61:
         96:37:4b:a4:ea:c3:2f:b4:fd:ea:d0:d8:3d:c5:fc:85:17:31:
         ac:15:7a:8c:1f:f1:9b:9f:bd:a7:e4:db:9b:a0:02:4d:1b:19:
         ef:6e:8a:01:2a:25:f8:da:96:4b:57:a0:8c:01:dd:a5:ea:a8:
         bb:aa:46:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6W2odZOxr1ytoH8QksN6qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NWYzYzMzZmIwMTEzYjQ1ZDQ1OTI5YTRjMDZmMjhjNzE0
ZGNhNGIwHhcNMjYwMTAxMTYxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjZiYjdjMTZkNzYzNmRkMzAwYmVlMWZjOTdmNTc4NGRkMmNjYjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGo8lmigxobwKmpNgfETq71ckKnE
hYAWYv6LEG6iEm71am/+s/SSl8PLAeiQBh8MM+K5QnG2n8MyVAiq/i1E+Zzxd89u
rq15J0ryGnNV4WMFAI9al4D1+QV1hOmKbUCA/QeWicYZ6lkO0IbxqRAzM8Mmxu7R
9Ecw5+BWOfVg7cCWhf211ZCbuUqOIWdNpdp5KmIyOR3ktuH38x2CILY/5LzdQ0SN
6pe5EsYDpLI/jw9gDnUnZORm42+uu5CXjNrjqwDWqJXk5FQZTQ5YSYrpO0YmgHFc
5LGIz1pLNSmoVHH3y4kRbZEPSeFogGo2OyhsnvJQcVDbKmFd9PhdtnljzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEJrt8FtdjbdMAvuH8l/V4TdLMtNMB8GA1UdIwQY
MBaAFBhfPDP7ARO0XUWSmkwG8oxxTcpLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0Y4OE1fc0JFN1JkUlpLYVRBYnlqSEZOeWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8xY2ZlYjctZDBhYS00YzFkLWJiOWIt
NzYzYWJhYjk3MTAxLzEvUW11M3dXMTJOdDB3Qy00ZnlYOVhoTjBzeTAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8xY2ZlYjctZDBhYS00YzFkLWJiOWItNzYzYWJhYjk3MTAx
LzEvR0Y4OE1fc0JFN1JkUlpLYVRBYnlqSEZOeWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwz4jMA0G
CSqGSIb3DQEBCwUAA4IBAQBHPVQtV97F1RjULk1B9F5lAAAGAX6kT084ckQDkcjm
1HVXpj5+5Pezmn6ExnDw1YNB2hqHDuHybWGIlgyvivmWB/+pyjrsHM63mUhVu8ab
qZuYRX9pYoUfVdrOQucGboCIY+R8t0R6G86WY7PEGEZKWFntrMAImrrEL1nTDk94
VskU3xnzTPBOp/CrzGySOTEYFzWAxzLCsnV9j8Xw7xxcdh54YjIjKdZDh0DdN6dx
5ith0zF0ZwZTtZjpuCionQVoV6q05GGWN0uk6sMvtP3q0Ng9xfyFFzGsFXqMH/Gb
n72n5NuboAJNGxnvbooBKiX42pZLV6CMAd2l6qi7qkYT
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:55:09 2026 by rpki-client