This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/QRLsURcBBVBV6BZtvErWvS3hqgA.roa
File:                     QRLsURcBBVBV6BZtvErWvS3hqgA.roa (raw, json)
Hash identifier:          4jhlbQzF52BvDX14xcBLNbpRs+50Em0ZMDO/yS0t+IM=
Subject key identifier:   41:12:EC:51:17:01:05:50:55:E8:16:6D:BC:4A:D6:BD:2D:E1:AA:00
Certificate issuer:       /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial:       019B7F15928DDAF6BC6A2AC26ED051665DEA
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/QRLsURcBBVBV6BZtvErWvS3hqgA.roa
Signing time:             Fri 02 Jan 2026 14:21:18 +0000
ROA not before:           Fri 02 Jan 2026 14:21:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     2860
IP address blocks:        95.100.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 07:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:92:8d:da:f6:bc:6a:2a:c2:6e:d0:51:66:5d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
        Validity
            Not Before: Jan  2 14:21:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4112ec511701055055e8166dbc4ad6bd2de1aa00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ae:6f:55:39:6f:fb:58:ac:81:bf:95:e2:66:
                    09:00:14:67:9a:ab:7e:19:ca:68:f0:75:45:38:b4:
                    ec:fd:eb:9c:b9:a3:9a:9f:d1:46:ac:f1:ca:fe:13:
                    b2:d5:91:64:c1:b9:ad:fc:d0:6f:54:47:0a:d9:26:
                    6a:7f:26:00:19:cf:11:56:c0:29:f5:01:41:c3:28:
                    84:60:20:41:16:bd:89:9b:c6:6f:31:08:a5:d6:b6:
                    44:7d:97:da:ca:51:06:55:63:c4:ae:00:6e:6b:dc:
                    9a:27:92:98:ab:68:c1:9c:10:ea:8e:ae:5f:0e:44:
                    92:35:0d:02:c3:ef:d3:5c:27:21:bb:e2:3c:83:1f:
                    3f:19:9e:c8:02:cd:5a:5a:05:0c:81:f2:e3:58:66:
                    cd:69:58:30:bc:91:a7:ed:1a:97:08:37:0c:06:00:
                    ef:20:5d:61:4a:8a:74:74:41:ab:55:31:b4:43:32:
                    93:44:b0:61:f9:31:d0:49:f8:10:24:b2:b2:54:66:
                    a8:09:e7:2f:f5:17:6c:6a:34:9f:14:7d:65:a5:b4:
                    9d:6e:65:ca:be:9e:b6:2d:fa:5a:6a:08:f5:6b:51:
                    39:64:69:3f:b9:ac:b2:53:9c:89:fe:cf:b9:7b:44:
                    f2:4c:14:9a:fe:18:44:9c:ea:c9:19:18:b0:cf:17:
                    1e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:12:EC:51:17:01:05:50:55:E8:16:6D:BC:4A:D6:BD:2D:E1:AA:00
            X509v3 Authority Key Identifier:
                keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/QRLsURcBBVBV6BZtvErWvS3hqgA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.100.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:70:d4:4a:c0:8c:61:91:e4:0e:c2:bb:c2:42:f5:88:7b:ad:
         03:bf:7e:fa:7e:b3:f7:d8:6e:82:dc:d2:7d:15:bf:3a:e7:c8:
         70:40:b4:04:b3:e4:2f:f1:8c:d8:cc:26:73:0c:60:01:b3:31:
         72:7e:bd:16:a2:54:30:d7:2e:a0:49:0f:be:f8:66:9c:b3:57:
         7e:8c:e0:b7:ee:c5:c6:9a:06:2c:7b:5e:f0:10:f6:39:b7:43:
         49:0c:fa:6b:50:d8:0e:24:fb:02:f4:e0:fd:b5:e3:da:7f:d6:
         a0:41:f7:3e:65:f5:74:bd:b2:ee:f8:45:7d:ed:99:4d:de:2f:
         b9:5e:40:3b:e2:93:a2:ea:81:b8:d9:a9:34:0a:e8:5e:8c:ef:
         5c:3f:14:75:0e:d9:c8:08:36:7f:df:10:db:2c:99:b4:fc:b4:
         47:94:f2:8c:fd:fc:a6:5d:18:8c:dc:3c:f1:f8:80:a2:53:ac:
         f5:86:33:53:10:7f:6a:65:d1:b6:b9:49:dc:d0:57:bd:fd:7b:
         ad:6b:8f:0d:47:97:8e:42:ca:bf:bb:28:ea:3c:68:f2:86:6e:
         d5:ec:06:b2:49:c9:be:a8:00:3d:3e:fb:ad:cb:35:91:03:f8:
         98:29:90:90:90:13:ab:6c:9a:c5:7c:09:77:ee:17:27:34:12:
         85:dc:32:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:29:18 2026 by rpki-client