This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/RQvbDSqBfaVu6td-sVHc8kS0AMI.roa
File:                     RQvbDSqBfaVu6td-sVHc8kS0AMI.roa (raw, json)
Hash identifier:          KdkxzAaIeA05KUt11r/+FMtzXvFNEQ4QHFKm2YSq46I=
Subject key identifier:   45:0B:DB:0D:2A:81:7D:A5:6E:EA:D7:7E:B1:51:DC:F2:44:B4:00:C2
Certificate issuer:       /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial:       019B7AC9291790F038786A03AC158323970C
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/RQvbDSqBfaVu6td-sVHc8kS0AMI.roa
Signing time:             Thu 01 Jan 2026 18:19:22 +0000
ROA not before:           Thu 01 Jan 2026 18:19:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211279
IP address blocks:        178.175.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:29:17:90:f0:38:78:6a:03:ac:15:83:23:97:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
        Validity
            Not Before: Jan  1 18:19:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=450bdb0d2a817da56eead77eb151dcf244b400c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a5:a5:c7:63:fc:47:e5:64:ff:3e:48:39:37:
                    64:51:4a:a6:14:3e:12:10:9c:2c:7e:4a:8a:72:37:
                    d4:72:33:f5:33:92:cd:99:1f:38:25:72:53:49:3b:
                    de:4a:e8:bf:4a:70:ae:2f:91:39:1a:54:61:7f:35:
                    1e:ec:ba:cf:12:74:06:ba:ea:54:91:99:54:31:08:
                    60:53:ae:7a:71:30:0e:98:81:b6:5d:6e:00:5a:43:
                    d4:59:0d:31:17:03:ea:28:49:6f:15:8a:e9:65:c7:
                    45:71:86:c6:26:a4:7d:9d:fb:19:d3:3c:1d:31:bd:
                    51:96:1b:de:dd:86:13:8e:19:7a:c8:f4:63:41:cb:
                    26:07:34:af:5a:8b:d0:07:2e:af:b2:21:fe:8d:fb:
                    1e:b7:5a:aa:25:04:cb:b7:a0:98:fa:fb:1c:f0:a6:
                    fe:7b:56:2a:5f:71:cb:e3:29:6d:f0:6a:9c:88:05:
                    c6:cb:c4:c4:7c:1b:c2:2f:55:36:0e:ee:77:e3:57:
                    1a:3f:36:f8:4b:4a:95:9e:57:7f:f9:62:92:80:35:
                    59:7c:0a:ee:28:42:f7:e0:da:c9:67:55:38:b4:2c:
                    dd:64:d4:25:01:c1:e4:80:67:09:22:9b:52:46:ca:
                    40:d7:1a:ac:27:d5:a6:f7:ea:1d:dd:c8:af:1c:9f:
                    9f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0B:DB:0D:2A:81:7D:A5:6E:EA:D7:7E:B1:51:DC:F2:44:B4:00:C2
            X509v3 Authority Key Identifier:
                keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/RQvbDSqBfaVu6td-sVHc8kS0AMI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.175.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:31:75:ea:c0:90:29:f5:10:81:c7:91:fb:1f:ef:b8:d3:0c:
         69:9e:dd:9f:0e:fe:09:84:99:fd:03:aa:55:63:66:ca:33:d5:
         1d:46:7b:2d:57:46:d3:c2:ed:ee:49:32:a6:6e:4b:37:e2:36:
         df:be:d6:31:92:50:e7:be:44:84:ad:df:98:e5:60:05:92:bc:
         2f:42:76:77:f9:ec:32:75:77:9b:a5:93:03:d9:2e:ec:0d:fe:
         f5:7b:28:98:0d:ef:aa:d3:3b:bb:e7:46:0f:54:c3:2d:d5:ff:
         bb:08:0f:94:a9:a7:ca:03:5d:35:ac:74:31:f4:5c:7d:fa:44:
         05:33:02:7d:f7:21:62:36:c8:ae:2a:e1:f6:48:57:96:5a:ba:
         e0:0d:d0:25:65:15:0f:89:59:aa:8b:f8:04:ea:8e:8c:6c:8d:
         d6:1f:22:56:30:96:df:80:0d:15:33:64:58:47:f1:59:b6:e8:
         c2:68:27:7d:60:d3:29:9b:04:57:a9:51:64:d8:b4:77:b5:71:
         09:08:31:40:d2:d9:ac:e6:95:90:cd:3e:93:53:ae:1a:c3:16:
         7f:65:0c:38:0e:43:f7:49:50:fa:d3:83:97:ab:94:29:8e:ca:
         83:8a:4e:2a:b0:b9:b5:20:8a:28:6c:82:dd:29:e6:1a:1b:bb:
         a8:5e:75:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:42:16 2026 by rpki-client