This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/Qt5FyyoDlj0YHpPNUFsAKekF6tM.roa
File:                     Qt5FyyoDlj0YHpPNUFsAKekF6tM.roa (raw, json)
Hash identifier:          T9UiTSXHZWvGquYOfGokmG8Ee9UykPig78Bt+PH4Uss=
Subject key identifier:   42:DE:45:CB:2A:03:96:3D:18:1E:93:CD:50:5B:00:29:E9:05:EA:D3
Certificate issuer:       /CN=2fba003756d1013b943eb4f507fb4e7c74778269
Certificate serial:       019B7DCA5361526620FBE041BEFEA57D9D2F
Authority key identifier: 2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/Qt5FyyoDlj0YHpPNUFsAKekF6tM.roa
Signing time:             Fri 02 Jan 2026 08:19:30 +0000
ROA not before:           Fri 02 Jan 2026 08:19:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48644
IP address blocks:        45.83.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:53:61:52:66:20:fb:e0:41:be:fe:a5:7d:9d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fba003756d1013b943eb4f507fb4e7c74778269
        Validity
            Not Before: Jan  2 08:19:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=42de45cb2a03963d181e93cd505b0029e905ead3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:63:c0:44:1e:18:5a:75:5d:0e:8d:7e:f5:98:
                    8d:aa:96:08:36:fa:fb:79:8c:4e:6b:e8:27:d2:37:
                    aa:b6:95:79:88:13:c8:5d:28:23:87:1a:d7:2e:42:
                    31:ea:45:31:e6:c1:6d:c0:67:b7:31:fb:68:d4:71:
                    3b:13:63:7a:eb:56:33:20:ef:7d:c8:a8:01:22:91:
                    20:89:5f:cc:8d:71:3b:f5:1c:c1:b1:65:43:44:80:
                    df:d7:30:4c:24:a9:9d:07:2f:01:5a:30:fe:cd:d0:
                    64:a5:2c:88:1d:75:66:b0:8f:18:bc:89:87:18:d7:
                    e1:4b:80:36:3c:8a:6f:87:74:36:6f:be:9f:f1:ad:
                    01:db:a1:c3:9c:33:ba:2f:e3:84:e3:de:9a:63:7f:
                    2c:41:d6:86:7e:e7:96:69:65:64:78:fa:90:6f:aa:
                    bb:f7:25:60:9e:cc:bb:71:f3:24:f2:e3:61:56:30:
                    10:1c:92:45:f8:9a:8f:c1:83:51:a0:d7:8e:53:89:
                    82:a4:a7:06:13:fe:76:da:0a:83:ea:6c:a4:bf:c6:
                    e6:05:f1:c5:b5:d9:1f:95:f5:7f:d8:68:19:d8:55:
                    4c:9b:d0:cb:cc:41:a5:cd:59:d9:e9:7c:22:28:be:
                    85:c8:5e:ec:40:af:63:b6:ea:72:78:71:33:1d:96:
                    41:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DE:45:CB:2A:03:96:3D:18:1E:93:CD:50:5B:00:29:E9:05:EA:D3
            X509v3 Authority Key Identifier:
                keyid:2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/Qt5FyyoDlj0YHpPNUFsAKekF6tM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.83.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:82:44:f9:e1:7a:a6:c1:63:fe:4c:24:3e:9b:fa:1b:f1:cd:
         db:af:c7:08:8a:1d:2a:62:98:68:2d:4a:93:dc:ea:58:3f:ca:
         e8:a5:fb:a2:1b:21:df:e7:d3:4c:7c:65:f0:4e:b5:90:0a:09:
         6b:19:fb:95:5b:eb:42:23:2a:52:56:5f:d0:c7:b4:c9:c0:75:
         79:cd:96:e6:44:03:79:50:a3:ed:a2:3f:24:ad:53:a2:14:6e:
         05:55:f5:0b:5c:14:ae:a6:a9:57:38:92:26:4b:c2:36:a3:ff:
         53:15:d7:76:28:15:cb:4e:8b:7f:69:6a:87:39:ce:66:9e:e8:
         da:4c:e5:f4:24:80:e8:15:50:27:95:ac:b1:25:40:25:eb:8a:
         28:73:eb:69:42:f1:7c:20:67:34:17:45:a5:9d:68:cc:45:24:
         67:7e:05:bd:cb:60:0f:7e:77:f0:9b:83:ec:b9:47:a1:f9:a2:
         a4:d8:20:b9:d6:7f:82:6c:f4:2f:9f:90:45:24:35:98:7b:d6:
         5d:56:1a:5b:f9:bd:38:4e:f7:6b:8a:ee:6f:06:ba:43:56:79:
         04:a8:77:77:66:a6:ab:e6:d9:80:6e:4e:18:09:69:49:95:cf:
         c5:1c:98:36:1f:a6:22:cb:02:49:1e:90:ac:32:98:cd:97:61:
         50:cb:d7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:49:31 2026 by rpki-client