This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/coqQltyEL6s_AV_ScSxVWwobaYM.roa
File:                     coqQltyEL6s_AV_ScSxVWwobaYM.roa (raw, json)
Hash identifier:          1OsXtHor/Ia/1YUpRgS+ibS0BUNIKccOCNCjONnFINc=
Subject key identifier:   72:8A:90:96:DC:84:2F:AB:3F:01:5F:D2:71:2C:55:5B:0A:1B:69:83
Certificate issuer:       /CN=6ff362c0765afb7b9804b6d819470007b01f262e
Certificate serial:       019B7AC9008E8B0E2AB087A23D543A9E9009
Authority key identifier: 6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/coqQltyEL6s_AV_ScSxVWwobaYM.roa
Signing time:             Thu 01 Jan 2026 18:19:11 +0000
ROA not before:           Thu 01 Jan 2026 18:19:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141760
IP address blocks:        141.113.128.0/21 maxlen: 21
                          141.113.136.0/21 maxlen: 21
                          141.113.192.0/21 maxlen: 21
                          2a03:9e43::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:00:8e:8b:0e:2a:b0:87:a2:3d:54:3a:9e:90:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ff362c0765afb7b9804b6d819470007b01f262e
        Validity
            Not Before: Jan  1 18:19:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=728a9096dc842fab3f015fd2712c555b0a1b6983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e7:df:9b:8f:74:14:28:2d:d9:95:2d:89:fa:
                    84:e5:c1:2c:ca:f1:92:73:02:cf:71:7c:d8:70:90:
                    32:9d:75:83:a3:5a:c1:e3:22:fa:95:19:ab:9b:23:
                    37:f8:1f:6d:24:85:9e:17:4a:d2:93:3a:77:a7:cb:
                    27:cf:0d:85:d7:75:da:ab:0f:93:03:7a:45:fc:9e:
                    9a:42:27:76:31:6c:be:a3:df:e1:c7:d4:a4:08:87:
                    c0:30:00:1b:3c:d3:d2:c3:d6:9e:7f:da:be:00:81:
                    c7:14:13:65:3a:d3:2a:50:2e:f2:07:bc:79:97:e0:
                    d8:b1:41:6c:ec:1d:18:24:6b:4a:d0:90:97:1c:80:
                    56:9b:b6:b9:d2:db:87:c7:a7:84:4b:5a:75:c8:a0:
                    40:46:d7:2b:46:39:c6:cf:83:44:7b:5c:7f:6a:4c:
                    65:4a:c3:a3:a2:48:2b:05:f7:a0:b1:b5:69:17:d5:
                    44:e8:cb:ca:b6:8c:2f:2a:8d:93:ee:91:19:b2:32:
                    c6:c7:49:ee:f7:32:00:66:18:9a:10:83:36:51:45:
                    a4:7e:85:e5:45:32:e1:b9:ba:16:45:6e:a8:40:f6:
                    aa:14:74:04:fa:ac:f7:3e:4d:43:43:62:ce:91:f7:
                    db:41:aa:5f:4c:cc:a6:bc:e2:f8:7d:9e:62:70:c2:
                    21:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8A:90:96:DC:84:2F:AB:3F:01:5F:D2:71:2C:55:5B:0A:1B:69:83
            X509v3 Authority Key Identifier:
                keyid:6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/coqQltyEL6s_AV_ScSxVWwobaYM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.113.128.0/20
                  141.113.192.0/21
                IPv6:
                  2a03:9e43::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:b6:55:c7:d4:b5:df:5b:df:1b:ac:55:7e:08:33:38:4a:52:
         5e:57:69:5d:47:4c:e7:fe:c4:a6:6d:78:33:a8:8b:59:27:cc:
         f6:de:89:42:86:6e:2f:de:3e:86:8e:64:8e:53:1a:44:55:04:
         9f:1a:b6:ac:a7:13:2e:80:03:39:63:fa:d5:c1:ba:6e:d6:d8:
         68:27:c4:67:b0:e9:5b:e7:69:eb:97:22:a6:87:53:89:8e:0a:
         8f:cf:1c:c1:12:0d:fa:c5:da:56:53:02:b5:0a:0f:3b:12:51:
         1d:3e:0e:28:c5:26:aa:f9:9d:1f:7f:84:2c:b5:aa:a3:4d:d5:
         bb:76:82:07:ca:b6:71:71:91:92:dc:23:f7:dc:46:47:42:b5:
         76:f3:c5:19:3d:76:6e:31:16:8b:3d:01:6e:d5:70:4f:63:7c:
         fa:74:19:1b:fd:6e:1e:49:18:c9:2c:2e:14:ab:b7:a7:ed:b0:
         19:c4:a7:7a:ac:f7:99:5f:6d:79:b3:56:d8:77:f6:29:2f:e5:
         11:6d:d0:3d:45:d3:c0:fd:08:85:86:b8:ac:fb:b1:e2:4a:86:
         b3:b9:70:5e:13:26:00:f5:94:32:e6:df:c5:f3:4f:88:70:87:
         7d:37:7c:0b:53:8d:fb:39:35:b7:62:fe:6a:54:ae:d6:28:f2:
         4a:d1:5c:cf
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZt6yQCOiw4qsIeiPVQ6npAJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZjM2MmMwNzY1YWZiN2I5ODA0YjZkODE5NDcwMDA3YjAx
ZjI2MmUwHhcNMjYwMTAxMTgxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjhhOTA5NmRjODQyZmFiM2YwMTVmZDI3MTJjNTU1YjBhMWI2OTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreffm490FCgt2ZUtifqE5cEsyvGS
cwLPcXzYcJAynXWDo1rB4yL6lRmrmyM3+B9tJIWeF0rSkzp3p8snzw2F13Xaqw+T
A3pF/J6aQid2MWy+o9/hx9SkCIfAMAAbPNPSw9aef9q+AIHHFBNlOtMqUC7yB7x5
l+DYsUFs7B0YJGtK0JCXHIBWm7a50tuHx6eES1p1yKBARtcrRjnGz4NEe1x/akxl
SsOjokgrBfegsbVpF9VE6MvKtowvKo2T7pEZsjLGx0nu9zIAZhiaEIM2UUWkfoXl
RTLhuboWRW6oQPaqFHQE+qz3Pk1DQ2LOkffbQapfTMymvOL4fZ5icMIhGwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFHKKkJbchC+rPwFf0nEsVVsKG2mDMB8GA1UdIwQY
MBaAFG/zYsB2Wvt7mAS22BlHAAewHyYuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl9OaXdIWmEtM3VZQkxiWUdVY0FCN0FmSmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lMDExOTAtNTIwNC00NGM1LWExMWEt
ZGFmZDc0NzYzZDIzLzEvY29xUWx0eUVMNnNfQVZfU2NTeFZXd29iYVlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9lMDExOTAtNTIwNC00NGM1LWExMWEtZGFmZDc0NzYzZDIz
LzEvYl9OaXdIWmEtM3VZQkxiWUdVY0FCN0FmSmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEjXGAAwQD
jXHAMA0EAgACMAcDBQAqA55DMA0GCSqGSIb3DQEBCwUAA4IBAQAHtlXH1LXfW98b
rFV+CDM4SlJeV2ldR0zn/sSmbXgzqItZJ8z23olChm4v3j6GjmSOUxpEVQSfGras
pxMugAM5Y/rVwbpu1thoJ8RnsOlb52nrlyKmh1OJjgqPzxzBEg36xdpWUwK1Cg87
ElEdPg4oxSaq+Z0ff4QstaqjTdW7doIHyrZxcZGS3CP33EZHQrV288UZPXZuMRaL
PQFu1XBPY3z6dBkb/W4eSRjJLC4Uq7en7bAZxKd6rPeZX215s1bYd/YpL+URbdA9
RdPA/QiFhris+7HiSoazuXBeEyYA9ZQy5t/F80+IcId9N3wLU437OTW3Yv5qVK7W
KPJK0VzP
-----END CERTIFICATE-----
Generated at Sat Jan 3 01:33:27 2026 by rpki-client