This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5qQEdMBcIt5XFFFRCD8GxSK29ZM.roa
File:                     5qQEdMBcIt5XFFFRCD8GxSK29ZM.roa (raw, json)
Hash identifier:          uDkJZLcHqBgj1LakSJJ7gsoFR9aK94n0OpJdt1tDHJU=
Subject key identifier:   E6:A4:04:74:C0:5C:22:DE:57:14:51:51:08:3F:06:C5:22:B6:F5:93
Certificate issuer:       /CN=e505d93497f19d2563066b409200969711f28c67
Certificate serial:       019B7AC7EC67E554FBB63DF11D8B66D001F0
Authority key identifier: E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5qQEdMBcIt5XFFFRCD8GxSK29ZM.roa
Signing time:             Thu 01 Jan 2026 18:18:01 +0000
ROA not before:           Thu 01 Jan 2026 18:18:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42184
IP address blocks:        194.49.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:ec:67:e5:54:fb:b6:3d:f1:1d:8b:66:d0:01:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e505d93497f19d2563066b409200969711f28c67
        Validity
            Not Before: Jan  1 18:18:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e6a40474c05c22de57145151083f06c522b6f593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:e2:7d:2f:01:21:9d:0a:69:5e:de:70:ea:
                    cc:82:70:19:50:72:84:b9:d0:85:14:ae:15:e8:02:
                    17:10:54:11:84:39:e2:78:a4:27:65:1b:b0:15:e7:
                    a8:6e:8d:2a:80:d4:58:14:45:1d:42:4c:95:8f:e0:
                    43:b4:3e:85:4c:c1:b2:f8:65:45:73:83:08:58:f0:
                    2a:f9:9a:0c:b9:81:6c:20:08:46:8f:b2:c8:8a:70:
                    32:e8:9d:3d:44:be:1f:b8:84:f4:cd:07:b7:b6:af:
                    18:3a:24:0c:e7:b8:c5:4b:f5:4c:45:23:61:94:b1:
                    1e:5b:61:01:9f:df:c6:70:54:44:65:d2:6e:8e:4e:
                    a9:01:3f:80:04:38:af:f9:78:54:02:54:97:90:3e:
                    40:0a:3a:08:b5:0a:4d:58:a4:96:2b:2e:5d:e0:5d:
                    88:46:00:93:a9:bc:60:61:4b:93:63:c0:57:42:f0:
                    2b:8d:5c:a1:3f:f0:3b:81:13:42:01:34:37:37:cb:
                    63:9a:d9:23:52:40:13:5e:8c:6d:d9:cf:1e:60:73:
                    ec:0d:f2:7f:da:6d:67:71:14:e8:8b:da:a8:82:d8:
                    45:dc:29:f7:64:b6:cc:8e:0c:c4:21:48:44:eb:44:
                    ee:31:10:cb:36:95:ee:84:33:57:33:8f:73:3f:d4:
                    34:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A4:04:74:C0:5C:22:DE:57:14:51:51:08:3F:06:C5:22:B6:F5:93
            X509v3 Authority Key Identifier:
                keyid:E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5qQEdMBcIt5XFFFRCD8GxSK29ZM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.49.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:4d:0f:fe:f5:e3:18:bb:9e:00:66:ee:3a:5e:ba:b5:93:7a:
         23:11:fc:95:c8:60:98:58:b7:42:c4:e6:a4:4a:cf:96:9f:8e:
         f3:82:c3:46:b3:fb:2e:98:6a:2c:c9:2c:94:70:1a:43:b1:49:
         d3:21:14:ee:e3:42:c9:fc:c9:8e:61:ef:0f:5f:e4:7b:cd:77:
         2f:66:fa:7f:75:21:10:73:d0:e5:93:a9:e1:85:ae:0b:24:ee:
         0a:ab:27:d9:d9:7c:95:19:74:ee:07:e9:5f:e0:a6:54:0e:8a:
         f5:e3:3b:c3:d1:0b:62:de:96:f0:9f:0c:a2:c0:4e:e4:4b:9f:
         7d:8c:f5:7f:16:1f:be:a4:be:2f:5a:75:0e:60:3a:7c:13:4e:
         58:de:80:a7:d1:24:c7:18:12:1e:5c:fb:0f:d8:a1:88:ec:74:
         d9:e8:71:ed:81:12:77:ac:91:99:39:bc:c8:3b:54:4a:77:f6:
         0e:05:43:c8:ef:d1:c6:bd:44:d2:e6:90:e1:e9:da:98:fe:6f:
         c1:d9:c2:dc:ca:ab:c8:32:84:7b:a1:b0:73:29:b8:d0:18:6e:
         f2:a7:2f:f9:4c:41:21:7c:0a:34:c5:0b:fd:96:d6:af:e2:c6:
         2a:2b:11:4e:61:36:0b:bf:29:6d:1a:13:5d:f0:1e:e7:d4:85:
         16:87:dc:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6x+xn5VT7tj3xHYtm0AHwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MDVkOTM0OTdmMTlkMjU2MzA2NmI0MDkyMDA5Njk3MTFm
MjhjNjcwHhcNMjYwMTAxMTgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmE0MDQ3NGMwNWMyMmRlNTcxNDUxNTEwODNmMDZjNTIyYjZmNTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHrifS8BIZ0KaV7ecOrMgnAZUHKE
udCFFK4V6AIXEFQRhDnieKQnZRuwFeeobo0qgNRYFEUdQkyVj+BDtD6FTMGy+GVF
c4MIWPAq+ZoMuYFsIAhGj7LIinAy6J09RL4fuIT0zQe3tq8YOiQM57jFS/VMRSNh
lLEeW2EBn9/GcFREZdJujk6pAT+ABDiv+XhUAlSXkD5ACjoItQpNWKSWKy5d4F2I
RgCTqbxgYUuTY8BXQvArjVyhP/A7gRNCATQ3N8tjmtkjUkATXoxt2c8eYHPsDfJ/
2m1ncRToi9qogthF3Cn3ZLbMjgzEIUhE60TuMRDLNpXuhDNXM49zP9Q04QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOakBHTAXCLeVxRRUQg/BsUitvWTMB8GA1UdIwQY
MBaAFOUF2TSX8Z0lYwZrQJIAlpcR8oxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVFYWk5KZnhuU1ZqQm10QWtnQ1dseEh5akdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NDBlNTMtYzRhNi00ZjUyLTgxMWUt
NmFmYzRlYzYzY2YwLzEvNXFRRWRNQmNJdDVYRkZGUkNEOEd4U0syOVpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC81NDBlNTMtYzRhNi00ZjUyLTgxMWUtNmFmYzRlYzYzY2Yw
LzEvNVFYWk5KZnhuU1ZqQm10QWtnQ1dseEh5akdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjEWMA0G
CSqGSIb3DQEBCwUAA4IBAQAvTQ/+9eMYu54AZu46Xrq1k3ojEfyVyGCYWLdCxOak
Ss+Wn47zgsNGs/sumGosySyUcBpDsUnTIRTu40LJ/MmOYe8PX+R7zXcvZvp/dSEQ
c9Dlk6nhha4LJO4KqyfZ2XyVGXTuB+lf4KZUDor14zvD0Qti3pbwnwyiwE7kS599
jPV/Fh++pL4vWnUOYDp8E05Y3oCn0STHGBIeXPsP2KGI7HTZ6HHtgRJ3rJGZObzI
O1RKd/YOBUPI79HGvUTS5pDh6dqY/m/B2cLcyqvIMoR7obBzKbjQGG7ypy/5TEEh
fAo0xQv9ltav4sYqKxFOYTYLvyltGhNd8B7n1IUWh9xT
-----END CERTIFICATE-----
Generated at Mon Feb 2 07:54:29 2026 by rpki-client