This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/qfLg6_O2M8WS1thcqc7yvX4X2YA.roa
File:                     qfLg6_O2M8WS1thcqc7yvX4X2YA.roa (raw, json)
Hash identifier:          QWR0hHgaSdM86S0MEOSeh4BxClfakxPYih9gZR0Zp3g=
Subject key identifier:   A9:F2:E0:EB:F3:B6:33:C5:92:D6:D8:5C:A9:CE:F2:BD:7E:17:D9:80
Certificate issuer:       /CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
Certificate serial:       019B78A330052BCB048E21909479B0A1E468
Authority key identifier: C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/qfLg6_O2M8WS1thcqc7yvX4X2YA.roa
Signing time:             Thu 01 Jan 2026 08:18:38 +0000
ROA not before:           Thu 01 Jan 2026 08:18:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42176
IP address blocks:        92.42.80.0/22 maxlen: 22
                          92.42.80.0/24 maxlen: 24
                          92.42.81.0/24 maxlen: 24
                          92.42.82.0/24 maxlen: 24
                          92.42.83.0/24 maxlen: 24
                          92.42.84.0/23 maxlen: 23
                          92.42.84.0/24 maxlen: 24
                          92.42.85.0/24 maxlen: 24
                          92.42.86.0/24 maxlen: 24
                          92.42.87.0/24 maxlen: 24
                          2a10:8e40::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:30:05:2b:cb:04:8e:21:90:94:79:b0:a1:e4:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
        Validity
            Not Before: Jan  1 08:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a9f2e0ebf3b633c592d6d85ca9cef2bd7e17d980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:39:83:b6:8f:21:9c:98:9c:9a:a2:da:df:94:
                    5f:9f:b1:19:88:11:dc:4f:11:f6:31:a8:f5:e6:a9:
                    e6:d2:2f:84:f7:a7:16:98:a0:ac:04:0a:20:04:fe:
                    e3:a7:07:8d:71:e6:a9:82:1b:0c:92:54:32:21:30:
                    d8:23:75:09:7c:37:0b:66:9c:b9:50:72:71:64:23:
                    eb:99:21:03:06:02:8d:1d:dc:2f:31:cb:44:c3:9b:
                    a5:1d:50:38:94:ae:70:1a:f6:6e:b1:1c:12:f7:d2:
                    91:ad:59:cd:f2:c4:e6:65:60:ae:9f:74:c9:d5:2d:
                    25:85:73:15:e6:8c:85:7b:c0:a3:b8:a4:49:39:d2:
                    ef:ee:47:15:8a:84:9b:af:9f:b5:74:25:21:db:5d:
                    6a:6c:b5:cf:6b:3f:31:a2:e1:56:3d:ff:52:18:bc:
                    a7:4c:e3:75:d1:5d:eb:d6:8c:ab:8e:ab:da:1f:44:
                    01:70:11:32:38:a4:13:8c:aa:dc:ae:7d:4d:ec:7b:
                    3d:ee:98:47:f8:cf:08:35:94:ea:cb:b0:89:e2:b3:
                    65:5c:cc:d0:32:6f:4e:77:9e:55:4b:c0:6f:af:7e:
                    1d:46:2f:5f:cf:0c:ff:21:44:36:ae:5e:a7:44:7c:
                    30:5b:82:0e:f6:02:25:ed:6c:8a:d1:f0:6b:d5:4d:
                    43:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F2:E0:EB:F3:B6:33:C5:92:D6:D8:5C:A9:CE:F2:BD:7E:17:D9:80
            X509v3 Authority Key Identifier:
                keyid:C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/qfLg6_O2M8WS1thcqc7yvX4X2YA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.42.80.0/21
                IPv6:
                  2a10:8e40::/29

    Signature Algorithm: sha256WithRSAEncryption
         38:7a:91:5c:3e:d2:6c:6d:00:bf:af:38:31:c3:f6:1a:1f:04:
         90:c8:43:ce:e2:21:b5:fa:f9:0f:ea:29:41:9f:fb:4a:48:24:
         b8:24:9d:80:25:3d:a4:0a:c0:da:53:9e:99:bf:52:38:33:59:
         93:5f:62:87:f6:12:e1:59:e8:46:08:53:c0:ca:6e:10:db:81:
         f0:6f:20:d5:ee:70:37:be:b0:5e:93:1b:b5:27:23:46:46:af:
         e9:d5:4d:4e:11:2d:ca:cc:87:2a:4d:53:09:2f:9e:b5:4b:cc:
         9f:ca:69:b9:83:22:d3:7b:30:47:98:d7:ac:4a:4a:15:a7:46:
         b6:da:56:49:1e:ef:5b:98:c8:9a:3e:4c:0b:85:31:5b:56:37:
         e0:07:02:08:96:87:5c:d1:f8:f3:a4:22:6f:fb:c8:e6:f8:4d:
         b0:93:89:c2:7c:2a:55:59:f8:15:67:0e:ac:30:00:6f:42:cb:
         eb:5d:3b:fe:8e:1d:26:92:ee:1f:8d:a2:88:1c:3d:f2:f1:38:
         a1:c3:a8:72:b3:fd:e3:4b:c2:26:fa:53:5f:7d:6e:ea:c7:b0:
         92:6f:db:49:69:e4:a7:3e:85:f5:cc:9e:0c:dd:ed:44:90:69:
         64:df:c3:e2:85:45:c7:5b:e1:e8:12:d2:ee:d8:f2:58:f9:d0:
         1f:14:88:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:02:56 2026 by rpki-client