This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/QowR94jtBUnFvn7mSw9HdelmuL4.roa
File:                     QowR94jtBUnFvn7mSw9HdelmuL4.roa (raw, json)
Hash identifier:          E0Dh7cd14TaT6XnP2VIr9PfSAEJbNifsjZXKmz2LVxY=
Subject key identifier:   42:8C:11:F7:88:ED:05:49:C5:BE:7E:E6:4B:0F:47:75:E9:66:B8:BE
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       019B7758EC8C3EEB71B91B6CF05AC5BD09BA
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/QowR94jtBUnFvn7mSw9HdelmuL4.roa
Signing time:             Thu 01 Jan 2026 02:17:54 +0000
ROA not before:           Thu 01 Jan 2026 02:17:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16190
IP address blocks:        5.134.86.0/23 maxlen: 24
                          217.113.0.0/21 maxlen: 24
                          217.113.0.0/22 maxlen: 22
                          217.113.0.0/23 maxlen: 23
                          217.113.2.0/23 maxlen: 23
                          217.113.4.0/22 maxlen: 22
                          217.113.4.0/23 maxlen: 23
                          217.113.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:ec:8c:3e:eb:71:b9:1b:6c:f0:5a:c5:bd:09:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Jan  1 02:17:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=428c11f788ed0549c5be7ee64b0f4775e966b8be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:60:e6:09:b8:e8:a3:9f:1c:c4:f0:15:f4:bb:
                    db:63:33:4a:79:c4:c4:8d:27:26:77:7b:f1:20:a1:
                    ea:84:98:c7:56:ec:f0:d4:51:77:a4:17:14:07:99:
                    96:8e:9f:37:35:65:0b:9a:d6:a5:c5:da:d3:02:6c:
                    d9:58:ce:91:90:f2:cb:99:74:e5:8a:a3:71:13:ba:
                    c8:97:f4:9d:72:87:f4:b4:bf:ea:de:33:24:ef:cb:
                    ed:8e:a6:93:1b:9e:cf:90:2a:0d:19:fe:80:1c:41:
                    b5:63:b8:77:1d:4f:4b:ec:05:3d:a8:b2:6d:54:eb:
                    ea:9d:78:ad:bd:d8:39:72:80:e3:bb:15:86:fb:c9:
                    86:a9:97:ec:01:e5:73:5e:5c:1d:84:d0:f9:b2:4e:
                    24:07:f1:15:fa:bf:db:23:4e:82:66:b8:8d:a0:f4:
                    e5:65:e6:fe:51:a7:68:ea:93:75:fa:ea:13:b7:55:
                    1d:59:7f:ea:39:a1:04:5b:ef:21:46:a7:fb:c3:e5:
                    92:99:93:30:f3:52:69:69:a5:f7:ae:5a:9b:dd:30:
                    0f:09:84:27:60:11:80:b5:27:31:16:4a:48:32:97:
                    b5:7c:bd:10:75:77:3c:7d:1d:1b:78:88:f6:c5:98:
                    3c:c4:36:ed:d0:23:6b:e4:6d:2d:8f:18:a4:94:9c:
                    1f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8C:11:F7:88:ED:05:49:C5:BE:7E:E6:4B:0F:47:75:E9:66:B8:BE
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/QowR94jtBUnFvn7mSw9HdelmuL4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.134.86.0/23
                  217.113.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:eb:dc:6b:d7:11:e1:f9:64:a3:5b:e3:4c:a6:ee:69:0c:a3:
         fa:a2:8a:d6:dd:51:fc:3b:84:98:0f:fb:81:0b:38:4c:21:ab:
         64:30:12:b9:1e:92:46:e1:38:c8:77:02:c6:2e:cd:69:f5:40:
         ea:07:99:b3:88:63:72:3b:c4:f5:54:4d:15:63:ba:07:ba:59:
         9a:fa:2f:83:cb:ab:a0:3e:b2:17:8d:02:e6:65:a0:f4:43:d7:
         b6:95:6c:4b:02:eb:09:aa:80:2a:de:ff:65:26:fc:95:fe:64:
         6f:f7:64:00:37:18:e0:64:ec:1c:0d:b4:0d:2c:96:ee:dd:f9:
         89:7f:f3:f6:8c:24:6f:ff:96:5e:a3:db:44:3f:f7:02:b6:87:
         a4:84:11:cb:31:fc:0d:b7:a0:de:c7:c3:64:24:58:d5:dc:54:
         30:8d:ce:0b:a5:33:7d:0b:e3:cb:2b:c4:26:7b:10:2e:fa:1f:
         f6:d9:4d:7e:81:29:ae:de:1a:6e:70:6f:ff:54:9d:96:37:60:
         cd:51:26:9e:69:3e:1b:f3:54:05:ea:ac:05:24:b6:0a:3d:88:
         48:b2:7d:7a:73:4a:40:59:a2:3b:52:46:78:63:3f:49:98:50:
         a6:49:03:3e:1d:d5:9c:c7:8e:ed:7b:c8:4e:58:89:f2:29:a8:
         82:eb:11:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:33 2026 by rpki-client