This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/qOIniIo2K3_zis3JibLadioBPRo.roa
File:                     qOIniIo2K3_zis3JibLadioBPRo.roa (raw, json)
Hash identifier:          5h4shskfhopVb9L7z02A78iAajdnh2sIBdf4Kss8RH8=
Subject key identifier:   A8:E2:27:88:8A:36:2B:7F:F3:8A:CD:C9:89:B2:DA:76:2A:01:3D:1A
Certificate issuer:       /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial:       019B78A338C85E1430ADA0F2C55B00635629
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/qOIniIo2K3_zis3JibLadioBPRo.roa
Signing time:             Thu 01 Jan 2026 08:18:41 +0000
ROA not before:           Thu 01 Jan 2026 08:18:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     28753
IP address blocks:        80.76.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 08:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:38:c8:5e:14:30:ad:a0:f2:c5:5b:00:63:56:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
        Validity
            Not Before: Jan  1 08:18:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a8e227888a362b7ff38acdc989b2da762a013d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:39:ed:37:88:8a:b3:65:80:82:88:c1:20:71:
                    f9:1f:56:b1:fe:5c:af:73:ed:22:6f:88:78:f7:6e:
                    d0:a6:9f:02:75:34:c1:ea:21:21:c7:ae:05:d0:ef:
                    d8:9b:05:ee:96:2e:6e:80:72:37:f7:25:63:2b:e2:
                    a9:c2:0d:3b:5a:3c:32:ae:ea:d6:fd:6e:0a:33:c2:
                    40:3c:d6:b2:8f:64:db:f7:93:fc:fd:a7:f0:f5:77:
                    28:5f:2d:b2:ac:55:86:33:d9:b1:dc:cd:c3:75:79:
                    66:ab:83:5f:92:70:62:71:50:3e:2e:89:25:44:85:
                    c8:01:0b:8b:44:98:f3:7a:c6:bd:97:0e:21:bd:6d:
                    43:da:f5:02:8f:1c:fc:21:ad:39:39:1a:e9:29:46:
                    66:65:fb:89:fd:60:d0:c9:ac:39:e0:37:3f:8d:b9:
                    2c:55:8f:4d:c4:ca:3b:87:2e:14:f2:f1:02:86:5c:
                    8d:f2:d9:39:13:1d:75:e1:28:a7:0d:01:50:b0:c5:
                    36:fe:fa:e2:46:f8:66:6e:72:8d:24:a0:f0:f3:d2:
                    71:56:d9:12:d5:e2:ab:88:51:94:9a:f8:9f:53:b8:
                    4d:28:71:41:3e:38:41:c7:08:ee:be:55:0f:95:3b:
                    2b:ca:c7:60:01:b7:21:20:eb:be:5b:90:2a:ab:fa:
                    d6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E2:27:88:8A:36:2B:7F:F3:8A:CD:C9:89:B2:DA:76:2A:01:3D:1A
            X509v3 Authority Key Identifier:
                keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/qOIniIo2K3_zis3JibLadioBPRo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.76.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:4f:de:9b:ef:08:bb:14:ce:6b:cd:7b:fc:64:7a:43:1b:a5:
         ed:e7:5c:c5:f5:cf:29:6d:14:f5:86:43:b4:fc:66:ec:50:96:
         1b:f1:a2:e9:64:5c:49:91:04:bf:0d:51:37:45:99:65:55:e4:
         20:43:6c:d7:49:05:73:5a:0b:5c:94:c2:d1:65:c6:50:44:94:
         1f:5f:d8:93:b2:f3:fb:da:ef:7c:2a:09:07:51:14:38:61:be:
         cf:47:0f:e1:74:58:c9:fd:3a:08:d5:5e:07:4c:16:7d:64:98:
         d7:01:3b:ba:8e:63:41:d2:55:4f:a0:e5:bc:1d:b6:48:f7:ef:
         35:22:5a:dc:d3:8f:41:80:06:b9:51:4e:63:82:d7:f8:20:5c:
         43:c9:24:bf:96:d0:a5:a7:d8:64:76:e8:cd:e4:e0:83:b5:dd:
         61:09:56:41:12:d3:a9:b9:01:87:dd:8c:5c:e7:ab:d6:b3:20:
         89:32:15:0f:0a:ad:ea:f1:d6:ca:2a:02:9b:bc:52:2f:67:3d:
         f4:4b:a7:eb:c5:f1:f7:05:2a:51:38:3d:74:bf:1a:bc:77:e7:
         44:74:6f:8f:cf:99:c8:53:d8:de:9c:e0:94:d6:33:82:11:84:
         0d:3a:35:d3:10:84:7b:71:47:54:d4:ec:8a:d3:26:a9:af:bc:
         a8:65:33:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 17:18:55 2026 by rpki-client