This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/dqQcATTiVDcYhuyOfiuaEN-dzH0.roa
File:                     dqQcATTiVDcYhuyOfiuaEN-dzH0.roa (raw, json)
Hash identifier:          vdWyxZWoqaf18qoRAgHeLHy8Ubdk/kl3p3xQIpz4Who=
Subject key identifier:   76:A4:1C:01:34:E2:54:37:18:86:EC:8E:7E:2B:9A:10:DF:9D:CC:7D
Certificate issuer:       /CN=9d287533ceba0645a148cf10c8c27ea9a721a09d
Certificate serial:       019B7BA4DB517255140D174069E8A733ACA2
Authority key identifier: 9D:28:75:33:CE:BA:06:45:A1:48:CF:10:C8:C2:7E:A9:A7:21:A0:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/dqQcATTiVDcYhuyOfiuaEN-dzH0.roa
Signing time:             Thu 01 Jan 2026 22:19:20 +0000
ROA not before:           Thu 01 Jan 2026 22:19:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202495
IP address blocks:        193.148.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:db:51:72:55:14:0d:17:40:69:e8:a7:33:ac:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d287533ceba0645a148cf10c8c27ea9a721a09d
        Validity
            Not Before: Jan  1 22:19:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=76a41c0134e254371886ec8e7e2b9a10df9dcc7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:b7:45:62:12:db:d6:51:64:97:eb:1f:35:
                    5e:cd:2b:45:62:13:cc:6b:7f:a0:57:ea:78:dc:69:
                    17:0a:65:4d:d3:b6:69:57:34:ff:42:bc:6a:27:65:
                    4c:a7:2d:be:13:b0:e3:37:8f:0d:e7:c1:dd:e5:fb:
                    09:b5:22:c1:28:98:e4:04:1a:77:7f:dd:38:86:ef:
                    47:ab:8e:5f:15:8e:8e:17:47:79:ab:b3:a2:ee:6f:
                    e8:c9:28:85:d0:79:a9:07:4d:1d:22:3e:72:73:e1:
                    81:39:07:c2:6e:61:ad:30:bd:9b:bd:a1:2e:ff:72:
                    f1:a5:c0:8c:dc:5f:4c:89:df:5c:31:e3:b6:4f:9f:
                    82:ea:ed:ca:52:30:31:6d:5a:d8:3e:f1:bb:e6:3d:
                    fe:f6:dc:82:ff:3c:5e:5e:c4:57:6d:15:73:91:86:
                    e4:f4:f3:4d:cb:b5:94:60:70:40:3c:90:f5:09:b6:
                    68:c1:59:8d:82:49:33:35:3c:99:1b:02:9f:ca:3a:
                    94:97:4d:2c:50:65:70:a7:75:25:a5:f3:38:90:4f:
                    67:9c:3a:a5:cd:3c:15:78:6b:f7:d5:e4:53:f8:2a:
                    09:8f:f1:04:af:c3:11:38:4a:99:d9:c9:6c:ee:e1:
                    89:bf:63:ff:28:31:46:fc:81:fa:0a:be:1c:75:ee:
                    32:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A4:1C:01:34:E2:54:37:18:86:EC:8E:7E:2B:9A:10:DF:9D:CC:7D
            X509v3 Authority Key Identifier:
                keyid:9D:28:75:33:CE:BA:06:45:A1:48:CF:10:C8:C2:7E:A9:A7:21:A0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/dqQcATTiVDcYhuyOfiuaEN-dzH0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.148.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:40:0b:36:94:d2:88:c0:7d:61:d1:b5:62:d3:07:e4:92:35:
         8e:6d:c1:1b:cc:9c:8e:37:4f:f4:1a:ee:f5:d7:65:47:87:ef:
         8a:6f:f9:6b:01:b6:17:1a:86:40:1d:13:44:51:1a:11:88:f4:
         91:32:34:8e:b0:d3:ed:88:54:07:23:ba:1d:67:f0:64:a0:34:
         8c:b8:d7:74:9a:f6:68:44:73:7b:7e:db:47:1c:b1:f8:bb:79:
         9f:9a:33:12:d4:ee:5f:0e:7f:eb:7a:86:65:20:ee:44:70:1b:
         8f:3f:c8:20:84:39:12:90:94:a8:68:f6:bd:22:bb:7c:90:28:
         e2:e8:33:45:56:36:7d:41:45:c7:13:a6:28:67:f0:40:1c:5c:
         05:bf:8f:ce:47:19:03:8e:94:67:82:a4:42:77:06:33:79:b3:
         2c:f1:c6:75:8c:e9:6c:6e:41:ae:cb:fe:bd:d8:fb:d1:65:9e:
         da:23:27:3a:28:dd:93:3c:82:13:44:bd:10:35:44:8e:8b:a0:
         e5:a5:29:98:f9:75:6c:69:1b:5b:60:10:34:03:ed:93:69:89:
         05:7f:d1:37:cb:32:02:96:2a:a7:1f:d3:8f:a2:d2:cf:4c:ea:
         ab:ee:e5:d5:d5:ba:57:31:ef:25:77:10:31:a1:23:44:01:85:
         03:3b:cc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:13 2026 by rpki-client