This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/q0Dtpsy5kkv0nOKVSmX7EcXuL1c.roa
File:                     q0Dtpsy5kkv0nOKVSmX7EcXuL1c.roa (raw, json)
Hash identifier:          Pl1Sihq0IhD+j4loLfA0EEfieHdLpAeZa9t+mCB9z1c=
Subject key identifier:   AB:40:ED:A6:CC:B9:92:4B:F4:9C:E2:95:4A:65:FB:11:C5:EE:2F:57
Certificate issuer:       /CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
Certificate serial:       019BFF4AD8DE6B3D31F6E17C5A5AA0F6C642
Authority key identifier: 2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/q0Dtpsy5kkv0nOKVSmX7EcXuL1c.roa
Signing time:             Tue 27 Jan 2026 11:50:53 +0000
ROA not before:           Tue 27 Jan 2026 11:50:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     55154
IP address blocks:        153.51.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 07:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ff:4a:d8:de:6b:3d:31:f6:e1:7c:5a:5a:a0:f6:c6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
        Validity
            Not Before: Jan 27 11:50:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ab40eda6ccb9924bf49ce2954a65fb11c5ee2f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1e:f1:08:e6:30:42:6a:46:df:c5:9e:82:83:
                    0e:e7:c3:da:34:b6:d2:b0:7c:88:ac:da:36:5e:5d:
                    12:e8:33:36:85:72:a0:4b:71:da:ad:e6:93:dc:79:
                    58:f8:81:e5:f6:a5:fb:d2:c0:d5:8f:b0:5c:4d:57:
                    c2:2c:1e:3a:b4:4e:e8:ce:9d:96:e9:49:71:dc:03:
                    19:1f:82:e1:85:89:22:5f:06:fd:b4:cc:f7:03:29:
                    35:56:99:50:be:1b:c8:55:71:df:77:5e:02:75:d1:
                    09:4c:b5:c9:c7:ab:3a:e5:26:b6:0d:3d:86:41:69:
                    0c:0d:63:9f:46:60:ed:92:0a:fa:70:91:9a:36:ec:
                    b6:3f:dc:94:bb:fc:30:16:3e:3c:01:16:df:9d:d5:
                    20:4c:c2:3b:44:53:f9:52:40:71:b1:9c:e6:2d:09:
                    eb:20:e6:4d:00:64:1e:67:e8:74:92:0c:2e:1a:1a:
                    da:17:c9:93:ae:9e:3c:62:7a:ac:ec:c5:65:a2:b7:
                    70:35:75:ca:ec:6f:fc:a3:94:c1:df:94:9a:16:ed:
                    2c:5e:25:9b:c9:fd:88:d9:99:55:38:fb:54:d8:fb:
                    03:15:a1:46:29:2e:58:8c:e6:9c:d8:c0:96:aa:5b:
                    24:98:00:48:59:84:02:0c:52:4b:38:9e:4c:7c:ad:
                    67:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:40:ED:A6:CC:B9:92:4B:F4:9C:E2:95:4A:65:FB:11:C5:EE:2F:57
            X509v3 Authority Key Identifier:
                keyid:2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/q0Dtpsy5kkv0nOKVSmX7EcXuL1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.51.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0e:b4:12:02:4c:10:ef:f9:8f:1d:dd:84:b2:5d:f5:68:a7:87:
         80:d4:2a:4b:07:da:15:55:0a:0c:6b:94:c4:56:da:b2:76:01:
         88:37:86:24:d6:58:ba:f0:a0:96:91:b6:e7:6c:ca:17:a3:b9:
         6f:78:fd:b0:aa:97:83:7c:54:0e:f2:93:0a:19:90:8f:c1:65:
         f2:11:2b:bb:a2:3f:53:62:0d:e2:2a:c2:51:e2:c6:cf:b8:4b:
         56:20:37:67:7c:73:38:bb:f3:ad:5f:c4:d9:14:d6:b2:28:10:
         2b:ad:e7:c0:ab:38:1b:2e:cb:ac:29:1f:2c:e8:55:d0:09:6c:
         b5:db:5c:b9:a7:b6:6e:60:ce:02:c3:55:a0:81:9a:c5:50:51:
         79:f9:50:cc:c1:eb:e9:a8:ce:d0:d2:ff:fc:d4:50:70:c5:08:
         1a:bf:b9:36:fa:72:d4:5f:d9:54:87:0b:78:49:c2:8b:84:98:
         6d:63:ee:f2:7b:dc:c0:4f:2b:87:1a:da:47:78:cc:38:e9:cd:
         71:49:24:87:0f:b8:0f:b6:2b:2e:a0:01:42:7e:6d:ec:0a:5a:
         36:2d:23:fa:50:19:f9:d2:46:65:36:39:cc:e8:4e:36:35:2f:
         5c:55:d0:7a:a9:bf:35:d9:1b:91:53:2f:43:27:ab:5a:31:ca:
         14:36:3a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 16:04:30 2026 by rpki-client