This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/QWEGxPaeYQn0uBOxZiupBOKlr0U.roa
File:                     QWEGxPaeYQn0uBOxZiupBOKlr0U.roa (raw, json)
Hash identifier:          GLwyZ+wAbuSreUejAWX/k5Bcy9X7pS8PLxayzPw9L8s=
Subject key identifier:   41:61:06:C4:F6:9E:61:09:F4:B8:13:B1:66:2B:A9:04:E2:A5:AF:45
Certificate issuer:       /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Certificate serial:       019B7D5AD178719173D54B238EFB57F63E73
Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/QWEGxPaeYQn0uBOxZiupBOKlr0U.roa
Signing time:             Fri 02 Jan 2026 06:17:42 +0000
ROA not before:           Fri 02 Jan 2026 06:17:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     12406
IP address blocks:        93.177.124.0/24 maxlen: 24
                          185.179.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5a:d1:78:71:91:73:d5:4b:23:8e:fb:57:f6:3e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
        Validity
            Not Before: Jan  2 06:17:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=416106c4f69e6109f4b813b1662ba904e2a5af45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:66:91:5d:62:b8:81:16:ab:c4:bb:ef:3d:5a:
                    9d:96:d5:2f:c8:41:e5:85:97:a4:3b:21:48:f9:ce:
                    e5:1e:04:c3:fa:a2:13:cb:61:21:3c:c5:61:dc:8e:
                    9f:d2:25:d8:93:73:66:c0:4c:40:b9:e2:ca:49:95:
                    af:05:b8:7f:12:f5:6d:40:b9:e8:3d:c9:39:cb:d0:
                    8b:29:26:aa:1b:44:27:69:66:68:d4:35:61:07:d8:
                    a6:f2:f0:62:01:80:b3:15:e4:3d:f9:f5:1f:71:4c:
                    9a:b4:27:54:ef:14:06:3a:66:02:73:bc:e1:67:6c:
                    ac:9f:4e:01:59:06:be:d4:ad:e3:1d:24:74:f8:1f:
                    9e:e5:14:fa:0e:c7:6e:2c:3a:9e:53:c4:72:40:99:
                    db:3a:3c:c3:a4:8e:28:f0:6a:3a:4f:8e:08:fa:33:
                    5b:e2:24:cc:11:be:02:a8:49:54:42:06:75:ef:f0:
                    98:c2:d1:4a:81:f7:5f:96:8c:0e:96:34:ff:78:44:
                    f8:2b:40:cf:e4:d4:5b:50:97:59:1b:1a:47:35:0b:
                    45:5c:af:93:e2:0d:4f:25:bd:37:09:ba:6b:2b:f9:
                    c3:fb:e2:ae:6f:e6:19:4d:8c:3f:02:1c:3f:bd:cf:
                    2c:98:69:08:4b:ee:08:56:fe:a1:7a:84:ea:3a:25:
                    cb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:61:06:C4:F6:9E:61:09:F4:B8:13:B1:66:2B:A9:04:E2:A5:AF:45
            X509v3 Authority Key Identifier:
                keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/QWEGxPaeYQn0uBOxZiupBOKlr0U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.124.0/24
                  185.179.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:81:0a:d6:af:b5:ef:d1:57:69:46:33:4d:91:22:4d:02:d9:
         05:49:3a:27:58:05:0e:70:a0:0d:fb:9d:7b:71:11:b4:20:b6:
         5b:fb:da:3f:6a:52:a6:28:33:ed:80:79:fb:df:89:94:ba:c7:
         bf:51:a6:44:76:e3:60:4e:e7:79:c5:f6:54:27:5e:ef:bc:10:
         40:7b:a2:9c:ee:3d:8d:d0:b2:83:21:c9:49:d0:0f:43:1d:49:
         bc:fe:f1:9c:76:72:97:1c:fa:60:82:be:9a:e4:79:dc:a3:2a:
         1b:0c:68:64:8e:d7:cc:41:08:89:dd:f7:bf:7e:59:d3:f9:51:
         0a:8b:5b:48:9a:7d:b1:73:3a:7c:e5:20:63:5f:d2:80:4e:b9:
         79:db:17:1d:1d:d8:03:ed:9e:3e:e2:c4:13:89:01:48:4a:9c:
         b6:c6:d2:75:da:87:8d:c1:4a:91:8a:73:6d:29:50:4d:12:0d:
         8a:39:95:00:ee:61:0a:d4:5e:d9:2d:40:5d:34:86:53:0d:b2:
         c2:31:ed:43:85:96:2b:53:dc:fb:16:18:fd:93:34:a8:bc:f5:
         0a:49:e7:53:16:9b:78:a3:70:eb:8a:ec:8b:82:04:37:f7:32:
         96:79:47:cc:97:48:52:d1:98:d8:9a:fd:79:5c:ce:30:6f:b6:
         0e:7d:45:7c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt9WtF4cZFz1UsjjvtX9j5zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYzVlZTAyZDJlMDU4NjFkZDkwNmZlMDZiMzg0NGYwNGQz
NzhjNzMwHhcNMjYwMTAyMDYxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTYxMDZjNGY2OWU2MTA5ZjRiODEzYjE2NjJiYTkwNGUyYTVhZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWaRXWK4gRarxLvvPVqdltUvyEHl
hZekOyFI+c7lHgTD+qITy2EhPMVh3I6f0iXYk3NmwExAueLKSZWvBbh/EvVtQLno
Pck5y9CLKSaqG0QnaWZo1DVhB9im8vBiAYCzFeQ9+fUfcUyatCdU7xQGOmYCc7zh
Z2ysn04BWQa+1K3jHSR0+B+e5RT6DsduLDqeU8RyQJnbOjzDpI4o8Go6T44I+jNb
4iTMEb4CqElUQgZ17/CYwtFKgfdflowOljT/eET4K0DP5NRbUJdZGxpHNQtFXK+T
4g1PJb03CbprK/nD++Kub+YZTYw/Ahw/vc8smGkIS+4IVv6heoTqOiXLLwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEFhBsT2nmEJ9LgTsWYrqQTipa9FMB8GA1UdIwQY
MBaAFCDF7gLS4Fhh3ZBv4Gs4RPBNN4xzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85NzkyOTYtZWY3YS00YmFjLThjMTUt
Njc3NzEzNTlhMmIzLzEvUVdFR3hQYWVZUW4wdUJPeFppdXBCT0tscjBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC85NzkyOTYtZWY3YS00YmFjLThjMTUtNjc3NzEzNTlhMmIz
LzEvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXbF8AwQB
ubNSMA0GCSqGSIb3DQEBCwUAA4IBAQCEgQrWr7Xv0VdpRjNNkSJNAtkFSTonWAUO
cKAN+517cRG0ILZb+9o/alKmKDPtgHn734mUuse/UaZEduNgTud5xfZUJ17vvBBA
e6Kc7j2N0LKDIclJ0A9DHUm8/vGcdnKXHPpggr6a5HncoyobDGhkjtfMQQiJ3fe/
flnT+VEKi1tImn2xczp85SBjX9KATrl52xcdHdgD7Z4+4sQTiQFISpy2xtJ12oeN
wUqRinNtKVBNEg2KOZUA7mEK1F7ZLUBdNIZTDbLCMe1DhZYrU9z7Fhj9kzSovPUK
SedTFpt4o3DriuyLggQ39zKWeUfMl0hS0ZjYmv15XM4wb7YOfUV8
-----END CERTIFICATE-----
Generated at Mon Jan 26 23:24:14 2026 by rpki-client