This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/QfZV5akA_LVlGiRS4Ipop_sv1Gc.roa
File:                     QfZV5akA_LVlGiRS4Ipop_sv1Gc.roa (raw, json)
Hash identifier:          vjfnrfXaTawfVYXNYU+0NjZYU8xM90SngyWSZqja7G0=
Subject key identifier:   41:F6:55:E5:A9:00:FC:B5:65:1A:24:52:E0:8A:68:A7:FB:2F:D4:67
Certificate issuer:       /CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Certificate serial:       019B797E8D6D2193F86CB2BD727E40D905F4
Authority key identifier: 47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/QfZV5akA_LVlGiRS4Ipop_sv1Gc.roa
Signing time:             Thu 01 Jan 2026 12:18:15 +0000
ROA not before:           Thu 01 Jan 2026 12:18:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42068
IP address blocks:        195.242.150.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:8d:6d:21:93:f8:6c:b2:bd:72:7e:40:d9:05:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
        Validity
            Not Before: Jan  1 12:18:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=41f655e5a900fcb5651a2452e08a68a7fb2fd467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c6:0a:7c:e1:b9:47:c4:93:00:87:6b:56:f7:
                    0d:bf:b9:89:9c:d6:35:86:33:15:15:aa:57:4c:13:
                    ca:3a:11:8f:cb:42:45:48:66:b0:b7:6e:9e:b8:d4:
                    fb:2f:08:18:d0:c1:62:16:51:56:55:60:ca:ff:8d:
                    c3:0c:f2:88:0a:6e:36:39:10:11:fe:49:11:1f:0a:
                    73:2a:e2:c6:92:a5:2d:72:a4:27:fd:d7:a3:94:3d:
                    cf:5c:82:53:9a:2c:9f:52:a0:ac:10:ad:fa:85:07:
                    e4:26:b6:81:8b:44:e4:8c:d1:e7:f6:b7:ee:4c:15:
                    38:9a:3c:ca:3f:84:52:b0:2d:8e:1f:33:c5:d4:65:
                    2d:ca:93:0e:69:96:6d:d1:91:35:37:7b:5c:1a:fc:
                    ca:70:6f:0f:d6:41:86:5b:54:5d:fd:63:9c:87:62:
                    e4:73:d0:34:af:c3:86:90:a0:c1:29:0f:a7:34:1d:
                    7d:5a:2f:99:3f:4a:74:95:8e:cd:89:eb:42:f1:f6:
                    64:fd:ee:80:33:57:d9:1f:cd:80:fa:7d:70:db:60:
                    27:03:8e:a0:91:e0:0d:c2:32:c3:2c:33:73:94:eb:
                    e9:ad:8a:94:03:c2:80:d2:53:fc:83:93:6d:0e:bc:
                    e8:19:e3:08:0a:78:aa:99:9b:d5:23:67:34:92:fb:
                    5d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F6:55:E5:A9:00:FC:B5:65:1A:24:52:E0:8A:68:A7:FB:2F:D4:67
            X509v3 Authority Key Identifier:
                keyid:47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/QfZV5akA_LVlGiRS4Ipop_sv1Gc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.242.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:4b:38:f6:d2:2e:2a:67:6b:0f:5d:1e:ac:92:54:f8:8d:81:
         02:8c:b1:7e:ca:8e:0c:a4:18:9a:ed:01:33:31:6b:d5:36:47:
         02:b8:58:19:24:4f:68:93:48:5b:3d:01:02:26:76:42:0a:44:
         75:b1:8a:b7:07:ca:a2:84:bf:49:e6:44:39:06:db:30:a9:a4:
         16:82:cb:8b:34:90:bc:94:92:30:30:ad:29:52:39:a8:c5:4e:
         7a:49:23:22:09:43:c6:9d:91:8c:d1:f8:a7:48:f1:a1:36:ed:
         f1:d6:40:31:08:63:2d:1a:10:df:13:92:7c:b5:d1:83:eb:1a:
         2f:7f:5f:96:9b:b9:68:63:cc:17:3f:dc:1e:35:2f:9c:a0:b5:
         a8:da:a6:43:57:02:63:ab:9e:2d:22:21:24:7b:6a:93:4f:4d:
         cb:51:c3:e0:ce:24:07:00:a5:43:ed:b0:17:0c:d9:4b:1a:66:
         73:4c:72:31:ec:08:c7:97:a7:34:36:7b:40:3f:63:63:ab:ec:
         3a:71:aa:c5:e3:0f:31:ad:3b:f2:02:94:bd:63:e9:b1:b2:a8:
         e8:4a:e0:86:09:11:ad:cd:80:8b:8a:43:1e:4a:e7:94:2f:da:
         33:2e:15:1d:c3:c2:b0:1a:d3:03:50:76:dd:7a:c5:b3:3d:4a:
         73:a4:67:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:29:18 2026 by rpki-client