This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/qyXjUdsyD8Ul_eSPbkKBBLkd-QY.roa
File:                     qyXjUdsyD8Ul_eSPbkKBBLkd-QY.roa (raw, json)
Hash identifier:          K5SK7KsksSiQa/QO/NP+4NIGvbz4hbAkl2e3OiIRMxk=
Subject key identifier:   AB:25:E3:51:DB:32:0F:C5:25:FD:E4:8F:6E:42:81:04:B9:1D:F9:06
Certificate issuer:       /CN=972c33aed8efb269d3744813d28c536092e7cf38
Certificate serial:       019B7DC94096810810D6DB05CC6EA3612554
Authority key identifier: 97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/qyXjUdsyD8Ul_eSPbkKBBLkd-QY.roa
Signing time:             Fri 02 Jan 2026 08:18:19 +0000
ROA not before:           Fri 02 Jan 2026 08:18:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199031
IP address blocks:        194.126.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:c9:40:96:81:08:10:d6:db:05:cc:6e:a3:61:25:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=972c33aed8efb269d3744813d28c536092e7cf38
        Validity
            Not Before: Jan  2 08:18:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ab25e351db320fc525fde48f6e428104b91df906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:46:10:33:4a:3b:81:26:df:fd:3f:04:df:bf:
                    f9:ad:2b:27:65:57:97:9d:2e:a0:17:02:1b:c5:2e:
                    c1:c4:b0:ac:77:dd:fd:3c:c2:db:86:5b:27:25:da:
                    e3:eb:ff:28:6e:8c:36:51:00:2c:83:0a:7c:58:7b:
                    12:07:a5:79:61:5f:97:b9:3d:8d:6e:28:59:fd:f6:
                    cd:bd:bd:4d:6e:9e:bc:4b:6f:6b:00:90:1e:30:52:
                    0e:aa:f8:03:62:9c:a2:58:66:c1:31:41:96:15:d3:
                    9b:ef:41:24:cb:a7:74:81:29:91:b3:7b:24:c5:90:
                    b7:aa:18:1a:fb:1e:a4:cb:92:7d:5b:fe:22:37:b6:
                    24:b3:46:a7:76:54:bd:a1:aa:39:e3:e6:47:9e:57:
                    b3:d8:9b:c3:d6:a0:93:f0:a1:9e:5a:d1:fe:76:a5:
                    4e:0c:2a:53:db:09:74:7c:e0:42:01:b1:a9:0a:81:
                    6a:4f:86:ca:1b:ee:40:12:af:39:e2:18:c0:ac:5c:
                    d2:cb:54:31:3e:fd:6d:93:eb:9e:df:3c:27:4f:e9:
                    6c:1e:79:7d:c0:5c:52:ff:e9:5e:37:66:ae:6d:83:
                    1a:51:29:47:cd:8f:d0:5f:9c:cc:39:71:cd:e5:22:
                    a2:f4:c2:9f:8a:84:8c:84:e1:a1:21:40:9b:30:3f:
                    75:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:25:E3:51:DB:32:0F:C5:25:FD:E4:8F:6E:42:81:04:B9:1D:F9:06
            X509v3 Authority Key Identifier:
                keyid:97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/qyXjUdsyD8Ul_eSPbkKBBLkd-QY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.126.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:8f:65:44:9d:01:fa:57:d1:85:3b:ef:90:96:2f:4b:40:6e:
         d4:15:a3:8f:2c:9b:14:87:27:c2:4f:a4:47:fe:cd:d1:67:2f:
         3f:e3:1a:9d:d7:4b:ad:69:20:b7:73:2b:bb:44:1f:a7:fa:88:
         10:4d:96:f8:c3:03:77:0e:38:b8:a2:71:ee:2e:4e:d1:ec:8a:
         0a:13:13:0b:d8:bc:e3:b9:20:ea:cf:f9:65:b9:c6:82:73:7b:
         35:a7:3a:90:6b:9f:d4:d2:0f:83:eb:1d:79:d8:be:76:ec:38:
         34:c3:f4:87:5b:c8:77:e9:26:f3:e4:78:54:dc:a9:0c:32:e3:
         d9:6f:16:c1:f9:08:90:20:a0:9d:91:40:d6:b7:9a:46:d9:fe:
         e7:9a:27:4e:99:52:8a:df:98:ce:2b:9f:31:b8:eb:54:11:23:
         a4:e5:a0:c6:ba:1d:a4:0b:3f:a9:a7:71:fc:a1:bf:b0:a8:c6:
         ab:1b:74:15:a5:06:32:52:2b:c4:9b:95:b4:10:97:a3:c8:f5:
         05:0f:1e:6a:cd:76:08:cd:ab:d2:90:36:98:ac:86:23:5d:06:
         f4:f7:a1:55:e8:39:3c:d0:2f:b8:ad:77:5d:eb:ad:2b:37:a0:
         67:ba:fb:3a:8d:8a:ea:a7:77:11:6b:a4:b9:bd:3a:61:d3:a0:
         12:71:d4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:11 2026 by rpki-client