This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/NueqQvkP6OwbYq3KeGusJiI5nB4.roa
File:                     NueqQvkP6OwbYq3KeGusJiI5nB4.roa (raw, json)
Hash identifier:          Iwo1uDTct62657OX8teLFspmVyOSx/FLeOTjd7KJmFk=
Subject key identifier:   36:E7:AA:42:F9:0F:E8:EC:1B:62:AD:CA:78:6B:AC:26:22:39:9C:1E
Certificate issuer:       /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial:       019B7B365ACC453B0F78D874E61A7D6BAC31
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/NueqQvkP6OwbYq3KeGusJiI5nB4.roa
Signing time:             Thu 01 Jan 2026 20:18:38 +0000
ROA not before:           Thu 01 Jan 2026 20:18:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47169
IP address blocks:        45.10.92.0/23 maxlen: 23
                          185.143.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:5a:cc:45:3b:0f:78:d8:74:e6:1a:7d:6b:ac:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
        Validity
            Not Before: Jan  1 20:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=36e7aa42f90fe8ec1b62adca786bac2622399c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:47:65:de:5a:ea:c8:85:a5:86:40:6d:2b:ba:
                    aa:56:50:1c:00:64:a4:95:4a:fc:bc:43:42:6a:c3:
                    56:34:a0:04:ff:8a:46:3a:3f:e4:87:4d:0c:27:f3:
                    01:77:ba:bf:e1:57:63:77:fd:8a:8d:3d:21:af:6c:
                    3b:b8:d7:42:99:29:86:1b:de:99:61:d8:78:d5:a0:
                    02:60:8a:99:78:72:2a:e8:6d:b7:46:91:22:64:ba:
                    c9:d9:fc:0d:3e:25:76:35:90:f3:9e:46:47:38:78:
                    90:e1:08:b4:8d:fb:a7:c8:ee:53:ab:7a:e9:99:3f:
                    01:be:2d:03:9e:db:af:2a:2d:70:25:83:32:81:12:
                    b0:1d:b2:de:7c:2b:b1:bc:ab:14:40:da:1b:79:12:
                    cf:bc:cd:01:df:f2:c6:39:69:25:5a:db:ea:3a:05:
                    f6:a5:ac:20:db:0e:27:53:e1:df:c9:db:b8:3c:dd:
                    e4:5c:3c:8f:c5:19:8a:6f:ab:9b:be:18:ac:19:67:
                    29:27:98:a8:e7:24:b8:4b:7d:77:36:ec:78:02:9b:
                    d3:b7:76:67:f0:9f:68:c9:6a:e7:75:84:58:eb:de:
                    1c:a9:3e:56:11:cf:ec:d0:da:17:e8:c5:6c:54:8f:
                    5a:c6:da:95:f8:d4:75:0f:62:d3:9f:4d:f6:98:31:
                    5f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E7:AA:42:F9:0F:E8:EC:1B:62:AD:CA:78:6B:AC:26:22:39:9C:1E
            X509v3 Authority Key Identifier:
                keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/NueqQvkP6OwbYq3KeGusJiI5nB4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.92.0/23
                  185.143.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:85:b2:71:91:20:52:35:2c:ea:93:88:78:76:72:73:1a:58:
         07:24:ca:96:f4:27:d2:8d:5b:43:30:7b:f3:69:1a:d7:7a:e5:
         d2:95:bc:ea:0e:2e:19:c7:83:1c:5f:63:4f:99:f9:92:b0:48:
         1b:25:99:01:03:5c:b8:59:3d:fd:42:79:78:02:3f:6d:8d:29:
         b0:34:32:27:94:e8:9c:60:ec:df:b4:ac:55:87:2d:d6:6a:38:
         f8:d9:b9:ea:bc:b6:4b:0f:b9:d2:b4:fa:ea:e1:2c:d2:66:50:
         a8:95:10:10:88:2d:d3:41:c6:2c:e9:af:39:ec:16:d8:c7:b6:
         2d:a6:bd:9e:86:a9:0a:0c:69:99:36:51:36:88:af:9c:45:70:
         fe:81:77:9b:07:87:aa:1d:3f:3d:91:72:16:15:26:4d:a7:af:
         fb:24:91:2d:b1:67:8b:fe:b5:89:bc:6b:e4:6f:26:8c:d2:ce:
         2e:63:b1:61:7a:c5:3f:5a:fd:b4:26:81:8b:5c:bc:a6:c1:59:
         97:de:33:bb:6a:f6:99:29:78:11:24:8a:62:3e:45:22:80:35:
         d2:f8:b9:46:64:76:22:bf:2e:c2:77:ff:dc:eb:47:46:07:c5:
         a0:49:87:22:b4:69:04:ea:60:0c:e3:a9:42:e1:ce:65:f9:64:
         e3:d3:57:93
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt7NlrMRTsPeNh05hp9a6wxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlY2ExMDVjZTRhZjZjMjFjZDQyOWU5OTJkMDZlYTdkMDZk
OGE1NmQwHhcNMjYwMTAxMjAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmU3YWE0MmY5MGZlOGVjMWI2MmFkY2E3ODZiYWMyNjIyMzk5YzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEdl3lrqyIWlhkBtK7qqVlAcAGSk
lUr8vENCasNWNKAE/4pGOj/kh00MJ/MBd7q/4Vdjd/2KjT0hr2w7uNdCmSmGG96Z
Ydh41aACYIqZeHIq6G23RpEiZLrJ2fwNPiV2NZDznkZHOHiQ4Qi0jfunyO5Tq3rp
mT8Bvi0DntuvKi1wJYMygRKwHbLefCuxvKsUQNobeRLPvM0B3/LGOWklWtvqOgX2
pawg2w4nU+Hfydu4PN3kXDyPxRmKb6ubvhisGWcpJ5io5yS4S313Nux4ApvTt3Zn
8J9oyWrndYRY694cqT5WEc/s0NoX6MVsVI9axtqV+NR1D2LTn032mDFfiQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDbnqkL5D+jsG2KtynhrrCYiOZweMB8GA1UdIwQY
MBaAFE7KEFzkr2whzUKemS0G6n0G2KVtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgt
NDZlZTBjZDdmY2JhLzEvTnVlcVF2a1A2T3diWXEzS2VHdXNKaUk1bkI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgtNDZlZTBjZDdmY2Jh
LzEvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLQpcAwQB
uY/IMA0GCSqGSIb3DQEBCwUAA4IBAQBbhbJxkSBSNSzqk4h4dnJzGlgHJMqW9CfS
jVtDMHvzaRrXeuXSlbzqDi4Zx4McX2NPmfmSsEgbJZkBA1y4WT39Qnl4Aj9tjSmw
NDInlOicYOzftKxVhy3Wajj42bnqvLZLD7nStPrq4SzSZlColRAQiC3TQcYs6a85
7BbYx7Ytpr2ehqkKDGmZNlE2iK+cRXD+gXebB4eqHT89kXIWFSZNp6/7JJEtsWeL
/rWJvGvkbyaM0s4uY7FhesU/Wv20JoGLXLymwVmX3jO7avaZKXgRJIpiPkUigDXS
+LlGZHYivy7Cd//c60dGB8WgSYcitGkE6mAM46lC4c5l+WTj01eT
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:05:15 2026 by rpki-client