This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gqB8Hw-P2Mg_zEdN8UzWIAuAAAI.roa
File:                     gqB8Hw-P2Mg_zEdN8UzWIAuAAAI.roa (raw, json)
Hash identifier:          SwxyvCdAGb+zlEgWSLLkFBYAn0n1diKzI3KlDUj3gcI=
Subject key identifier:   82:A0:7C:1F:0F:8F:D8:C8:3F:CC:47:4D:F1:4C:D6:20:0B:80:00:02
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       019B7DCB5A028E0C3D5DA0951AE6D854635B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gqB8Hw-P2Mg_zEdN8UzWIAuAAAI.roa
Signing time:             Fri 02 Jan 2026 08:20:37 +0000
ROA not before:           Fri 02 Jan 2026 08:20:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153523
IP address blocks:        151.241.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 21:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:5a:02:8e:0c:3d:5d:a0:95:1a:e6:d8:54:63:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Jan  2 08:20:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=82a07c1f0f8fd8c83fcc474df14cd6200b800002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:02:42:d1:c6:5c:1e:60:16:f6:d6:d4:99:3d:
                    c7:81:b6:4f:85:e3:f0:60:bb:a8:d9:22:cc:fc:91:
                    cb:3d:4a:20:86:e2:dd:f5:5b:92:d8:58:04:ce:69:
                    fb:ff:6a:e2:74:26:57:85:a7:7e:b6:c9:65:dc:bd:
                    cc:1d:97:2f:bd:65:16:e1:5f:b4:81:db:0d:03:0c:
                    da:f6:18:6a:43:5d:48:fd:3b:18:9b:a0:99:22:4d:
                    19:23:38:ed:cc:4f:80:a4:ce:31:dc:b1:0d:30:5e:
                    99:c1:e3:db:48:9e:04:77:b2:b6:cc:58:d0:a6:75:
                    c3:0c:cf:34:cb:82:9c:72:24:23:c7:bd:22:5e:21:
                    33:f6:57:b5:b8:81:20:1a:45:8a:eb:d4:93:ea:d0:
                    e3:3f:66:48:c3:9a:96:7d:36:f6:9a:79:a7:13:c0:
                    53:59:4d:56:7b:59:52:ed:ac:56:06:bd:ea:f4:e1:
                    b0:72:50:d9:67:2f:bd:50:02:35:ac:6f:be:66:5e:
                    58:ad:6e:87:19:7a:ef:25:75:d1:bb:25:81:8b:b4:
                    97:51:83:b0:8b:df:ee:c9:1a:c0:0b:5e:7e:ac:a0:
                    06:a5:ea:00:cc:74:84:b8:c4:60:43:f1:f8:b3:28:
                    c3:25:56:35:64:41:48:17:fc:85:1e:6b:6c:3f:49:
                    c1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A0:7C:1F:0F:8F:D8:C8:3F:CC:47:4D:F1:4C:D6:20:0B:80:00:02
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gqB8Hw-P2Mg_zEdN8UzWIAuAAAI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.241.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:86:ee:51:a9:5f:d3:42:af:04:68:27:6a:31:75:86:02:f8:
         46:ed:71:6e:b8:fd:06:63:16:b3:03:dd:0c:39:81:cf:b7:84:
         42:8c:9f:92:cc:48:09:d9:c2:44:3f:82:22:c6:07:d1:f5:24:
         87:29:5a:56:2f:12:8e:79:24:e7:b9:72:3d:7a:5f:0e:67:cc:
         72:ae:67:fb:4a:af:16:9d:0d:16:42:da:d5:de:d4:63:cc:06:
         7b:76:06:e1:12:f4:52:31:3b:94:43:ff:9c:5b:1c:30:2a:06:
         ce:f7:d9:d3:22:f8:8d:7a:b7:99:80:68:e3:ac:a1:75:3e:b6:
         15:60:1c:77:c3:1d:ae:ed:c7:bc:1a:cd:40:3b:18:60:b8:63:
         09:29:9e:ee:3b:3b:4e:75:12:63:80:c7:64:52:e3:6e:72:37:
         8f:ca:6f:6f:dd:59:7c:06:c6:5e:4e:26:dd:18:75:bb:1a:2e:
         6a:7e:67:ea:92:6c:88:26:aa:a1:40:97:ee:c9:46:fd:d8:71:
         f3:15:00:78:12:c1:63:c3:ff:cd:c2:c9:86:54:ae:21:13:59:
         ea:a6:c9:81:83:52:df:d7:b0:32:42:40:c6:ec:fd:c6:f5:5f:
         e5:ea:75:6a:b1:f1:0d:92:eb:49:51:61:d6:3a:c6:26:f1:61:
         94:27:26:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 06:28:46 2026 by rpki-client