This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/3QvaMAaiMHlnwNDGbnZou4RmaJU.roa
File:                     3QvaMAaiMHlnwNDGbnZou4RmaJU.roa (raw, json)
Hash identifier:          /MQB33YC1OurBpRSp4TznKIpFac01kWW6RWAZ0SJe4w=
Subject key identifier:   DD:0B:DA:30:06:A2:30:79:67:C0:D0:C6:6E:76:68:BB:84:66:68:95
Certificate issuer:       /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial:       019C1DB078BE7FF1AFE39B9AF31C8E4CEA7D
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/3QvaMAaiMHlnwNDGbnZou4RmaJU.roa
Signing time:             Mon 02 Feb 2026 09:30:30 +0000
ROA not before:           Mon 02 Feb 2026 09:30:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208905
IP address blocks:        62.56.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:b0:78:be:7f:f1:af:e3:9b:9a:f3:1c:8e:4c:ea:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
        Validity
            Not Before: Feb  2 09:30:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dd0bda3006a2307967c0d0c66e7668bb84666895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:9c:68:b8:89:f3:30:80:42:00:61:da:c3:
                    26:d6:3b:6a:a3:5b:a2:ad:16:94:89:aa:32:7e:1f:
                    91:2a:06:c6:93:88:df:b4:d0:09:41:15:d6:e1:3a:
                    f2:43:18:6b:7e:8b:5f:7e:fd:63:3f:6b:fa:62:fc:
                    1d:5c:cf:d0:91:98:0a:23:ac:80:87:16:ec:ca:ab:
                    75:dc:01:65:6c:06:45:b1:79:a1:36:0c:72:e6:49:
                    52:ff:6d:70:8c:47:f3:25:6f:a6:0f:1f:fd:0a:68:
                    5a:73:fc:e5:0e:7c:63:81:98:d9:12:0e:f7:34:28:
                    9b:91:bc:37:ea:69:3f:18:9e:02:ca:44:97:70:18:
                    05:27:4a:59:a0:d7:a6:83:14:01:38:f1:c7:f8:90:
                    73:cc:62:60:6a:db:af:9c:82:4c:02:74:f5:d1:8d:
                    00:6a:92:5e:a2:98:dd:4c:1d:a1:35:82:5a:3e:ac:
                    2c:89:9a:82:81:0b:17:cd:47:fe:37:fe:ff:bc:0a:
                    c5:f4:d8:14:bc:c2:fd:5f:37:e7:3c:fd:79:75:de:
                    96:c8:53:fc:65:dc:63:fc:90:29:0c:e9:00:e9:ed:
                    74:1b:56:d2:20:5d:8e:ae:31:cc:8a:62:87:98:6c:
                    91:24:0f:e0:b4:da:7f:c9:e3:2a:69:49:fb:ae:9d:
                    dd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0B:DA:30:06:A2:30:79:67:C0:D0:C6:6E:76:68:BB:84:66:68:95
            X509v3 Authority Key Identifier:
                keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/3QvaMAaiMHlnwNDGbnZou4RmaJU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.56.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:50:65:96:29:21:f5:c3:11:e8:cc:8a:b4:96:f2:4d:dc:b6:
         7d:db:5a:0e:28:25:cd:47:db:6a:a8:64:65:68:50:ad:11:3d:
         d8:7b:d9:24:11:71:95:1f:50:5b:d5:e6:b0:a0:04:0c:15:19:
         3d:99:3c:4e:1d:d7:84:fe:98:9d:4e:13:12:02:27:19:b1:63:
         e0:0f:df:cf:79:82:df:15:3e:6f:41:04:65:6c:b8:6d:69:1f:
         3f:32:3d:87:e7:11:0e:3a:63:64:ae:13:f3:63:f6:25:43:60:
         20:c3:8e:a1:52:31:9b:bf:3d:af:75:2f:14:2d:15:ff:7e:b7:
         3c:24:85:81:89:75:4f:de:10:bb:89:50:00:d8:0f:55:95:f6:
         60:39:01:cc:ca:e7:26:12:9a:c2:21:47:5c:8f:b0:db:e3:47:
         71:c9:72:24:db:4a:09:11:d7:dd:21:24:b1:9f:ba:76:6b:87:
         fa:fa:45:31:f5:42:1a:4e:e5:60:5c:53:e6:f2:90:9f:2e:ab:
         d1:4f:af:cd:e5:74:2d:ec:0d:7c:1f:89:e2:93:93:f3:99:92:
         2f:ba:74:9a:3a:fe:6d:e8:f2:d4:8f:de:27:ab:ec:bc:66:a7:
         10:e8:10:ae:28:89:0f:b8:a5:67:35:8b:e5:8e:74:00:e0:bd:
         24:b6:98:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZwdsHi+f/Gv45ua8xyOTOp9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk
YjkxZjcwHhcNMjYwMjAyMDkzMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDBiZGEzMDA2YTIzMDc5NjdjMGQwYzY2ZTc2NjhiYjg0NjY2ODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZecaLiJ8zCAQgBh2sMm1jtqo1ui
rRaUiaoyfh+RKgbGk4jftNAJQRXW4TryQxhrfotffv1jP2v6YvwdXM/QkZgKI6yA
hxbsyqt13AFlbAZFsXmhNgxy5klS/21wjEfzJW+mDx/9Cmhac/zlDnxjgZjZEg73
NCibkbw36mk/GJ4CykSXcBgFJ0pZoNemgxQBOPHH+JBzzGJgatuvnIJMAnT10Y0A
apJeopjdTB2hNYJaPqwsiZqCgQsXzUf+N/7/vArF9NgUvML9XzfnPP15dd6WyFP8
Zdxj/JApDOkA6e10G1bSIF2OrjHMimKHmGyRJA/gtNp/yeMqaUn7rp3diwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN0L2jAGojB5Z8DQxm52aLuEZmiVMB8GA1UdIwQY
MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt
MTlkMWJiNjFkOWE3LzEvM1F2YU1BYWlNSGxud05ER2JuWm91NFJtYUpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3
LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBPjjeMA0G
CSqGSIb3DQEBCwUAA4IBAQBIUGWWKSH1wxHozIq0lvJN3LZ921oOKCXNR9tqqGRl
aFCtET3Ye9kkEXGVH1Bb1eawoAQMFRk9mTxOHdeE/pidThMSAicZsWPgD9/PeYLf
FT5vQQRlbLhtaR8/Mj2H5xEOOmNkrhPzY/YlQ2Agw46hUjGbvz2vdS8ULRX/frc8
JIWBiXVP3hC7iVAA2A9VlfZgOQHMyucmEprCIUdcj7Db40dxyXIk20oJEdfdISSx
n7p2a4f6+kUx9UIaTuVgXFPm8pCfLqvRT6/N5XQt7A18H4nik5PzmZIvunSaOv5t
6PLUj94nq+y8ZqcQ6BCuKIkPuKVnNYvljnQA4L0ktphr
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:02 2026 by rpki-client