This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/q1VAWJtp_Ex13lxjYr-uJjZjuJY.roa
File:                     q1VAWJtp_Ex13lxjYr-uJjZjuJY.roa (raw, json)
Hash identifier:          5NddS3/BBUDeFLP1Y+kRGrWDojjLVQKwhUhXEX37hoc=
Subject key identifier:   AB:55:40:58:9B:69:FC:4C:75:DE:5C:63:62:BF:AE:26:36:63:B8:96
Certificate issuer:       /CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
Certificate serial:       019B76EB986FE4C51454F21345691B3F06DD
Authority key identifier: 1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/q1VAWJtp_Ex13lxjYr-uJjZjuJY.roa
Signing time:             Thu 01 Jan 2026 00:18:30 +0000
ROA not before:           Thu 01 Jan 2026 00:18:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203520
IP address blocks:        185.16.196.0/22 maxlen: 24
                          2a03:dfc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:98:6f:e4:c5:14:54:f2:13:45:69:1b:3f:06:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
        Validity
            Not Before: Jan  1 00:18:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ab5540589b69fc4c75de5c6362bfae263663b896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a2:48:e7:ba:e3:cc:e4:44:65:f7:25:1a:db:
                    6f:62:6c:08:a1:2f:37:68:53:0c:65:12:b2:3f:e3:
                    f2:0a:08:49:19:81:3a:61:7c:40:18:07:61:b6:1f:
                    38:43:c2:4e:c6:68:ff:50:6f:4e:d9:c9:62:f6:b0:
                    89:45:3c:b8:de:fe:15:55:f3:33:33:df:bb:70:5e:
                    e4:61:dd:67:21:77:8f:55:b7:27:20:eb:ff:e7:28:
                    eb:87:0e:85:fc:60:d3:ce:e2:7c:75:28:69:96:ef:
                    d2:4b:fb:13:84:92:d5:d8:e9:18:57:35:12:66:10:
                    9c:15:a2:e3:b6:7b:62:76:f2:97:78:a0:44:55:56:
                    44:79:d5:4d:84:b3:c2:c6:9f:1c:cc:cf:db:cd:46:
                    d7:05:28:9f:f2:3c:a8:6a:92:28:ed:9a:3a:3a:c2:
                    90:48:5a:4c:a0:89:3e:84:07:15:be:f9:fe:16:34:
                    40:6a:aa:e4:7c:0c:c6:db:8b:90:a3:4b:b5:f7:ca:
                    5e:36:81:ce:0b:5a:1a:b6:76:ce:79:79:35:f7:ac:
                    ad:ec:15:bf:17:f1:ad:ca:b8:86:2d:46:a4:af:1e:
                    e4:a2:9d:ab:06:1c:59:56:4a:d7:91:9c:60:5f:a6:
                    72:b5:4d:d9:c7:ae:82:76:06:bb:51:cd:d2:1b:1e:
                    6c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:55:40:58:9B:69:FC:4C:75:DE:5C:63:62:BF:AE:26:36:63:B8:96
            X509v3 Authority Key Identifier:
                keyid:1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/q1VAWJtp_Ex13lxjYr-uJjZjuJY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.16.196.0/22
                IPv6:
                  2a03:dfc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:b3:f8:9a:7e:0d:a8:21:61:b5:b9:f3:2f:09:29:b1:5f:9e:
         13:2d:19:1f:11:be:d8:d0:73:58:3a:e6:9a:81:fe:8e:5a:a8:
         72:4e:7a:eb:01:59:07:20:28:83:f3:91:69:b0:47:55:52:9b:
         54:c4:08:f1:c0:f9:68:b9:3a:50:be:14:41:74:4b:dd:08:e3:
         23:4e:ca:94:f7:4c:2d:13:ba:eb:e2:c9:65:c9:1e:5e:1f:17:
         89:b9:cf:62:f9:9a:09:97:71:e4:a7:52:92:92:6d:4e:4a:1e:
         59:28:f4:92:8c:e9:be:3d:69:b3:d5:94:44:1b:0b:35:1e:2f:
         ed:8e:96:e0:a2:fa:2c:8b:11:b7:de:d0:15:27:61:6f:8d:cc:
         9d:9a:2c:14:fe:a0:a6:fe:be:46:33:38:2b:46:ff:de:70:1e:
         55:5a:3d:ec:ca:b9:64:61:ef:3a:71:8a:b9:27:89:a6:8b:ab:
         f1:fb:b8:f9:0e:c6:c8:97:82:ea:bc:fa:96:1c:fe:cf:9e:dd:
         ab:20:9d:f0:b3:df:f0:2c:54:7f:17:89:ef:a2:d0:65:1d:01:
         01:f8:43:9f:a0:69:89:34:8c:f1:a1:38:be:f0:a1:a9:7c:5c:
         82:31:c1:39:2e:22:64:16:1c:da:a7:39:58:fd:7b:02:b5:a2:
         16:77:1b:8b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZt265hv5MUUVPITRWkbPwbdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhN2Q2MTA5NDJkNGQ5Zjk2ZDU3MzFiOTUzOGZkNGM3OGJh
MGYyMGQwHhcNMjYwMTAxMDAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjU1NDA1ODliNjlmYzRjNzVkZTVjNjM2MmJmYWUyNjM2NjNiODk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaJI57rjzOREZfclGttvYmwIoS83
aFMMZRKyP+PyCghJGYE6YXxAGAdhth84Q8JOxmj/UG9O2cli9rCJRTy43v4VVfMz
M9+7cF7kYd1nIXePVbcnIOv/5yjrhw6F/GDTzuJ8dShplu/SS/sThJLV2OkYVzUS
ZhCcFaLjtntidvKXeKBEVVZEedVNhLPCxp8czM/bzUbXBSif8jyoapIo7Zo6OsKQ
SFpMoIk+hAcVvvn+FjRAaqrkfAzG24uQo0u198peNoHOC1oatnbOeXk196yt7BW/
F/GtyriGLUakrx7kop2rBhxZVkrXkZxgX6ZytU3Zx66Cdga7Uc3SGx5scQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKtVQFibafxMdd5cY2K/riY2Y7iWMB8GA1UdIwQY
MBaAFBp9YQlC1Nn5bVcxuVOP1MeLoPINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR24xaENVTFUyZmx0VnpHNVU0X1V4NHVnOGcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zN2FlZGYtNWJjMC00MGQ1LTg0Y2Mt
MDBiMDEzN2YyOWZmLzEvcTFWQVdKdHBfRXgxM2x4allyLXVKalpqdUpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zN2FlZGYtNWJjMC00MGQ1LTg0Y2MtMDBiMDEzN2YyOWZm
LzEvR24xaENVTFUyZmx0VnpHNVU0X1V4NHVnOGcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuRDEMA0E
AgACMAcDBQAqA9/AMA0GCSqGSIb3DQEBCwUAA4IBAQC4s/iafg2oIWG1ufMvCSmx
X54TLRkfEb7Y0HNYOuaagf6OWqhyTnrrAVkHICiD85FpsEdVUptUxAjxwPlouTpQ
vhRBdEvdCOMjTsqU90wtE7rr4sllyR5eHxeJuc9i+ZoJl3Hkp1KSkm1OSh5ZKPSS
jOm+PWmz1ZREGws1Hi/tjpbgovosixG33tAVJ2FvjcydmiwU/qCm/r5GMzgrRv/e
cB5VWj3syrlkYe86cYq5J4mmi6vx+7j5DsbIl4LqvPqWHP7Pnt2rIJ3ws9/wLFR/
F4nvotBlHQEB+EOfoGmJNIzxoTi+8KGpfFyCMcE5LiJkFhzapzlY/XsCtaIWdxuL
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:58 2026 by rpki-client