This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/qv_0DGiqZIrviDnUY0UjmlA-rxA.roa
File:                     qv_0DGiqZIrviDnUY0UjmlA-rxA.roa (raw, json)
Hash identifier:          tjO3NXsd+wFb/73NXf9/LYs4wwFfV042CQT23DEtDSk=
Subject key identifier:   AA:FF:F4:0C:68:AA:64:8A:EF:88:39:D4:63:45:23:9A:50:3E:AF:10
Certificate issuer:       /CN=122a2ba3cc18c998501309ecde042706af5b845a
Certificate serial:       019B7F82264CBA05828382F5B3DCC2AE8058
Authority key identifier: 12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/qv_0DGiqZIrviDnUY0UjmlA-rxA.roa
Signing time:             Fri 02 Jan 2026 16:19:54 +0000
ROA not before:           Fri 02 Jan 2026 16:19:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56690
IP address blocks:        91.226.172.0/22 maxlen: 22
                          185.250.60.0/22 maxlen: 22
                          193.39.116.0/24 maxlen: 24
                          2a09:8880::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:82:26:4c:ba:05:82:83:82:f5:b3:dc:c2:ae:80:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a2ba3cc18c998501309ecde042706af5b845a
        Validity
            Not Before: Jan  2 16:19:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=aafff40c68aa648aef8839d46345239a503eaf10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ad:4f:76:c5:f1:f7:5f:fe:da:52:3b:ee:47:
                    a0:55:db:73:b7:99:d1:35:0e:5a:c8:dd:df:f7:57:
                    4e:00:68:1b:6e:f4:30:d6:5e:7e:28:02:0f:06:40:
                    cc:b8:07:38:92:9d:4d:fb:12:a4:77:07:db:23:af:
                    07:c3:1d:ed:b5:45:a9:f3:fd:27:87:c8:79:38:be:
                    c2:29:9d:ea:20:06:15:aa:3f:cc:78:e0:41:f2:5f:
                    30:47:a6:6b:f5:d2:86:ec:53:3a:d7:b0:60:dc:d8:
                    d8:55:c3:21:36:b3:b0:3c:c0:be:f7:e3:d5:41:f2:
                    5f:47:f1:20:07:37:2b:6e:67:10:20:66:e1:16:6a:
                    bd:5e:63:ca:a7:36:3d:02:5b:8b:93:e8:f2:d6:6a:
                    1e:3b:4b:92:c5:55:74:26:5d:31:98:3f:80:54:51:
                    7e:92:8b:23:93:68:68:7f:93:00:9d:8a:09:16:2a:
                    62:9c:1e:ae:84:c8:37:2c:ce:03:e9:de:78:80:65:
                    05:32:cc:3d:83:72:de:9d:ea:b6:af:7c:04:da:40:
                    27:46:72:f5:c4:4e:01:75:39:0b:17:91:8b:e6:0e:
                    e9:8d:f6:97:ba:9c:f3:7b:aa:6d:00:15:83:b9:92:
                    ef:14:39:5d:03:fa:8a:f4:b6:e1:bd:51:35:11:d4:
                    fb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FF:F4:0C:68:AA:64:8A:EF:88:39:D4:63:45:23:9A:50:3E:AF:10
            X509v3 Authority Key Identifier:
                keyid:12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/qv_0DGiqZIrviDnUY0UjmlA-rxA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.226.172.0/22
                  185.250.60.0/22
                  193.39.116.0/24
                IPv6:
                  2a09:8880::/36

    Signature Algorithm: sha256WithRSAEncryption
         06:8e:5f:a2:34:8e:d1:5a:9c:88:3b:2b:43:b1:5a:74:84:6b:
         01:42:90:38:47:82:18:0b:4b:c9:92:92:b4:86:90:04:7d:f7:
         8e:0c:a4:81:70:ac:22:be:21:7b:71:24:2a:54:ce:54:e5:f0:
         d6:3a:dd:4b:16:d5:f6:b9:d9:17:33:87:f8:73:69:f5:59:00:
         ed:62:df:b5:d1:b0:86:fb:e9:45:ca:08:25:f5:da:41:c8:0c:
         ae:87:fd:b6:87:fa:89:9f:20:46:8b:e6:2d:c5:4c:d1:3a:51:
         2a:d5:ea:d4:0c:97:4c:ed:dc:8d:6e:98:05:69:6a:59:54:3c:
         b9:02:0e:57:02:5c:4b:f3:97:a9:14:6b:08:d6:db:b7:ac:4d:
         c1:b8:95:47:08:fd:f1:bf:01:e4:65:fd:b6:e5:79:aa:5b:64:
         c6:d8:76:25:c3:8d:89:20:6a:91:7b:71:0a:fe:05:92:1f:25:
         f3:ac:d7:81:aa:87:2c:41:db:cd:f0:40:8f:04:15:94:ae:d1:
         6a:ac:30:17:63:4c:c4:96:10:ea:16:3b:ab:04:95:b4:c7:d6:
         60:7a:ac:c1:91:4f:c5:a4:c5:7d:18:30:c5:e6:6c:2b:96:10:
         94:ce:ac:5e:47:9e:bf:f5:1b:db:40:56:db:64:b6:18:77:ac:
         74:75:cb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:44:30 2026 by rpki-client