This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/qLRwkd2YTe3ugw9mUTb_30rZm1U.roa
File:                     qLRwkd2YTe3ugw9mUTb_30rZm1U.roa (raw, json)
Hash identifier:          RlmstRhxEpTkCl9P39u47GrFJRHW47YR8wbbC8CphMg=
Subject key identifier:   A8:B4:70:91:DD:98:4D:ED:EE:83:0F:66:51:36:FF:DF:4A:D9:9B:55
Certificate issuer:       /CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Certificate serial:       019B7E3850398DC70FB81CDEB80E131A002A
Authority key identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/qLRwkd2YTe3ugw9mUTb_30rZm1U.roa
Signing time:             Fri 02 Jan 2026 10:19:38 +0000
ROA not before:           Fri 02 Jan 2026 10:19:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43891
IP address blocks:        193.186.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:50:39:8d:c7:0f:b8:1c:de:b8:0e:13:1a:00:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b80180b40d585b7366587dfb5de7bf3077843e
        Validity
            Not Before: Jan  2 10:19:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a8b47091dd984dedee830f665136ffdf4ad99b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8f:25:d7:8b:b7:c6:55:ee:e1:b7:a6:2c:42:
                    fa:2a:85:1b:83:62:7b:a1:f3:b9:cd:7b:21:c9:28:
                    44:c4:7e:57:ac:19:b5:39:c4:38:61:cf:38:fa:49:
                    25:9e:d1:9c:5d:d1:66:8d:98:6f:a5:3c:b2:ec:38:
                    e8:46:4e:c3:8c:39:46:e3:ed:d5:f3:51:60:0a:d5:
                    92:32:4d:e8:fb:0a:4f:f6:b4:85:c7:32:2a:f6:4f:
                    19:2b:94:37:12:f8:fb:11:ba:20:df:9c:1c:73:29:
                    68:ab:43:82:c4:d6:88:fd:0e:76:a3:1c:a6:73:f4:
                    7d:01:b3:b9:b2:f7:c0:25:12:10:62:ee:70:29:36:
                    66:c6:85:9c:d4:37:0f:13:1f:be:5f:f0:50:1f:3d:
                    4d:a9:71:0c:5f:ae:18:24:d8:6c:93:1a:b7:71:89:
                    e2:5b:80:c4:59:35:1b:3a:87:5b:88:49:fc:ca:ce:
                    be:b0:ab:77:03:39:75:ed:4d:31:02:dd:03:7a:8d:
                    49:b8:a8:95:47:6f:ab:c1:bd:8b:a7:96:60:c1:31:
                    7f:c3:1b:0d:e6:55:93:8d:c2:ab:72:4f:0e:a3:b4:
                    66:11:61:9f:61:30:01:38:92:5d:9f:3a:d5:af:e9:
                    b8:c1:40:43:0c:c6:da:50:79:6d:45:f4:fc:e4:83:
                    63:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B4:70:91:DD:98:4D:ED:EE:83:0F:66:51:36:FF:DF:4A:D9:9B:55
            X509v3 Authority Key Identifier:
                keyid:D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/qLRwkd2YTe3ugw9mUTb_30rZm1U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.186.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:79:db:75:f7:7e:e3:88:7a:d1:22:58:84:43:e4:d7:99:b4:
         fd:e9:b7:48:19:c6:ef:b9:7d:f9:45:f3:0a:7d:46:cc:f3:8f:
         d5:f6:72:c7:c0:35:7f:1b:8c:73:ad:b3:2a:e7:8e:32:bb:62:
         90:f1:43:bb:7a:6e:df:05:f5:69:f0:01:d5:6f:0b:3f:a7:cb:
         76:28:a8:a5:5b:07:e5:c6:0f:81:3a:d7:bc:25:f4:b6:e0:35:
         0c:77:1b:8f:32:53:6c:f9:8e:cb:51:e6:5a:3a:af:b3:b0:90:
         7d:b3:12:9a:9e:b8:f2:a2:c1:fe:ca:0f:fa:da:63:78:63:79:
         ca:6e:98:04:ca:89:28:3c:62:96:86:39:26:5d:76:02:c5:5f:
         e4:b5:8c:a7:cb:d2:5d:32:af:cd:99:3b:11:b6:bd:af:23:06:
         d6:28:6f:10:1c:50:cd:39:2c:48:c4:05:82:0b:06:9b:b4:83:
         48:85:4f:03:94:3a:e0:e3:61:04:46:32:60:3f:7e:4d:8c:5e:
         a8:bb:19:2e:38:c6:41:e5:e2:96:6f:0b:7c:cd:c2:69:52:84:
         1d:e1:ea:65:1b:9c:b3:86:68:55:af:58:91:93:0f:02:1b:46:
         3f:67:3f:77:2e:26:32:57:56:de:e9:06:5c:a9:b3:da:15:85:
         58:4c:50:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:24 2026 by rpki-client