This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/QzMyegFOkVY4VnXHpYFz61drfjg.roa
File:                     QzMyegFOkVY4VnXHpYFz61drfjg.roa (raw, json)
Hash identifier:          mOpZR+GPGqu6sOaNvQ6niRjr3oITuVct+WfwTHyWSVw=
Subject key identifier:   43:33:32:7A:01:4E:91:56:38:56:75:C7:A5:81:73:EB:57:6B:7E:38
Certificate issuer:       /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial:       019B7AC7A4CEBCC1A729923FA62051588521
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/QzMyegFOkVY4VnXHpYFz61drfjg.roa
Signing time:             Thu 01 Jan 2026 18:17:42 +0000
ROA not before:           Thu 01 Jan 2026 18:17:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200845
IP address blocks:        45.85.180.0/22 maxlen: 22
                          185.227.216.0/24 maxlen: 24
                          185.227.217.0/24 maxlen: 24
                          185.227.218.0/24 maxlen: 24
                          185.240.165.0/24 maxlen: 24
                          185.240.166.0/24 maxlen: 24
                          185.240.167.0/24 maxlen: 24
                          194.30.161.0/24 maxlen: 24
                          194.30.165.0/24 maxlen: 24
                          194.30.183.0/24 maxlen: 24
                          194.31.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:a4:ce:bc:c1:a7:29:92:3f:a6:20:51:58:85:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
        Validity
            Not Before: Jan  1 18:17:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4333327a014e9156385675c7a58173eb576b7e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ae:e6:d3:62:27:5d:83:02:15:7a:c0:65:5c:
                    e5:8b:26:f5:b4:b0:99:bb:60:25:e1:d8:f5:47:85:
                    c1:2e:13:34:43:40:b2:84:a8:15:06:6b:78:69:35:
                    4f:cf:c7:83:77:c5:51:c6:86:87:a9:1b:ec:f5:33:
                    14:85:03:c2:59:29:63:cb:8e:d3:b9:df:4d:85:19:
                    f9:16:3d:74:97:e1:b1:14:25:c9:75:fc:49:16:cf:
                    e9:96:94:a4:47:62:e7:af:6d:dc:70:89:93:48:13:
                    d6:83:0c:c0:d4:79:d7:0a:15:89:85:82:f7:c4:6a:
                    60:fb:9b:88:1e:00:b9:3c:4e:7b:ec:dc:78:d9:a6:
                    a0:f9:ab:7e:4f:e2:06:3c:7c:ed:46:ef:f0:e9:51:
                    07:1e:3b:dd:b4:41:ec:40:3c:57:5d:80:b8:d1:22:
                    11:bb:56:43:dc:12:c2:5c:05:0e:51:21:3e:3a:b7:
                    8a:b0:71:ba:ae:1a:77:b6:0e:af:aa:f8:71:20:8b:
                    73:a1:f4:92:79:f2:46:7f:fc:67:1a:63:5f:a7:54:
                    2b:18:e9:ad:9a:7e:ea:19:d3:b3:19:0f:0e:d6:67:
                    4f:54:0b:1e:f3:29:4d:3e:df:16:7e:6a:03:6f:27:
                    bf:03:10:8a:b3:93:ce:8b:bd:71:6d:b9:13:0c:f0:
                    3d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:33:32:7A:01:4E:91:56:38:56:75:C7:A5:81:73:EB:57:6B:7E:38
            X509v3 Authority Key Identifier:
                keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/QzMyegFOkVY4VnXHpYFz61drfjg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.180.0/22
                  185.227.216.0-185.227.218.255
                  185.240.165.0-185.240.167.255
                  194.30.161.0/24
                  194.30.165.0/24
                  194.30.183.0/24
                  194.31.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:9a:aa:e1:41:9f:65:a7:f9:66:e0:5c:4b:71:a4:d8:1f:42:
         52:51:8d:e2:40:b9:da:86:c5:47:06:0c:9d:7a:78:8d:fb:c0:
         e1:18:54:9e:e0:b9:86:cd:f1:15:30:99:9b:51:df:00:9a:c3:
         5e:38:bb:9c:bb:6f:db:19:65:dc:93:1d:20:30:16:71:e0:fd:
         7e:4d:cd:33:6c:35:7b:8b:02:69:9b:bb:37:2a:82:0e:25:5b:
         f9:0b:41:f6:44:3a:ef:82:db:f8:19:49:b0:3c:0f:7c:5b:14:
         24:1f:c4:ee:29:56:4b:78:db:7a:54:95:bf:23:a1:08:a4:fd:
         66:cf:55:de:d6:bb:16:bf:be:f7:75:a0:5f:5d:20:cc:8a:f7:
         13:f3:8f:18:a2:8c:65:1e:75:36:ce:95:fb:b1:39:4f:4f:f1:
         d3:b0:48:b9:c4:01:34:ae:4f:48:33:2e:1d:0f:f8:1a:a9:ee:
         4d:ff:2a:ad:2f:08:78:70:eb:3f:8f:08:ea:25:36:54:f2:68:
         56:95:94:a7:22:48:2a:b2:c8:4e:06:56:92:2e:7e:35:d4:18:
         7b:f5:12:a2:8b:cf:de:38:98:90:d9:99:18:38:36:12:f4:f6:
         1f:d8:e1:10:17:da:e1:1d:7d:3f:e5:b4:a0:c9:5e:d0:da:d9:
         c9:67:b4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:03:24 2026 by rpki-client