This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/QcPtbvqsOMuV70yR3jYtDijDmuU.roa
File:                     QcPtbvqsOMuV70yR3jYtDijDmuU.roa (raw, json)
Hash identifier:          1d2DpCFv9KtW18ls9Gaq6LAHmxDBVtcw2IbhHZ1MgIM=
Subject key identifier:   41:C3:ED:6E:FA:AC:38:CB:95:EF:4C:91:DE:36:2D:0E:28:C3:9A:E5
Certificate issuer:       /CN=588cabf6f523f26e267db03b524347841aaaa465
Certificate serial:       019B77589F8D93CECD12441EBB0D0684D2AE
Authority key identifier: 58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/QcPtbvqsOMuV70yR3jYtDijDmuU.roa
Signing time:             Thu 01 Jan 2026 02:17:35 +0000
ROA not before:           Thu 01 Jan 2026 02:17:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202053
IP address blocks:        194.107.180.0/24 maxlen: 24
                          2a0d:7980:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:9f:8d:93:ce:cd:12:44:1e:bb:0d:06:84:d2:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588cabf6f523f26e267db03b524347841aaaa465
        Validity
            Not Before: Jan  1 02:17:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=41c3ed6efaac38cb95ef4c91de362d0e28c39ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dc:f7:06:9b:c4:3f:75:37:0e:02:6e:ec:71:
                    bc:ba:65:cc:3a:4c:e7:94:39:29:ad:f1:3a:fe:96:
                    9e:e3:d0:53:cf:d9:90:39:fc:03:e1:3d:2c:78:cf:
                    be:3a:0d:19:a3:65:c0:7d:37:53:6a:78:25:dd:f2:
                    2a:88:a6:33:31:e9:7e:24:30:03:9d:55:14:49:0b:
                    03:22:c7:63:f6:a6:63:14:c5:7a:6b:d9:3e:25:83:
                    3b:41:f8:6c:3e:48:71:2a:4f:55:d2:6f:72:20:bc:
                    4d:99:77:26:ac:7d:37:5b:00:04:de:c0:f3:ff:e9:
                    fb:15:29:51:89:03:12:e1:8e:b9:75:81:3b:51:30:
                    ad:51:36:4f:0c:d8:e4:25:19:a2:e7:ac:de:80:e2:
                    c9:df:66:ed:bd:a4:d1:fb:5e:a3:4d:e0:6e:24:fe:
                    13:d0:1a:5b:ad:7b:0c:f0:ef:0c:a0:15:ae:9a:37:
                    cf:eb:ab:50:fa:e6:e3:bb:8f:e5:fb:c4:19:8a:20:
                    7f:4c:f5:80:73:9d:20:50:96:ef:2b:5f:94:dd:b2:
                    8b:5f:2b:bd:25:c8:a8:cb:9a:07:a3:cb:fc:18:50:
                    8e:93:cb:2e:58:8b:b4:43:dc:b3:11:33:a2:ea:91:
                    96:a2:e6:44:00:3b:e5:32:7e:ba:da:a4:3d:88:d6:
                    4d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C3:ED:6E:FA:AC:38:CB:95:EF:4C:91:DE:36:2D:0E:28:C3:9A:E5
            X509v3 Authority Key Identifier:
                keyid:58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/QcPtbvqsOMuV70yR3jYtDijDmuU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.107.180.0/24
                IPv6:
                  2a0d:7980:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:08:15:2d:a9:ae:4e:04:81:a1:56:1a:08:ff:53:e8:29:67:
         4b:58:2e:e3:b6:68:7b:4f:35:6f:19:d0:92:6d:c3:7d:3f:f1:
         76:70:1c:d8:3d:68:25:bb:90:ae:1f:5f:70:50:2f:28:a0:16:
         22:3f:dd:e0:3e:f6:6e:b8:2b:2a:0e:47:84:cf:2b:cf:26:d3:
         93:74:63:ae:ca:3f:9a:e9:83:34:67:dc:d2:eb:94:40:a9:a3:
         2a:08:fc:0a:5d:43:01:3c:1c:f2:3f:b7:aa:2f:78:8f:3b:a9:
         d1:a4:84:74:58:62:4c:e9:ab:58:37:54:63:c1:15:c2:d2:f6:
         51:b9:93:37:c8:31:b9:b5:d1:46:4a:04:ef:88:e3:4b:94:16:
         62:ed:84:6c:33:ef:23:d6:53:d3:01:52:ba:02:d8:3b:36:a2:
         08:d4:71:40:31:a2:c4:aa:41:fd:38:e1:5a:8f:0c:e0:8d:ee:
         0f:ce:b3:ac:72:9d:dd:fb:2d:6f:97:e2:df:1e:cf:2d:8f:31:
         18:98:0f:2b:9d:75:59:32:ed:16:a1:30:d8:95:9e:d4:63:ba:
         52:a5:e8:d3:0d:f7:64:a8:f9:d8:de:66:bc:04:6e:a6:b9:80:
         72:ea:e8:1c:40:81:6c:6f:e5:07:9b:db:22:f3:8f:d5:dd:b0:
         4a:1e:8d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:31:24 2026 by rpki-client