This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/QV6aNnm8UURvRuqfgI_kdEPt9EA.roa
File:                     QV6aNnm8UURvRuqfgI_kdEPt9EA.roa (raw, json)
Hash identifier:          qGBvHUvU86fHU5nWskcmW6tvE6Bk4I7Gn2L3djwCsps=
Subject key identifier:   41:5E:9A:36:79:BC:51:44:6F:46:EA:9F:80:8F:E4:74:43:ED:F4:40
Certificate issuer:       /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial:       019B7B36DA7764998CA13B27EAB4B499D242
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/QV6aNnm8UURvRuqfgI_kdEPt9EA.roa
Signing time:             Thu 01 Jan 2026 20:19:11 +0000
ROA not before:           Thu 01 Jan 2026 20:19:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29802
IP address blocks:        213.145.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 11:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:da:77:64:99:8c:a1:3b:27:ea:b4:b4:99:d2:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
        Validity
            Not Before: Jan  1 20:19:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=415e9a3679bc51446f46ea9f808fe47443edf440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ae:6a:4a:45:47:bc:d6:f8:a5:f2:c3:67:ab:
                    1c:ce:a8:25:66:ac:89:26:87:18:e7:9d:32:ed:47:
                    c1:f6:f5:fd:c9:33:02:a9:77:bd:f3:a9:46:1b:ef:
                    1c:3c:4c:74:99:a2:c2:38:0e:c4:6c:2c:68:aa:82:
                    99:49:59:e9:36:69:96:6f:ea:05:f0:b6:89:5d:63:
                    a2:80:73:63:7d:ee:5a:ab:5e:b7:39:a4:ff:7f:b0:
                    a1:62:19:71:c5:e4:8f:f7:7b:a4:13:64:88:41:34:
                    7c:bf:7f:c1:0f:23:73:99:ef:2a:f3:67:6a:a4:47:
                    db:ba:41:4d:bc:b1:e4:9f:42:3e:02:45:4e:75:0c:
                    7f:34:4b:b0:47:dd:58:d6:06:17:0a:dd:0c:cc:e1:
                    a9:c2:b1:f0:1e:fb:87:67:1f:ba:72:23:66:63:d3:
                    4c:64:8e:c6:1e:55:e5:15:90:09:32:81:90:2e:e7:
                    78:65:4d:e7:9c:46:67:51:fc:35:20:e8:d7:e3:cd:
                    2f:b6:bf:fe:e6:7f:81:c1:b6:25:34:9a:31:1a:06:
                    28:50:ca:ba:74:a9:8f:c9:e7:59:e8:f5:13:7d:19:
                    19:6a:b5:3f:36:b4:2a:37:c8:b9:7f:ee:16:a7:53:
                    00:1b:cb:b0:aa:73:35:46:99:da:01:8c:ad:c1:3b:
                    1b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5E:9A:36:79:BC:51:44:6F:46:EA:9F:80:8F:E4:74:43:ED:F4:40
            X509v3 Authority Key Identifier:
                keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/QV6aNnm8UURvRuqfgI_kdEPt9EA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.145.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:8a:12:5f:a3:2e:33:a9:bd:f4:55:4a:d3:e3:24:f5:6c:c8:
         c3:43:17:b4:8c:eb:7d:f0:d9:59:56:fb:c2:a0:73:f3:8e:5d:
         b4:d0:cf:1d:a3:e8:44:0b:53:d8:94:13:79:4b:c6:0a:1a:38:
         aa:cf:af:7c:cb:4f:81:3b:be:bc:d4:7d:82:2f:85:6d:0a:91:
         01:15:93:0a:74:8c:c1:fc:0c:fb:8c:d2:82:76:d8:68:78:eb:
         61:1a:80:31:52:08:9b:e3:1a:87:82:ee:41:a1:87:65:d6:dc:
         03:d6:42:75:ef:75:7d:82:5f:03:58:65:56:29:f9:d2:43:f4:
         e5:90:af:b8:ac:49:4b:48:ea:7d:f4:3d:f1:12:50:8d:3b:cf:
         9e:a7:d6:ae:46:12:88:ca:41:66:76:fd:bd:e1:33:54:94:cd:
         fe:8f:d0:55:0c:ec:5d:f6:ff:77:05:9b:e4:89:f7:33:31:3f:
         2a:b8:b5:d5:dc:d6:79:ba:cc:f5:90:ed:c8:69:44:4b:ff:cc:
         96:79:2f:38:a0:5b:ca:a4:46:80:7f:81:09:52:98:18:f4:37:
         7d:7d:a2:13:45:b2:30:af:fc:1c:db:d6:6c:5e:eb:ad:78:b5:
         b1:28:69:c7:ce:8b:1a:d4:6e:eb:8d:34:1e:fb:b3:e1:77:84:
         aa:60:c1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:16:21 2026 by rpki-client