This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/1QwxBzzrzbLhE53UBSnG0QYKMDg.roa
File:                     1QwxBzzrzbLhE53UBSnG0QYKMDg.roa (raw, json)
Hash identifier:          CVaxoZfOngTvB/Tbw2XbJcH9Ku/qNCgCrqppI4x0a68=
Subject key identifier:   D5:0C:31:07:3C:EB:CD:B2:E1:13:9D:D4:05:29:C6:D1:06:0A:30:38
Certificate issuer:       /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial:       019B7A5A76E6B7E6750FF781FEF3443793B2
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/1QwxBzzrzbLhE53UBSnG0QYKMDg.roa
Signing time:             Thu 01 Jan 2026 16:18:27 +0000
ROA not before:           Thu 01 Jan 2026 16:18:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207471
IP address blocks:        150.40.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:76:e6:b7:e6:75:0f:f7:81:fe:f3:44:37:93:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
        Validity
            Not Before: Jan  1 16:18:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d50c31073cebcdb2e1139dd40529c6d1060a3038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:4a:ad:9d:1d:6e:b0:61:89:58:24:29:0a:3a:
                    e1:ae:65:a8:6a:28:98:1b:7d:73:94:68:7c:35:b9:
                    f4:62:f0:9b:c0:eb:1a:05:62:d8:6b:5c:f5:af:5c:
                    04:b8:33:ad:71:f9:45:54:ca:37:dd:81:9e:4f:f1:
                    9e:3d:f8:37:51:55:4f:06:0d:ed:ef:d8:05:09:0f:
                    c2:aa:dc:43:fe:0a:0c:b4:1a:18:16:ca:a5:8d:47:
                    09:83:cc:91:51:e7:06:f2:0d:fc:6f:a7:54:01:68:
                    fb:be:a0:dc:d4:61:5f:17:e7:54:a2:7f:21:02:f0:
                    b9:83:2b:2f:80:8a:e3:14:d7:9c:79:0b:70:69:74:
                    a7:68:34:d1:0c:d1:1d:4b:65:11:9f:49:98:bb:c1:
                    af:33:3a:90:c5:ba:ef:65:c4:5d:b6:27:b0:bb:81:
                    36:d5:a2:4f:41:4c:65:54:7d:03:c2:48:8f:ac:34:
                    53:6e:31:d5:eb:ed:ff:ae:ef:d0:54:e7:17:9e:21:
                    07:4a:f4:c4:8c:bb:f8:27:fd:0c:28:a5:b6:97:76:
                    77:1f:12:d4:d8:7a:9b:99:6a:ba:8c:65:bb:35:44:
                    dc:6b:ba:b7:b1:07:ee:19:97:71:08:a8:03:66:24:
                    8b:a1:3a:ac:7f:16:3c:83:8e:75:c1:a9:f6:3e:15:
                    32:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0C:31:07:3C:EB:CD:B2:E1:13:9D:D4:05:29:C6:D1:06:0A:30:38
            X509v3 Authority Key Identifier:
                keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/1QwxBzzrzbLhE53UBSnG0QYKMDg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.40.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:cb:56:f4:fa:12:c4:49:37:36:08:67:98:87:13:89:10:b6:
         74:c9:4d:63:7a:03:84:6e:50:9b:a1:11:84:bc:df:0e:71:d4:
         a5:e0:2c:8f:09:9d:8d:a6:b6:8b:1c:14:55:93:1d:a3:7f:5d:
         47:9a:b7:d0:70:92:b5:a4:65:cd:47:5a:48:89:68:2c:e7:52:
         ea:ea:29:7a:e9:ae:2a:72:f2:18:4f:47:27:a2:ee:3d:30:78:
         eb:04:f9:5c:a5:eb:db:4d:9a:1e:43:38:5b:a6:fd:19:d1:f0:
         6c:fc:e4:ce:62:90:0e:4b:3c:cb:30:f0:a7:61:aa:78:d8:19:
         f6:35:76:cf:23:ce:8c:6b:ae:d6:be:18:ed:d5:8f:99:23:6f:
         f6:9e:4a:44:48:76:59:ac:ae:75:40:62:38:be:be:09:6a:76:
         35:3a:e7:17:ac:20:61:a0:b9:b3:34:85:44:86:e3:21:9e:da:
         3d:7c:bd:53:00:5f:2a:cd:34:be:0e:01:a2:f2:3c:87:5c:c0:
         54:94:69:d3:f4:98:1b:f5:be:81:9d:8a:cf:55:42:f8:52:cd:
         a3:60:8b:97:20:8d:52:3c:7a:c5:0b:cd:6c:48:dd:8f:68:17:
         ca:85:be:f1:f2:3a:f0:d4:42:e0:3a:fe:73:b9:f0:d6:91:26:
         0e:22:6b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:22:06 2026 by rpki-client