This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qoVEZ7K9GCKg3cFTdycTfQ6SHBo.roa
File:                     qoVEZ7K9GCKg3cFTdycTfQ6SHBo.roa (raw, json)
Hash identifier:          J1SgDXl6C17rsUVgJipfmvABvq+eD0GJEZoCGQlGFcg=
Subject key identifier:   AA:85:44:67:B2:BD:18:22:A0:DD:C1:53:77:27:13:7D:0E:92:1C:1A
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       019B797E0412365E7AA1010CF3729724CF24
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qoVEZ7K9GCKg3cFTdycTfQ6SHBo.roa
Signing time:             Thu 01 Jan 2026 12:17:40 +0000
ROA not before:           Thu 01 Jan 2026 12:17:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213958
IP address blocks:        93.113.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 08:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:04:12:36:5e:7a:a1:01:0c:f3:72:97:24:cf:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jan  1 12:17:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=aa854467b2bd1822a0ddc1537727137d0e921c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8a:25:04:c6:c0:ee:15:d8:68:e2:79:d5:e9:
                    28:9c:38:ec:1d:c7:66:27:d4:d9:b7:53:35:f4:a7:
                    c2:cd:77:5f:d3:e4:76:b1:ca:0d:c0:eb:e7:9c:24:
                    ca:8c:7e:01:8b:08:d1:7a:36:f3:3c:33:00:68:95:
                    e8:43:0b:0f:1b:e8:16:b5:53:4a:15:1e:f5:5b:32:
                    e8:44:a5:b8:92:fa:4f:47:c9:6e:ad:f1:7c:c5:b3:
                    bf:4a:2a:05:c7:bc:43:c8:3b:83:bf:3c:0e:45:e8:
                    db:99:11:c0:45:fc:a9:0f:ec:2f:69:93:20:6e:b7:
                    d7:78:10:09:37:76:47:4b:6f:53:f8:dd:a4:2d:ae:
                    a0:5c:b2:42:fa:bf:29:94:1b:ba:d7:c3:c1:22:34:
                    ec:81:aa:e7:8f:0a:30:17:0e:4b:f7:31:ef:9a:e0:
                    6d:df:c1:80:57:a4:a3:82:3a:b5:86:6d:39:ee:ce:
                    8d:8d:53:46:5d:50:a6:74:57:ea:b8:0f:88:57:28:
                    68:8f:92:99:63:04:82:d8:1b:db:f9:5e:89:a6:20:
                    63:7c:1a:b2:a9:20:8a:b3:0c:d9:f1:46:00:82:c3:
                    aa:47:58:e5:e1:c7:08:a0:d1:0d:90:67:38:ae:0f:
                    00:51:b1:29:44:92:51:cc:3f:c8:06:c8:6b:a6:f3:
                    ea:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:85:44:67:B2:BD:18:22:A0:DD:C1:53:77:27:13:7D:0E:92:1C:1A
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qoVEZ7K9GCKg3cFTdycTfQ6SHBo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:ae:70:ae:18:73:ad:c9:2e:da:de:cc:69:20:8c:3b:6b:49:
         a1:6f:bc:db:0b:ec:f4:39:50:16:3c:d0:83:23:8b:da:db:5c:
         d9:de:95:35:c3:45:f4:f4:ed:52:59:fa:21:53:d9:77:93:34:
         00:dc:a9:97:68:62:3e:5f:c4:9e:4d:d6:99:02:d5:f7:ca:67:
         2b:92:6f:e6:a1:2a:70:7b:bc:f8:bc:d4:44:53:46:e0:75:da:
         26:bf:df:57:cd:a4:c9:3f:0d:ba:52:e3:40:4b:aa:a3:1a:3a:
         96:70:00:41:a9:06:11:87:bf:ca:ef:22:e5:d5:15:0d:fc:71:
         ed:e4:61:7b:aa:bf:cf:df:27:9c:fa:6f:72:f2:ac:e7:6c:0e:
         86:97:c0:62:45:45:6b:bf:66:46:89:ab:0a:f5:59:cb:05:68:
         9c:e1:86:35:cd:71:62:79:c3:5a:17:28:dc:f5:a0:c2:ff:ae:
         ce:7f:0a:e5:33:43:1f:ac:8b:84:e8:89:70:42:24:40:5c:5f:
         36:df:0d:9d:d1:99:95:5f:57:95:ce:3d:1f:b4:14:c0:58:9d:
         bf:4c:46:53:a8:4a:72:0c:41:8c:f1:16:75:ff:14:d1:21:84:
         99:63:a6:07:bb:2a:db:8d:36:9c:62:8a:64:0f:5f:f1:cf:1e:
         78:ce:40:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 14:40:15 2026 by rpki-client