This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/EUQPSRByg2QMDNqMMHo2oQZNlbY.roa
File:                     EUQPSRByg2QMDNqMMHo2oQZNlbY.roa (raw, json)
Hash identifier:          H+d5ds358KBr4HrcZ0lWa3uis3q9gOlPohiMxXosS7w=
Subject key identifier:   11:44:0F:49:10:72:83:64:0C:0C:DA:8C:30:7A:36:A1:06:4D:95:B6
Certificate issuer:       /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial:       019B77C6CB8EA103B44B541AF6627C7FAA10
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/EUQPSRByg2QMDNqMMHo2oQZNlbY.roa
Signing time:             Thu 01 Jan 2026 04:17:55 +0000
ROA not before:           Thu 01 Jan 2026 04:17:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9121
IP address blocks:        193.189.142.0/24 maxlen: 24
                          2001:67c:2ba0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:cb:8e:a1:03:b4:4b:54:1a:f6:62:7c:7f:aa:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
        Validity
            Not Before: Jan  1 04:17:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=11440f49107283640c0cda8c307a36a1064d95b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:03:7e:36:51:bc:3c:31:12:e3:1c:dc:7a:13:
                    6c:58:17:16:b7:42:99:6b:ec:56:78:df:e9:15:d8:
                    e1:07:36:98:33:29:ff:00:51:1f:5f:44:8a:d4:03:
                    9e:7e:03:9c:ac:36:a4:c3:2d:c5:cd:a1:c0:21:7a:
                    32:7b:ae:c0:63:77:f6:49:4d:f5:eb:66:a8:c3:f7:
                    fc:dd:ee:e3:17:72:81:2e:32:fe:d6:2e:66:ea:2b:
                    7e:4d:98:8f:54:3c:73:f5:e2:9d:45:b4:65:53:fc:
                    6d:61:68:83:06:3e:f8:92:bb:1d:e5:f5:04:ff:04:
                    32:50:bd:ed:b4:32:ff:76:dd:95:76:08:70:b7:55:
                    fc:22:e3:d4:73:e9:0c:76:4e:a2:4a:27:4a:64:70:
                    79:19:f1:c1:50:d3:39:52:18:b1:a7:b2:17:89:bd:
                    61:12:7e:57:e7:4c:b3:91:39:80:83:af:a6:10:21:
                    59:6f:6a:7a:21:26:0d:d1:99:89:80:8f:51:2b:8f:
                    36:66:24:fa:d4:c5:d1:19:34:b0:9d:9c:63:0a:c6:
                    cf:9a:e5:98:2c:98:ea:19:60:eb:4b:11:4b:23:92:
                    9d:2b:ec:0f:a2:67:67:cf:ad:a3:3d:dc:f4:db:94:
                    50:50:45:f9:32:f8:d6:a2:f3:6a:fb:0d:53:06:6e:
                    2d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:44:0F:49:10:72:83:64:0C:0C:DA:8C:30:7A:36:A1:06:4D:95:B6
            X509v3 Authority Key Identifier:
                keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/EUQPSRByg2QMDNqMMHo2oQZNlbY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.189.142.0/24
                IPv6:
                  2001:67c:2ba0::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:a5:93:90:21:68:dd:fa:07:d9:ae:82:2d:96:dd:c0:ae:6f:
         b0:9a:6e:15:05:3e:07:b6:13:85:84:9a:68:3e:ec:3e:d6:33:
         13:11:3e:6a:9b:99:8b:51:21:9c:d5:87:ec:2f:04:86:25:2b:
         cc:46:7b:ad:ad:c3:c6:99:0f:ae:9d:73:8e:02:2b:d3:29:09:
         1f:68:44:1f:41:47:41:ff:db:b9:a3:6c:ff:bb:a9:62:ed:ad:
         46:d2:55:0a:02:75:62:54:a5:a9:77:de:20:b5:64:30:75:42:
         42:6c:b6:c9:db:46:f3:9a:91:f4:c4:e9:7b:e8:f8:6b:64:15:
         c9:70:58:93:78:e5:c7:3a:59:b1:cd:af:7e:b6:8c:11:8d:d1:
         69:f9:34:1e:de:67:bb:86:99:9c:1b:18:da:81:df:99:03:63:
         33:33:6e:86:84:93:05:b3:80:62:eb:2a:40:0e:4e:f8:48:80:
         09:ac:8d:c3:dc:5b:50:bc:47:15:43:76:41:e7:2b:25:ae:91:
         c3:d1:92:08:08:ab:ec:12:a2:99:63:2f:28:24:01:7a:cb:cc:
         11:1c:d5:a3:eb:bc:dc:e5:51:3c:8e:27:a8:2b:70:50:6d:e3:
         10:48:b2:b3:c2:3a:04:ac:26:14:82:97:36:2a:ea:a1:82:1e:
         07:50:6a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 13:17:54 2026 by rpki-client