This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/qg1swg6GgwaDcP5Y6flBD_xD-oc.roa
File:                     qg1swg6GgwaDcP5Y6flBD_xD-oc.roa (raw, json)
Hash identifier:          6EZ8yz4pLpv5/Nb1v6JfBJ6hb6IZGN5B51VwiFJJYpQ=
Subject key identifier:   AA:0D:6C:C2:0E:86:83:06:83:70:FE:58:E9:F9:41:0F:FC:43:FA:87
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       019B7AC790466EACCE88FECF306E8638A8D2
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/qg1swg6GgwaDcP5Y6flBD_xD-oc.roa
Signing time:             Thu 01 Jan 2026 18:17:37 +0000
ROA not before:           Thu 01 Jan 2026 18:17:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47440
IP address blocks:        87.247.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:90:46:6e:ac:ce:88:fe:cf:30:6e:86:38:a8:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: Jan  1 18:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=aa0d6cc20e8683068370fe58e9f9410ffc43fa87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:f5:25:f1:f3:eb:76:98:61:1e:55:1f:f1:80:
                    ad:5a:2c:ab:9a:be:3e:47:85:6e:6d:cc:66:ef:f1:
                    50:65:5d:ad:2b:93:e8:16:40:fc:07:8f:f5:07:16:
                    1d:53:e7:c2:97:f4:5c:4e:8e:1e:e8:12:12:fe:1e:
                    46:ff:a3:9f:e7:fe:62:33:99:1a:00:a4:32:39:14:
                    fc:e5:6c:79:da:a0:6e:19:c2:33:a3:32:b5:ee:d4:
                    fb:b1:e6:70:62:cc:cd:30:4c:b0:fb:7f:c6:e0:ab:
                    7b:5d:28:39:a2:ad:2d:88:62:14:3e:39:b8:29:c9:
                    4a:d1:78:52:88:2c:62:c2:cf:0f:e7:d8:81:66:88:
                    05:2f:a6:83:c5:f9:07:ec:b2:22:e9:58:00:04:91:
                    7c:cf:a9:5d:3f:4e:b9:fc:73:8b:f7:d9:73:00:91:
                    86:d8:df:26:3a:df:35:5a:0b:bb:af:80:9c:4b:b0:
                    6b:2d:4e:8e:8e:48:2a:5e:33:d3:99:e5:f4:7a:a3:
                    7e:d9:fc:65:88:9a:3a:89:8d:a9:36:9f:27:78:ca:
                    6c:a5:a6:28:98:74:42:be:1f:8e:c5:fe:22:c6:40:
                    43:88:36:a3:f2:74:4c:3a:ba:d2:ef:ce:e9:12:bf:
                    df:0b:47:ac:9d:20:9e:e7:04:7e:6c:d4:ef:1a:e0:
                    e1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0D:6C:C2:0E:86:83:06:83:70:FE:58:E9:F9:41:0F:FC:43:FA:87
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/qg1swg6GgwaDcP5Y6flBD_xD-oc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.247.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:91:9f:7d:84:54:dc:56:fa:a7:10:7b:48:17:33:dc:6c:d4:
         25:9c:60:9e:02:74:20:1f:7b:b0:60:0c:da:b9:cd:1e:2f:ed:
         18:c5:75:58:94:65:cb:c6:f5:94:c2:40:28:87:a1:61:c3:6d:
         4f:42:eb:6a:8a:34:6f:25:bd:ce:f6:ff:f3:75:e8:85:55:9a:
         2e:bf:3d:b1:e0:6c:3b:51:fa:a9:9b:93:97:83:a6:51:13:1d:
         2f:f8:f1:a0:64:34:d2:01:67:c8:51:34:c9:a7:9a:f6:1f:be:
         0d:24:2b:3b:c0:28:8d:f4:ca:96:df:e9:0e:af:26:50:be:29:
         4c:72:bb:48:d5:fd:28:29:a8:41:20:2d:9c:d1:87:2b:8c:a0:
         75:7d:24:b4:d3:3e:4d:5f:cb:1b:2f:9e:1b:cd:05:8c:ce:12:
         e3:f6:23:df:b5:26:b3:06:94:ed:9c:6d:c7:0a:a8:d4:63:1e:
         e2:f4:bb:a2:61:d3:ca:6f:2c:7b:62:c6:43:9e:99:2f:00:da:
         89:bc:fb:4f:48:5c:b0:55:94:31:93:90:ea:b9:f8:4b:8c:86:
         22:1c:99:1c:e4:5f:bc:39:49:19:d7:d5:3f:51:9f:4a:31:1f:
         c6:2d:6a:55:e0:f8:64:34:04:57:38:54:b4:65:f7:01:82:f0:
         35:9a:91:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6x5BGbqzOiP7PMG6GOKjSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjYwMTAxMTgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTBkNmNjMjBlODY4MzA2ODM3MGZlNThlOWY5NDEwZmZjNDNmYTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9vUl8fPrdphhHlUf8YCtWiyrmr4+
R4Vubcxm7/FQZV2tK5PoFkD8B4/1BxYdU+fCl/RcTo4e6BIS/h5G/6Of5/5iM5ka
AKQyORT85Wx52qBuGcIzozK17tT7seZwYszNMEyw+3/G4Kt7XSg5oq0tiGIUPjm4
KclK0XhSiCxiws8P59iBZogFL6aDxfkH7LIi6VgABJF8z6ldP065/HOL99lzAJGG
2N8mOt81Wgu7r4CcS7BrLU6OjkgqXjPTmeX0eqN+2fxliJo6iY2pNp8neMpspaYo
mHRCvh+Oxf4ixkBDiDaj8nRMOrrS787pEr/fC0esnSCe5wR+bNTvGuDhvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKoNbMIOhoMGg3D+WOn5QQ/8Q/qHMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvcWcxc3dnNkdnd2FEY1A1WTZmbEJEX3hELW9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/eeMA0G
CSqGSIb3DQEBCwUAA4IBAQC3kZ99hFTcVvqnEHtIFzPcbNQlnGCeAnQgH3uwYAza
uc0eL+0YxXVYlGXLxvWUwkAoh6Fhw21PQutqijRvJb3O9v/zdeiFVZouvz2x4Gw7
Ufqpm5OXg6ZREx0v+PGgZDTSAWfIUTTJp5r2H74NJCs7wCiN9MqW3+kOryZQvilM
crtI1f0oKahBIC2c0YcrjKB1fSS00z5NX8sbL54bzQWMzhLj9iPftSazBpTtnG3H
CqjUYx7i9LuiYdPKbyx7YsZDnpkvANqJvPtPSFywVZQxk5DqufhLjIYiHJkc5F+8
OUkZ19U/UZ9KMR/GLWpV4PhkNARXOFS0ZfcBgvA1mpEp
-----END CERTIFICATE-----
Generated at Mon Jan 19 20:37:39 2026 by rpki-client