This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/8QiLjujrDDeRW57K57nE1Qy2Fe4.roa
File:                     8QiLjujrDDeRW57K57nE1Qy2Fe4.roa (raw, json)
Hash identifier:          LNxkpvOU/KRHd6BQ5jOPdFG8+i57rjsTNWZJFQqjzFA=
Subject key identifier:   F1:08:8B:8E:E8:EB:0C:37:91:5B:9E:CA:E7:B9:C4:D5:0C:B6:15:EE
Certificate issuer:       /CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Certificate serial:       019B78A376AECC1A525547B49FF5CF15EB78
Authority key identifier: 97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/8QiLjujrDDeRW57K57nE1Qy2Fe4.roa
Signing time:             Thu 01 Jan 2026 08:18:57 +0000
ROA not before:           Thu 01 Jan 2026 08:18:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     38136
IP address blocks:        103.156.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 20:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:76:ae:cc:1a:52:55:47:b4:9f:f5:cf:15:eb:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
        Validity
            Not Before: Jan  1 08:18:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f1088b8ee8eb0c37915b9ecae7b9c4d50cb615ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f4:af:45:99:0f:66:1c:35:fa:63:1d:94:d8:
                    f2:be:90:55:ff:4a:54:a8:e6:a6:29:0f:82:c2:34:
                    97:58:49:5c:bc:dc:9f:8c:b5:89:e2:2a:04:91:98:
                    ef:3c:00:0b:ad:5e:4c:08:1d:3f:86:74:a6:25:d5:
                    10:f3:3c:4b:5a:47:ec:95:59:88:33:e6:a0:b4:33:
                    25:27:27:22:f6:a1:f9:95:8a:b3:99:78:39:a3:02:
                    c4:7f:a5:da:f5:be:97:7c:60:f5:b9:11:f2:b2:e7:
                    3f:e0:93:42:e9:80:b8:36:81:16:97:79:8b:51:9c:
                    db:32:51:e6:a6:fe:10:7f:30:89:b9:6e:51:24:a6:
                    7d:e5:f6:b1:0f:33:40:8c:04:4c:be:8e:0a:17:f3:
                    4d:d2:cf:ae:5a:50:ad:ac:64:68:cd:c6:78:26:2b:
                    e2:a0:0e:33:4c:bb:9b:e0:6a:13:a6:9b:86:bd:72:
                    ae:ea:56:9a:9d:5d:4f:51:43:bc:89:38:18:16:4c:
                    db:a9:63:27:b1:7c:38:29:57:c1:0b:68:d1:4a:40:
                    71:05:fc:72:cb:9a:ba:41:6e:9e:bb:88:10:b3:f1:
                    a1:02:27:15:e7:b5:29:38:cd:70:8d:f5:4e:7e:af:
                    d4:a3:93:84:17:3c:e9:1f:e0:89:9a:2d:c4:03:a2:
                    7d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:08:8B:8E:E8:EB:0C:37:91:5B:9E:CA:E7:B9:C4:D5:0C:B6:15:EE
            X509v3 Authority Key Identifier:
                keyid:97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/8QiLjujrDDeRW57K57nE1Qy2Fe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:cb:b6:e1:34:13:fa:17:20:42:01:9b:4c:cc:57:f8:4f:fc:
         da:fe:40:db:32:c5:46:33:45:36:96:6b:c0:2f:61:75:68:4c:
         42:26:43:46:b6:1e:91:d0:ff:55:80:1a:ce:d5:5b:47:0e:19:
         35:9c:9f:8d:a7:e9:9e:62:fd:fd:e7:8a:95:2c:dc:d2:81:89:
         f5:94:43:09:a9:77:56:5a:14:65:5a:4b:44:01:e2:da:7a:55:
         c7:b0:4b:00:ba:25:1f:3d:c1:89:b3:7b:ce:bc:fd:5c:08:8d:
         96:f6:93:63:cf:2a:85:3e:3f:30:ea:98:e7:49:cb:88:ba:cc:
         f5:31:63:b7:f0:d3:14:67:e4:b1:a9:38:00:2a:a8:1e:4e:08:
         fa:0f:bf:40:f7:78:21:24:10:36:ea:17:47:c8:68:87:fb:e7:
         bc:13:e9:5e:c5:04:31:97:64:a1:37:75:cd:00:43:e7:21:23:
         29:bc:2f:cb:d3:d2:29:80:19:60:73:ad:da:b6:11:04:f6:3d:
         26:c5:90:ee:22:63:f3:af:fc:64:d7:87:d4:b2:88:ea:b5:5a:
         a7:7b:2c:b5:5f:57:c3:a3:07:8f:8d:41:89:68:dc:59:99:ec:
         60:40:38:69:cf:3b:bc:b8:bc:1e:d6:29:13:b3:a7:ca:80:eb:
         54:d0:2c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 06:07:16 2026 by rpki-client