This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Qg07PT3J3rgYRzFjNgs1-TOzjB8.roa
File:                     Qg07PT3J3rgYRzFjNgs1-TOzjB8.roa (raw, json)
Hash identifier:          GCY1RMvi5PaGu7yTVasageEwbVV95j95abN+dLC7tuc=
Subject key identifier:   42:0D:3B:3D:3D:C9:DE:B8:18:47:31:63:36:0B:35:F9:33:B3:8C:1F
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       019B7F84BA1E79EF0EE2831ABF9490D166D0
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Qg07PT3J3rgYRzFjNgs1-TOzjB8.roa
Signing time:             Fri 02 Jan 2026 16:22:43 +0000
ROA not before:           Fri 02 Jan 2026 16:22:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49682
IP address blocks:        93.170.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:ba:1e:79:ef:0e:e2:83:1a:bf:94:90:d1:66:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 16:22:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=420d3b3d3dc9deb818473163360b35f933b38c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:18:8c:d9:38:2b:88:06:ac:0a:89:43:94:
                    bf:4f:09:24:ea:be:1b:a7:52:8e:9e:81:a3:eb:50:
                    07:6b:6c:0d:0e:c1:6c:de:6d:ad:0f:33:cf:42:01:
                    39:46:72:11:69:ad:10:e9:92:da:b6:f3:72:aa:55:
                    0b:19:95:28:6c:c9:aa:75:33:88:12:ba:2d:a3:ab:
                    82:83:1b:1f:2e:6d:fd:5b:82:57:ff:f0:34:07:97:
                    bc:71:50:f9:de:df:fd:70:59:68:e1:33:bb:f2:44:
                    c9:57:d0:57:51:56:5f:05:85:b5:a9:12:0e:64:8e:
                    ae:a5:16:bd:56:0e:f7:23:9d:47:84:54:78:8a:4e:
                    ee:4e:0a:5f:b5:ce:ad:68:04:a2:5f:95:d0:05:67:
                    a9:bc:62:91:14:9b:cd:a4:f9:37:ac:09:81:7b:11:
                    80:2d:c0:c8:ec:83:97:0c:53:11:5f:0d:f4:82:34:
                    31:9d:9e:48:e7:33:d7:48:36:d8:b5:e5:63:78:ee:
                    4d:dd:c6:28:49:9a:27:be:f6:e0:e3:fd:cc:73:32:
                    af:0e:81:b2:b6:d3:3e:ee:f1:d1:0d:bf:ee:ff:9c:
                    4c:93:2c:98:e5:ce:4b:bd:95:ef:a0:e2:94:42:57:
                    31:1f:d5:85:5e:56:be:a2:5b:79:f7:57:17:78:15:
                    22:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0D:3B:3D:3D:C9:DE:B8:18:47:31:63:36:0B:35:F9:33:B3:8C:1F
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Qg07PT3J3rgYRzFjNgs1-TOzjB8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.170.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:51:68:ef:48:e1:27:05:01:8e:7c:e4:d5:3b:01:52:95:0a:
         07:60:b4:e8:c6:d3:2d:72:04:25:45:b4:15:70:94:4e:fe:68:
         ef:6c:83:11:c4:81:af:50:f2:bf:52:c6:8f:b3:53:fa:07:2a:
         f2:63:4b:a1:82:ee:35:5a:28:eb:3a:59:3f:05:cb:e1:41:5b:
         99:69:46:78:68:bd:8e:b4:f2:5c:dc:0e:c2:84:01:06:df:4c:
         ab:3e:f1:9d:c6:00:a5:d5:32:43:84:49:c0:e0:9b:22:1c:41:
         64:7a:9a:7d:3e:8f:05:0d:83:56:98:36:fd:00:05:dd:86:05:
         9f:83:84:44:de:bc:de:2b:d8:53:da:ef:12:67:06:ef:f7:85:
         fc:16:d0:f7:83:b4:78:01:83:27:1a:a8:6e:c1:31:15:8d:36:
         21:e8:65:f5:36:cf:59:5b:83:4e:b8:1b:33:cd:c6:04:8d:60:
         48:30:81:46:8c:61:48:6a:c4:d5:54:d4:87:b2:b2:08:2f:22:
         8d:7c:1e:40:15:e3:fe:0c:cf:95:c3:8c:8d:9d:9d:b2:29:e7:
         e5:3f:45:d5:11:49:e3:32:b7:9c:d8:45:a7:61:d4:02:6b:fa:
         fb:0d:7d:22:16:78:51:09:4b:3c:81:3c:38:6e:b7:6d:e4:7a:
         c5:76:bb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:27:38 2026 by rpki-client