This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/QBinzFbTX8ICJKPb335BTjaNXKk.roa
File:                     QBinzFbTX8ICJKPb335BTjaNXKk.roa (raw, json)
Hash identifier:          phGs/IfWO4O9NiG9zthPXCYOMupHdBQa3yN7pRaGe2k=
Subject key identifier:   40:18:A7:CC:56:D3:5F:C2:02:24:A3:DB:DF:7E:41:4E:36:8D:5C:A9
Certificate issuer:       /CN=5e9814d4315d30adbc8de30600556ae9c3cf9ece
Certificate serial:       019B7B36258B8CD6A5D37F131A6352745133
Authority key identifier: 5E:98:14:D4:31:5D:30:AD:BC:8D:E3:06:00:55:6A:E9:C3:CF:9E:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/QBinzFbTX8ICJKPb335BTjaNXKk.roa
Signing time:             Thu 01 Jan 2026 20:18:24 +0000
ROA not before:           Thu 01 Jan 2026 20:18:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     20799
IP address blocks:        193.33.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:25:8b:8c:d6:a5:d3:7f:13:1a:63:52:74:51:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9814d4315d30adbc8de30600556ae9c3cf9ece
        Validity
            Not Before: Jan  1 20:18:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4018a7cc56d35fc20224a3dbdf7e414e368d5ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:59:87:71:1e:bd:27:ea:88:e6:6e:69:33:d6:
                    37:c0:e6:a2:50:c8:0e:96:36:be:b5:0e:13:3c:27:
                    72:2f:6a:c1:1d:fd:34:5a:1a:be:37:a5:f2:ff:6e:
                    bc:5e:09:2f:23:73:90:38:fc:a3:2e:1b:66:2f:5c:
                    ce:7e:6e:1e:74:3d:b6:77:42:02:74:50:60:26:56:
                    37:94:18:d6:f2:56:3f:31:db:9c:d5:42:59:5e:5e:
                    45:1a:e9:b9:36:ab:9b:c4:fb:d6:5d:39:2b:ac:cb:
                    ce:9d:27:4a:08:e0:f7:52:4a:a4:89:6c:ad:b6:ac:
                    aa:ff:59:61:77:2a:3c:6a:32:e8:1c:f4:ed:1f:d0:
                    cf:d6:52:aa:35:68:93:39:f2:c0:cf:f7:30:a4:36:
                    96:e2:53:14:21:0b:09:50:c0:e8:27:57:8f:58:a8:
                    7e:c2:51:13:a1:8a:d7:ad:eb:6f:14:9a:03:66:c3:
                    3a:81:9a:5d:57:b7:29:ff:7f:6f:b7:75:ce:ff:70:
                    f0:dd:e8:00:ef:8e:37:56:67:a0:ae:94:ca:29:f2:
                    6d:e5:83:ea:9f:31:57:4f:65:e9:24:0b:c5:c8:de:
                    33:08:89:38:31:0a:af:7c:9e:8f:bf:f4:f5:71:92:
                    c1:27:79:f3:21:83:81:7f:6d:77:44:cd:74:9a:3f:
                    c3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:18:A7:CC:56:D3:5F:C2:02:24:A3:DB:DF:7E:41:4E:36:8D:5C:A9
            X509v3 Authority Key Identifier:
                keyid:5E:98:14:D4:31:5D:30:AD:BC:8D:E3:06:00:55:6A:E9:C3:CF:9E:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/QBinzFbTX8ICJKPb335BTjaNXKk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.33.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:f0:11:65:ae:ab:18:67:c9:15:96:17:b1:f7:91:56:34:02:
         45:0d:6d:dd:f9:d7:ab:32:06:fe:e3:57:a3:59:bc:ff:56:fb:
         1a:ef:0d:d0:f5:85:64:32:7f:e3:21:89:88:5d:88:e0:b4:6e:
         ef:17:2c:3f:8c:1a:fa:50:28:32:48:22:d3:0f:74:8c:28:7c:
         9b:d1:54:67:2c:bc:af:68:a9:fa:de:04:b9:8d:0a:40:57:74:
         9c:45:a7:56:59:5e:f3:12:fc:20:47:94:af:82:a0:c2:1e:7b:
         4c:9e:20:4a:06:f2:44:c8:75:e9:67:96:c7:94:c9:c6:1f:ce:
         46:5d:8f:55:ba:65:41:79:34:19:79:09:03:58:5f:fe:ea:58:
         5e:6b:71:71:4e:be:69:44:9b:6c:a0:a0:64:a3:1d:92:8e:69:
         67:5e:67:fe:a3:22:23:cd:c6:33:fc:eb:2d:e7:f8:17:d5:d1:
         7d:10:49:95:ce:90:23:ea:0f:06:58:0b:14:42:74:de:41:be:
         11:39:eb:8e:e8:fb:a0:4a:5d:4c:fb:12:d6:f6:da:05:90:ea:
         de:0e:29:91:80:92:9a:d9:cf:eb:2b:cc:84:f2:3a:b4:e0:84:
         f9:a0:bf:dd:71:fa:a5:a3:2b:25:bd:44:6c:4e:87:8a:7e:b4:
         3a:fe:39:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:40:06 2026 by rpki-client