This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Qe__KyezimuiXYFYFxZiTFdwmkU.roa
File:                     Qe__KyezimuiXYFYFxZiTFdwmkU.roa (raw, json)
Hash identifier:          lqwe4jlQaUehwqmjgGPrMSuExZjhCCYZx87CGNaD+VA=
Subject key identifier:   41:EF:FF:2B:27:B3:8A:6B:A2:5D:81:58:17:16:62:4C:57:70:9A:45
Certificate issuer:       /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial:       019B7F14BD8213C799DFD782A67035CA46C3
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Qe__KyezimuiXYFYFxZiTFdwmkU.roa
Signing time:             Fri 02 Jan 2026 14:20:24 +0000
ROA not before:           Fri 02 Jan 2026 14:20:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200950
IP address blocks:        194.231.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:bd:82:13:c7:99:df:d7:82:a6:70:35:ca:46:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
        Validity
            Not Before: Jan  2 14:20:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=41efff2b27b38a6ba25d81581716624c57709a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:cb:0b:3e:d6:ef:3d:c9:6b:c5:f3:8c:29:
                    93:c8:cf:d7:cb:06:6b:03:9e:2b:35:ab:4f:60:9d:
                    5a:1b:b4:d6:4d:9f:38:2c:4c:cc:23:f3:c8:ae:ec:
                    78:f8:1e:fd:d5:3d:3f:2a:99:9f:a9:81:8a:5d:32:
                    5d:46:20:c3:31:bc:24:fe:32:28:bf:7f:61:90:33:
                    4f:4f:bf:b6:87:55:11:8b:43:87:56:40:e7:73:d8:
                    8b:0c:4b:d5:ff:15:f1:d8:1c:61:eb:75:7c:d6:c2:
                    4b:8a:a2:e9:30:db:66:f3:a6:d4:8a:fe:a0:c7:1c:
                    9b:d9:67:6f:74:dd:54:9f:36:a3:84:95:f9:e8:2f:
                    72:54:47:d2:0b:2c:59:1d:00:66:aa:96:ad:0f:de:
                    47:92:24:76:92:77:07:34:46:71:1b:c2:4b:7b:f2:
                    d6:9e:1f:f3:d4:69:47:f3:9c:2f:3e:49:8a:93:4d:
                    11:33:b7:61:54:07:0e:36:1e:cd:a3:4c:47:9b:60:
                    41:a8:90:cf:84:8a:a3:a7:ad:71:3c:ec:7b:c6:11:
                    e8:90:e4:ea:60:01:d9:86:3e:01:25:d0:27:7f:2e:
                    f6:d9:c9:84:0f:17:07:48:ee:bf:5e:23:00:96:3f:
                    48:88:fd:1a:5d:e4:aa:25:24:1d:d4:b5:a5:b1:38:
                    88:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EF:FF:2B:27:B3:8A:6B:A2:5D:81:58:17:16:62:4C:57:70:9A:45
            X509v3 Authority Key Identifier:
                keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Qe__KyezimuiXYFYFxZiTFdwmkU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.231.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:a4:ae:c2:18:3e:25:58:c9:7c:46:a5:3e:d8:9f:52:68:1d:
         ad:79:3f:e7:de:b4:a5:55:98:73:8f:da:24:e3:c5:fe:3e:41:
         2f:31:74:7b:d1:89:fb:62:90:37:c1:8c:9c:55:9c:8f:04:e5:
         86:aa:41:b8:26:4e:19:b3:70:7a:6a:31:08:d7:a6:dc:7e:fd:
         6c:69:b8:41:aa:ef:75:82:c0:41:82:6c:0a:68:d0:b6:d2:47:
         ed:c2:0c:6e:40:52:88:1b:9e:a7:30:3d:9b:e5:fc:9a:74:35:
         81:3a:d8:62:4f:4e:12:03:b2:ea:e8:83:ee:7a:39:ff:a7:22:
         fd:cb:60:5f:1d:cd:1c:a8:fc:8d:d1:d2:9b:1d:8b:bd:ae:f2:
         d6:4e:b1:83:f0:6f:98:e4:0c:de:61:11:43:bc:78:31:81:23:
         9a:0c:b6:83:d8:97:02:e5:a4:6d:3a:40:3b:13:e3:5f:a7:89:
         3d:43:f1:e6:bb:a4:a3:aa:97:55:fb:c2:b4:8d:f1:9a:c6:3e:
         79:f8:13:9b:50:9a:c1:d9:cd:4b:03:0c:ad:54:99:44:63:f5:
         18:98:8f:dd:b9:1d:ee:80:72:a9:c9:2e:69:32:69:a8:55:cf:
         47:bd:43:66:2e:69:4b:6c:8f:01:15:1f:1f:b2:87:66:2a:9a:
         95:3e:22:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:52:22 2026 by rpki-client