This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/QpTFRpA9uABw6SMgaV6IlnX_vis.roa
File:                     QpTFRpA9uABw6SMgaV6IlnX_vis.roa (raw, json)
Hash identifier:          TOAItdlVxhXYv/YnF+MA3X2Gct1/6NhAFmObWetq83A=
Subject key identifier:   42:94:C5:46:90:3D:B8:00:70:E9:23:20:69:5E:88:96:75:FF:BE:2B
Certificate issuer:       /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial:       019B7F83982D4CBF39040671CF52F3346C5C
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/QpTFRpA9uABw6SMgaV6IlnX_vis.roa
Signing time:             Fri 02 Jan 2026 16:21:29 +0000
ROA not before:           Fri 02 Jan 2026 16:21:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208328
IP address blocks:        2a0e:800:fff0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:98:2d:4c:bf:39:04:06:71:cf:52:f3:34:6c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
        Validity
            Not Before: Jan  2 16:21:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4294c546903db80070e92320695e889675ffbe2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:da:2d:c2:1e:5c:f9:1c:35:d4:4d:b8:ec:60:
                    f5:18:81:cd:76:19:cb:b0:39:16:be:87:9e:cd:29:
                    c4:a8:5d:88:f4:39:4c:fd:b2:70:57:6e:10:32:d2:
                    b3:58:4a:d2:5d:d1:b3:2a:39:90:29:bc:99:69:28:
                    9f:6d:4e:5f:fc:58:ee:8b:cf:25:21:b2:4f:d0:16:
                    d4:91:76:8e:54:83:01:34:d0:68:37:26:0f:61:9d:
                    54:09:9a:2c:b4:4a:00:1b:cd:ca:43:80:5b:8c:aa:
                    72:48:45:02:af:e6:b9:d2:1b:3a:e5:c0:62:7f:8b:
                    60:e3:f6:a1:a5:93:53:5f:80:ae:0e:c9:a1:36:1e:
                    06:80:60:fc:1c:67:7d:c3:64:67:19:56:be:b7:b4:
                    be:aa:bf:ed:c0:2a:e6:e4:31:14:40:25:9c:02:d1:
                    b6:6c:3d:bd:80:fa:7e:a1:fd:24:ea:9b:8b:19:3e:
                    5f:d8:32:b8:27:08:be:1b:78:dd:9f:c5:61:d5:9d:
                    2b:4c:83:22:50:48:9b:77:59:0f:13:b8:da:8f:8f:
                    13:b0:59:af:63:4b:ab:2f:5d:fc:0e:53:d6:74:da:
                    65:86:a3:9e:bb:cf:d2:62:f4:4e:45:c3:d0:ee:12:
                    aa:41:2e:0f:d8:d0:d7:ef:9d:27:47:74:22:a0:29:
                    cd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:94:C5:46:90:3D:B8:00:70:E9:23:20:69:5E:88:96:75:FF:BE:2B
            X509v3 Authority Key Identifier:
                keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/QpTFRpA9uABw6SMgaV6IlnX_vis.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:800:fff0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:72:74:e5:4f:0c:8d:b6:05:1c:43:9c:2c:17:02:e6:1b:f1:
         16:0d:12:4f:4e:32:bf:bb:2a:0b:bb:c7:0d:97:4b:25:b5:8f:
         69:9b:71:b8:56:b5:e9:1f:eb:d0:ce:15:76:4e:a0:78:3e:c3:
         c6:7d:ba:1d:54:73:16:e4:1f:f3:15:c8:19:11:82:3c:4a:66:
         ba:95:53:75:2c:7a:56:b9:df:ad:b7:0d:bb:96:4c:45:94:ad:
         96:e0:7d:ac:af:a3:3a:ae:ba:ab:8c:49:d1:5d:81:79:fa:fe:
         60:9f:64:4d:3b:90:99:b9:9b:8d:83:8f:c9:8a:4a:78:15:a0:
         06:98:58:77:2d:f7:97:0b:ad:6f:0b:c2:8a:44:98:74:fa:e9:
         f2:1f:00:06:59:d0:a8:5d:6f:03:1e:01:a5:12:bb:e5:6e:84:
         41:64:7e:5c:d4:0d:8c:3a:77:6d:e3:d4:c8:49:ec:57:f8:70:
         5b:53:e1:f5:8c:75:e6:5e:8d:8b:cc:5d:12:cd:cd:2b:6a:bb:
         a1:1a:64:bd:5f:8c:87:60:13:4e:a3:af:74:fd:ea:24:22:97:
         d6:2f:e3:66:07:cc:83:a3:1a:f8:96:ad:48:fe:10:48:e8:5f:
         1b:95:91:ba:d7:a6:bc:78:77:a2:8e:4a:ee:30:f4:c6:ad:33:
         9a:9c:1d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:04:33 2026 by rpki-client