This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/qj22xyeLu60pShMzvtnaPDnNQis.roa
File:                     qj22xyeLu60pShMzvtnaPDnNQis.roa (raw, json)
Hash identifier:          Fv9rfv3pioycRBue2RhOjkBOSKLXM7H4+uyv5DM79wI=
Subject key identifier:   AA:3D:B6:C7:27:8B:BB:AD:29:4A:13:33:BE:D9:DA:3C:39:CD:42:2B
Certificate issuer:       /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial:       019B7F15629E1E5CC0E85B537D64EE6A991F
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/qj22xyeLu60pShMzvtnaPDnNQis.roa
Signing time:             Fri 02 Jan 2026 14:21:06 +0000
ROA not before:           Fri 02 Jan 2026 14:21:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42473
IP address blocks:        185.228.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:62:9e:1e:5c:c0:e8:5b:53:7d:64:ee:6a:99:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
        Validity
            Not Before: Jan  2 14:21:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=aa3db6c7278bbbad294a1333bed9da3c39cd422b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:70:f1:c6:b0:23:cc:45:f9:88:df:21:63:77:
                    7a:a5:47:29:b5:37:1e:7e:e6:b0:c8:7a:43:ab:09:
                    9d:6e:e3:03:a0:c4:f8:79:f4:4f:59:b2:6a:68:c2:
                    ab:4d:25:52:b1:8a:32:4e:cf:8b:17:94:6a:51:50:
                    50:4b:35:78:e9:67:85:8a:04:b6:7d:82:0a:b7:ee:
                    e0:f3:3c:d2:5a:8f:f6:99:5d:20:65:d6:5e:b4:66:
                    6f:e1:34:9a:55:c6:a1:b1:3d:c0:6e:e8:0f:c9:82:
                    91:27:09:b8:c7:81:d1:fd:01:61:1a:b5:bd:f6:84:
                    cc:f4:d4:8d:24:93:cc:9c:b7:0a:de:f0:f4:52:5d:
                    7c:8b:ce:c5:5b:03:c5:97:88:0a:9c:20:0e:83:de:
                    3f:d8:a2:47:82:ac:ea:2c:b2:58:84:56:1a:22:bb:
                    91:b4:d9:4d:f0:ff:2d:d3:f3:34:df:2a:7f:d7:ae:
                    aa:97:b4:70:13:7c:ef:32:86:80:0c:a7:8f:96:d9:
                    5b:1f:d1:9f:95:79:9b:5f:93:1d:3c:67:89:72:66:
                    72:13:a1:b2:5b:8a:c4:ab:63:8f:1a:00:96:22:4c:
                    a7:2e:1f:65:4e:a4:01:4e:1c:3f:e0:a8:2a:19:cc:
                    79:0e:4e:84:7b:07:de:dc:6c:2f:2b:61:6a:30:8f:
                    61:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3D:B6:C7:27:8B:BB:AD:29:4A:13:33:BE:D9:DA:3C:39:CD:42:2B
            X509v3 Authority Key Identifier:
                keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/qj22xyeLu60pShMzvtnaPDnNQis.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.228.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:f4:1a:eb:01:92:51:6f:28:5e:4a:0e:25:9b:f4:08:bf:26:
         35:31:37:36:4f:d1:3a:a1:47:46:e9:25:21:37:f8:ff:1a:79:
         51:6b:b1:c5:a4:8c:27:2a:d3:61:c4:e9:cf:57:8f:73:ca:6c:
         f0:49:8d:79:c9:99:b4:36:51:dd:7d:8d:bb:73:f1:cd:d9:c7:
         58:99:7f:66:3b:aa:ec:f1:3a:c6:07:77:7c:43:19:98:71:56:
         6b:50:1d:62:0b:32:e7:25:ed:b8:53:51:30:f5:8e:c6:2e:e9:
         b5:39:7c:98:56:b7:43:36:63:48:8f:5b:ea:ab:71:2e:63:db:
         bc:4a:f5:af:4a:f2:f4:53:c6:65:56:c2:13:07:78:3a:6b:57:
         d1:0d:4e:d3:94:db:2b:fe:67:f0:ad:90:7f:60:6b:9f:d6:ad:
         3a:72:bb:99:50:4c:97:4e:82:43:03:bf:e9:56:d2:b6:18:b8:
         9b:60:9b:e7:97:68:43:36:c8:7c:39:8f:c8:d2:42:cb:f1:fe:
         f9:56:97:e1:d4:98:56:42:57:c1:d1:72:b8:b6:f8:09:38:89:
         4d:0a:c7:32:3d:c2:fe:49:42:26:0c:58:00:c9:41:a2:f2:4a:
         e7:41:1a:c9:a6:a8:35:9d:cb:79:7d:d5:df:b2:1c:0a:a1:7c:
         d3:77:06:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:41:46 2026 by rpki-client