This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Qyp4fgOwz-Vvq_5d4zYKhiHRuMo.roa
File:                     Qyp4fgOwz-Vvq_5d4zYKhiHRuMo.roa (raw, json)
Hash identifier:          MV4Egf9jm5Fh4nHnbzSq9bJTOLf8mzC5vQyKVyQi4mY=
Subject key identifier:   43:2A:78:7E:03:B0:CF:E5:6F:AB:FE:5D:E3:36:0A:86:21:D1:B8:CA
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       019B797E0DFD0834065B70F673D3818E5DD0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Qyp4fgOwz-Vvq_5d4zYKhiHRuMo.roa
Signing time:             Thu 01 Jan 2026 12:17:42 +0000
ROA not before:           Thu 01 Jan 2026 12:17:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     395793
IP address blocks:        93.115.173.0/24 maxlen: 24
                          185.193.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 20:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:0d:fd:08:34:06:5b:70:f6:73:d3:81:8e:5d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jan  1 12:17:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=432a787e03b0cfe56fabfe5de3360a8621d1b8ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6a:64:cb:6c:93:87:02:5d:62:e3:59:54:2c:
                    ac:c1:74:6c:59:be:18:22:ec:8c:f9:ed:66:a9:e1:
                    65:f6:0b:ac:49:d7:24:81:44:f7:37:d6:ab:05:b0:
                    1d:cc:bc:59:6c:25:e2:75:e6:e4:5f:ff:8e:70:96:
                    a9:82:57:50:d7:9a:f5:57:19:2d:ee:45:f2:d1:13:
                    ac:f0:6a:e6:c9:8b:a2:e8:6e:56:c8:a5:81:5b:a2:
                    c5:98:2e:72:c8:9a:6d:bf:af:29:7b:9f:76:a2:c0:
                    c1:1f:d5:71:bc:74:aa:f4:53:4f:f3:ff:25:a8:d3:
                    92:f5:be:69:0b:1d:fb:aa:09:41:64:07:fe:97:58:
                    88:bd:98:38:20:e0:12:1e:b6:b4:a2:a5:76:c3:e9:
                    85:9d:5a:ba:44:6c:3c:40:86:42:45:d3:e3:c9:f0:
                    4b:0e:cd:5a:3f:5c:8c:e2:ed:a5:54:5b:0d:88:0d:
                    00:56:83:50:00:c3:44:67:f0:e5:7e:9b:20:9b:c6:
                    3e:1a:bc:25:9a:cc:76:e3:d0:4c:d3:bb:78:e4:a4:
                    99:4c:9f:23:1b:da:5e:a2:c2:71:ab:e1:98:c4:d8:
                    f8:3d:ba:44:62:f5:d1:c2:7c:03:31:85:ab:1e:70:
                    7a:1c:38:f4:7d:6f:18:07:a6:dc:c2:ba:d1:6e:f7:
                    62:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2A:78:7E:03:B0:CF:E5:6F:AB:FE:5D:E3:36:0A:86:21:D1:B8:CA
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Qyp4fgOwz-Vvq_5d4zYKhiHRuMo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.115.173.0/24
                  185.193.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:9f:f5:5a:b9:ac:58:b9:da:44:ba:9a:24:52:f4:26:db:7e:
         76:4e:7f:bb:94:e6:64:bd:21:28:f8:b1:b9:61:41:77:57:ad:
         3c:96:21:28:90:cf:34:34:18:be:80:63:6b:62:af:36:40:a2:
         f9:76:28:bf:ec:84:67:b0:33:89:d0:0e:31:dc:65:12:39:b4:
         9a:6a:2a:d8:da:24:63:c9:f2:7a:ef:f7:2a:0e:0e:0c:9f:60:
         92:6a:ba:03:7f:8e:97:bd:6c:a4:7d:96:6e:4f:2c:9b:36:a3:
         30:fc:e3:8f:b2:e5:e1:8d:3c:83:58:c1:a1:d6:fd:56:2c:9c:
         e5:4e:f7:a3:4b:90:46:27:29:a5:b2:9b:7c:8e:e9:a6:35:f6:
         dc:a9:39:4e:79:c2:94:45:8b:25:b2:60:0a:ad:f7:61:f8:0b:
         eb:53:d7:db:5c:f9:3e:32:27:a5:a5:5a:d3:e7:b1:1b:d0:6e:
         85:ef:19:b3:f3:51:3a:78:50:74:e8:a4:44:e8:94:fe:68:fe:
         f9:3a:3f:dd:52:c9:ac:bf:fc:b3:fc:13:0c:b6:a3:44:3a:b5:
         d8:79:d4:9a:83:2e:b4:72:73:24:3f:10:c2:e3:6c:12:15:32:
         e0:4c:17:b8:9f:50:3f:5c:c3:ee:86:45:c1:de:fc:6d:a3:ed:
         87:ea:26:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:09:26 2026 by rpki-client