This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/QFOVkU-ZnYjaW63zGZHK0AXAgXY.roa
File:                     QFOVkU-ZnYjaW63zGZHK0AXAgXY.roa (raw, json)
Hash identifier:          MdpJY1oGw6huOeudEkHZCQrbT3tzxxeLlPDJtwm6YKc=
Subject key identifier:   40:53:95:91:4F:99:9D:88:DA:5B:AD:F3:19:91:CA:D0:05:C0:81:76
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       019B77C799C36FE69537BC40FB2638B27E05
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/QFOVkU-ZnYjaW63zGZHK0AXAgXY.roa
Signing time:             Thu 01 Jan 2026 04:18:48 +0000
ROA not before:           Thu 01 Jan 2026 04:18:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214919
IP address blocks:        81.15.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:99:c3:6f:e6:95:37:bc:40:fb:26:38:b2:7e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:18:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=405395914f999d88da5badf31991cad005c08176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3e:22:27:a7:3d:87:ce:ba:8d:4f:f1:e6:7c:
                    ad:c4:5c:ad:df:e4:9d:57:3d:c1:f9:f3:d6:2b:b0:
                    e2:e9:5d:73:91:ff:27:b7:e3:4e:f8:ae:d9:c0:74:
                    58:8f:50:03:a3:c0:79:d8:ac:76:f1:6e:74:af:a2:
                    5c:d5:0f:e2:89:4f:ba:27:5f:a5:89:e9:51:72:1e:
                    d3:05:f1:fb:24:07:a5:0b:62:16:e0:24:53:c3:83:
                    f8:b7:3f:a3:cc:01:77:59:fe:59:82:46:23:dc:11:
                    5c:0a:61:5d:b4:61:2e:38:a1:d2:45:aa:82:19:4e:
                    67:85:fd:e1:2e:0d:56:f2:95:ed:de:7e:b7:9f:a2:
                    30:dd:70:f1:8a:4f:6b:23:73:c4:28:62:75:53:02:
                    68:98:70:02:0f:5b:30:eb:b4:b4:04:f0:40:6e:63:
                    ef:16:f1:b4:5e:bf:5b:41:0d:6c:eb:c6:e6:51:c8:
                    c9:43:f5:dc:23:1b:a8:67:c6:0d:b0:96:5f:15:6b:
                    02:e6:b7:df:08:4e:21:5e:29:81:84:38:38:74:e4:
                    6a:59:5e:cf:4a:4c:b4:37:ac:91:38:33:26:3b:45:
                    01:04:bf:ec:7e:0f:63:6c:58:05:c9:a5:67:64:b6:
                    c1:bc:10:85:02:2b:fb:33:22:0b:08:6e:0d:ef:c6:
                    6a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:53:95:91:4F:99:9D:88:DA:5B:AD:F3:19:91:CA:D0:05:C0:81:76
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/QFOVkU-ZnYjaW63zGZHK0AXAgXY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.15.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:74:fc:93:28:d2:48:1f:5a:0d:65:08:0f:1f:fd:0b:17:0e:
         80:09:23:0a:59:e2:8e:17:37:11:cb:83:ea:a6:82:7a:ff:7b:
         0c:3c:96:8b:33:b6:c3:fd:d9:92:9a:52:14:86:fa:56:07:b0:
         06:01:18:f9:20:00:47:bc:c3:a2:1a:a5:99:8e:c1:59:e1:64:
         cf:f5:10:48:e8:7b:72:aa:d6:61:66:f7:3d:18:1f:93:ff:97:
         c1:ff:78:b0:99:de:ad:7f:76:cf:ed:8a:94:bc:56:77:3e:4e:
         7a:05:e4:3f:f9:26:8c:fa:50:aa:ef:a0:2e:23:22:73:ed:c6:
         d0:ea:4c:b1:fd:a4:57:1b:42:b3:2e:6a:96:31:7b:a1:43:cc:
         37:55:8e:f7:15:8f:48:20:a8:3d:95:90:18:f9:54:0a:4f:39:
         b8:b3:9b:e2:d7:ad:f0:b4:ef:99:de:73:e0:82:50:f3:4a:ce:
         db:09:40:8f:68:d9:65:bb:07:59:3a:10:e4:41:50:e1:35:e5:
         11:df:4f:64:c0:ff:5c:b5:7b:58:d1:52:0c:6c:72:be:96:13:
         d1:17:13:24:18:9e:5d:f4:eb:c6:bc:34:f7:35:3c:1a:fe:70:
         09:c8:95:1d:ab:60:c8:d6:8b:93:02:19:ec:e9:17:5b:87:1c:
         40:7c:90:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:39:50 2026 by rpki-client