This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/RcqhTz_ec1-tzrPsrQTXnE2AnqE.roa
File:                     RcqhTz_ec1-tzrPsrQTXnE2AnqE.roa (raw, json)
Hash identifier:          OKfplSUyoXSyPPjeB3MqpIBuU3GMMFT43nXLCRbUXi8=
Subject key identifier:   45:CA:A1:4F:3F:DE:73:5F:AD:CE:B3:EC:AD:04:D7:9C:4D:80:9E:A1
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       019B7AC7971366246B73545B8F9B7931D79C
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/RcqhTz_ec1-tzrPsrQTXnE2AnqE.roa
Signing time:             Thu 01 Jan 2026 18:17:39 +0000
ROA not before:           Thu 01 Jan 2026 18:17:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     58033
IP address blocks:        92.246.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:97:13:66:24:6b:73:54:5b:8f:9b:79:31:d7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: Jan  1 18:17:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=45caa14f3fde735fadceb3ecad04d79c4d809ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:dd:40:e4:76:e5:b3:7d:2d:37:58:04:9b:
                    19:8f:0e:b1:49:20:e5:d3:5b:75:9b:ad:be:2a:79:
                    19:cd:00:12:37:3e:0b:c4:0f:b2:3c:90:94:6d:78:
                    34:54:ec:08:ca:05:88:1c:3b:8e:d6:88:e5:6f:6f:
                    e9:4f:48:0f:d2:4b:92:bf:78:e7:ab:c7:41:5b:7b:
                    ab:0c:eb:53:e4:cf:74:7f:0c:66:24:da:49:ab:68:
                    f3:64:2e:24:59:ac:d8:a2:36:af:59:4e:9f:47:b4:
                    9b:98:39:ba:cf:ee:76:b0:c2:0f:a9:28:cb:42:ce:
                    6d:49:af:3a:61:13:fa:15:6e:fc:31:5b:23:db:85:
                    b8:88:fc:0d:76:1d:25:61:b0:81:72:da:91:35:3c:
                    49:c7:e1:85:fd:ae:33:97:d0:98:c6:4d:bb:aa:42:
                    da:76:00:bb:57:dc:ba:98:09:b1:07:c0:1c:84:66:
                    ce:62:39:15:34:b9:73:a6:96:63:24:c1:b6:2c:5d:
                    10:81:9a:77:84:a1:f6:fb:f1:4c:0b:fa:e0:9d:37:
                    6c:09:24:72:38:1e:8e:aa:4b:72:ae:a1:21:22:2b:
                    43:80:d0:14:b1:33:2c:4f:bf:2f:65:95:80:94:98:
                    18:c0:1f:4a:1d:0b:2b:07:cd:a1:10:67:1c:c0:cd:
                    bb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CA:A1:4F:3F:DE:73:5F:AD:CE:B3:EC:AD:04:D7:9C:4D:80:9E:A1
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/RcqhTz_ec1-tzrPsrQTXnE2AnqE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.246.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:7c:59:8c:10:11:fb:49:c1:73:f1:41:63:c7:51:79:13:34:
         9c:c7:6d:5d:37:1b:b6:78:18:47:33:e7:af:4f:6e:4c:e0:53:
         af:ea:10:8e:73:71:77:ad:97:34:8e:2e:53:08:50:6f:ee:15:
         f7:e9:07:4a:b7:5c:ca:47:a8:c0:e1:98:5e:90:7b:d8:67:45:
         95:50:42:1f:ba:13:46:29:5a:74:1f:2f:ff:24:f3:b4:5c:5a:
         c9:d9:c2:5d:1c:39:23:9a:91:52:38:84:41:db:b6:2f:c8:a9:
         f5:d2:1e:0e:87:a5:78:7b:50:ad:c9:a9:6a:93:5b:44:76:42:
         89:fd:ac:cf:f3:9c:39:f6:5a:80:27:c9:17:8e:5e:da:19:6c:
         26:15:94:e2:53:af:13:47:de:b9:30:59:a6:e9:9f:8c:e3:5c:
         c3:62:91:4b:19:1e:94:a8:24:32:fe:53:ee:c2:fa:32:5b:9c:
         4b:07:a9:e4:3b:98:e2:92:47:f2:e0:f1:99:be:be:4b:34:c0:
         c3:88:97:db:4d:f1:de:e8:02:1e:c4:35:a4:cb:06:ed:ce:70:
         67:8c:65:f1:12:69:22:e4:a3:32:dd:e4:9d:03:d6:99:be:18:
         af:86:36:c3:24:2e:f3:17:c8:60:00:18:a1:13:55:2b:2a:47:
         c5:d2:48:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:37:41 2026 by rpki-client