This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/KueqTTj__IOvVHhqyZ7VqzkFHwQ.roa
File:                     KueqTTj__IOvVHhqyZ7VqzkFHwQ.roa (raw, json)
Hash identifier:          QvldGhE04OV5++dEJq/jSp6fTqREgs1t+eVzU3cgY4Y=
Subject key identifier:   2A:E7:AA:4D:38:FF:FC:83:AF:54:78:6A:C9:9E:D5:AB:39:05:1F:04
Certificate issuer:       /CN=e5503498ff185d0c607353f43f55e911f62a6802
Certificate serial:       019B7CEDD556275762DD83DB14D44A78B281
Authority key identifier: E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/KueqTTj__IOvVHhqyZ7VqzkFHwQ.roa
Signing time:             Fri 02 Jan 2026 04:18:40 +0000
ROA not before:           Fri 02 Jan 2026 04:18:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34309
IP address blocks:        176.109.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:d5:56:27:57:62:dd:83:db:14:d4:4a:78:b2:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5503498ff185d0c607353f43f55e911f62a6802
        Validity
            Not Before: Jan  2 04:18:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2ae7aa4d38fffc83af54786ac99ed5ab39051f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:15:84:72:36:56:71:aa:b8:1e:49:21:b4:df:
                    12:8e:d4:48:0c:eb:de:60:ae:24:6b:fe:03:48:40:
                    96:95:f9:c9:fa:9c:aa:5f:02:29:73:8a:91:59:cf:
                    0a:87:65:c1:70:c7:6e:5c:e0:a2:eb:59:24:96:03:
                    78:ec:de:3f:22:64:a1:64:21:33:02:a3:e7:d3:ee:
                    bd:dc:19:d2:f0:3f:71:13:0f:2f:a8:f6:04:f4:a4:
                    f9:8b:44:2f:24:31:e0:65:9a:02:3a:3b:bf:ae:e3:
                    6a:e9:6c:c0:4c:da:f7:13:a5:e4:05:4a:f5:51:72:
                    5e:5a:0b:29:a8:48:8c:37:1b:be:21:ea:72:3d:3d:
                    d3:f7:cf:5a:8d:85:92:74:13:72:79:79:de:75:2c:
                    60:d1:99:fc:67:94:39:13:45:5b:e2:98:fe:f4:7f:
                    2d:96:e2:d2:de:b6:b4:01:12:23:c7:89:c7:e2:c6:
                    ab:81:ea:41:ff:2f:dc:e6:ea:cc:10:4f:45:3b:03:
                    a6:1f:c5:06:60:01:44:45:09:c7:9a:bd:bc:14:bf:
                    57:81:fd:bc:2d:40:1e:fb:52:b5:09:88:76:be:03:
                    33:77:b3:9e:7d:5a:72:55:e5:45:ab:86:fc:cd:8d:
                    7b:b5:0d:94:0d:b8:5e:24:c3:fc:3d:4f:0d:7c:37:
                    5e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E7:AA:4D:38:FF:FC:83:AF:54:78:6A:C9:9E:D5:AB:39:05:1F:04
            X509v3 Authority Key Identifier:
                keyid:E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/KueqTTj__IOvVHhqyZ7VqzkFHwQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.109.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:f5:46:fa:dd:bf:de:6d:e6:51:18:18:30:f0:21:3b:4e:a1:
         81:bb:b4:0a:25:1b:04:a5:d1:88:d0:75:93:23:cf:79:60:1a:
         ef:7d:41:8d:d7:5b:dd:0a:71:7a:a8:b0:2e:5b:2f:85:7e:b1:
         88:96:f5:66:7a:91:1b:b8:4a:e8:c1:71:12:a2:e1:57:cb:28:
         27:90:74:cf:eb:eb:47:d6:78:55:89:d0:fb:e6:90:6e:81:1a:
         69:61:71:ce:89:06:c3:b6:0b:0b:3c:4d:e7:7f:ba:47:1d:af:
         ca:e7:58:6a:4c:56:50:49:c0:18:2f:c3:d4:14:e3:88:0b:3e:
         af:f9:52:d7:fe:8e:65:bf:9e:79:e5:34:33:a0:3e:aa:ae:a0:
         4e:e1:78:d1:3d:e0:f1:b0:11:94:b1:bd:ae:a2:7c:a3:b8:3a:
         8f:a0:59:e5:77:11:aa:1b:52:6e:0a:bd:d9:d4:73:50:02:50:
         22:73:06:5d:17:3f:aa:1d:62:74:48:60:9d:bd:d3:58:2f:7f:
         9d:f7:ec:13:f6:cc:53:60:54:06:b7:fd:80:7e:15:df:e4:f4:
         e5:76:c3:90:3a:7a:4f:f0:44:63:dd:71:67:ff:97:85:91:a1:
         10:c2:64:0a:84:e4:52:9f:ac:cd:d9:49:5e:d1:ff:07:d1:5c:
         5c:b5:3a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:32:52 2026 by rpki-client