This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/qjmdpX5jD9vB-s6Mhrq5teyUBO8.roa
File:                     qjmdpX5jD9vB-s6Mhrq5teyUBO8.roa (raw, json)
Hash identifier:          +vj4vYEOu88zIELmJIae2JN1gbCkuZGrztMiGi720QE=
Subject key identifier:   AA:39:9D:A5:7E:63:0F:DB:C1:FA:CE:8C:86:BA:B9:B5:EC:94:04:EF
Certificate issuer:       /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial:       019B7BA39E4CFF6ABD7E3D3D0CD60E1D6FDD
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/qjmdpX5jD9vB-s6Mhrq5teyUBO8.roa
Signing time:             Thu 01 Jan 2026 22:17:58 +0000
ROA not before:           Thu 01 Jan 2026 22:17:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204834
IP address blocks:        188.75.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:9e:4c:ff:6a:bd:7e:3d:3d:0c:d6:0e:1d:6f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
        Validity
            Not Before: Jan  1 22:17:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=aa399da57e630fdbc1face8c86bab9b5ec9404ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:a8:fb:32:6c:e1:da:71:d1:26:7d:45:e5:
                    89:0f:72:59:19:85:a3:3f:01:22:39:fe:16:07:f3:
                    88:74:f0:dc:a7:66:43:b1:d0:b8:42:e4:92:c7:e9:
                    d7:d1:14:26:13:0f:b1:68:61:ce:94:ac:c6:f8:f5:
                    61:dd:f0:8b:2c:9b:f0:69:f7:91:29:8b:49:e1:16:
                    20:85:33:ad:d2:cf:11:e0:70:9a:94:f3:6b:a3:da:
                    e9:e1:87:b9:40:98:c7:30:c4:df:9a:3d:bf:48:5e:
                    80:6f:43:c1:8b:bd:e8:85:b3:3e:43:7c:1d:1d:6a:
                    d0:1c:5d:12:78:b4:85:3e:c1:c7:ed:07:3a:d3:b2:
                    f2:ec:4c:c6:5b:eb:45:73:e6:2d:dc:00:83:26:f2:
                    dd:06:35:38:80:97:0e:3b:5b:92:1a:f5:39:19:63:
                    42:85:06:b0:42:2c:dd:1f:36:d4:bc:ad:05:2a:e2:
                    b9:11:07:6c:7f:12:fb:a0:25:e4:2d:b7:13:f3:07:
                    84:58:c8:0b:fc:35:a0:4e:a8:3e:70:fc:10:1d:5d:
                    de:37:f8:ae:26:5c:13:3b:e7:7a:10:be:db:e9:7a:
                    2c:85:93:e6:5d:ea:64:5e:9f:fb:96:9b:9b:89:99:
                    46:62:8b:90:5f:93:b8:35:b6:63:b9:38:f0:40:0f:
                    24:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:39:9D:A5:7E:63:0F:DB:C1:FA:CE:8C:86:BA:B9:B5:EC:94:04:EF
            X509v3 Authority Key Identifier:
                keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/qjmdpX5jD9vB-s6Mhrq5teyUBO8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.75.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:1e:06:91:70:30:7b:80:f5:ea:8d:51:77:67:dd:ab:19:2f:
         b3:81:b5:10:9a:1a:57:20:98:18:7c:a5:7f:33:20:62:93:c9:
         94:ae:3f:7f:6e:06:5e:b3:50:6c:5d:13:63:9b:bf:c0:cc:dd:
         89:ba:1a:67:be:31:7e:f9:5b:e0:88:94:41:b7:46:24:86:ae:
         dc:a4:01:bd:f5:3b:5d:97:bd:ef:da:6b:2e:83:98:a0:e4:4c:
         47:ea:ce:1b:03:70:80:c1:d2:76:c7:de:28:e3:61:0f:c6:6a:
         6e:1f:94:0a:16:cf:fa:14:e5:39:5b:1d:27:a7:3d:c9:1c:58:
         e6:2e:39:2d:f7:ed:ff:5e:9d:a4:75:26:ec:fd:56:74:f5:19:
         80:8e:9e:e0:08:d7:cd:35:8d:90:38:69:c3:b6:eb:86:2a:c0:
         6d:a9:86:e6:cb:f7:d2:07:14:35:13:27:05:fc:05:7a:aa:42:
         57:24:d4:a4:f5:db:2c:a2:53:4f:1d:dd:50:b9:41:a5:78:99:
         86:0c:24:6f:72:00:d9:f1:b2:cf:b6:4d:30:16:fb:6d:74:87:
         64:5b:06:94:4e:59:e8:7b:70:be:06:00:f9:0a:35:72:aa:60:
         5b:de:69:a4:3c:b0:28:57:a4:75:28:f1:ac:3a:95:d8:d8:6a:
         a0:d3:92:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:50:20 2026 by rpki-client