This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/1Qs37r34k81KYJIyGVHAnjZqyoo.roa
File:                     1Qs37r34k81KYJIyGVHAnjZqyoo.roa (raw, json)
Hash identifier:          E4HDJvMUxumoC1LuWAWx/oNNp8JpntDfq7oaedRHLUs=
Subject key identifier:   D5:0B:37:EE:BD:F8:93:CD:4A:60:92:32:19:51:C0:9E:36:6A:CA:8A
Certificate issuer:       /CN=e6ff8169347f53072b2d11ad18d9a253cafefae7
Certificate serial:       019B7A5AB8E510B72CBE67D91287E7F91F60
Authority key identifier: E6:FF:81:69:34:7F:53:07:2B:2D:11:AD:18:D9:A2:53:CA:FE:FA:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/1Qs37r34k81KYJIyGVHAnjZqyoo.roa
Signing time:             Thu 01 Jan 2026 16:18:44 +0000
ROA not before:           Thu 01 Jan 2026 16:18:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207236
IP address blocks:        185.162.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:b8:e5:10:b7:2c:be:67:d9:12:87:e7:f9:1f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ff8169347f53072b2d11ad18d9a253cafefae7
        Validity
            Not Before: Jan  1 16:18:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d50b37eebdf893cd4a6092321951c09e366aca8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cb:ff:8b:cf:8c:42:5e:b5:2b:c1:80:f6:6e:
                    ee:a3:95:e7:cd:08:cc:43:83:31:d4:a0:bb:bc:dc:
                    fb:49:2a:bd:61:d5:c4:0e:fa:45:aa:0a:9f:41:26:
                    2b:bf:63:54:e1:04:09:5f:b2:a6:37:94:62:96:4c:
                    28:61:99:28:52:6d:70:77:01:ea:99:9b:6b:91:4a:
                    3c:8b:47:fd:96:f2:0a:9b:f5:e1:01:cf:3f:1d:6d:
                    16:d7:7d:ec:0c:2a:19:96:81:5a:5b:2f:c5:4f:34:
                    4c:6d:53:64:1f:7e:f4:4b:ed:25:72:19:3a:51:e8:
                    ea:4a:7d:28:69:6b:50:d6:b0:8f:65:c4:a7:77:e1:
                    12:75:ec:da:fd:d2:e1:e3:c0:91:fe:81:2b:59:42:
                    cd:98:96:44:1b:33:dc:ed:a4:59:84:5c:e3:f8:43:
                    a8:42:36:19:fc:68:c9:3e:4c:95:5f:f6:99:3d:4f:
                    e8:40:b3:b7:ce:4f:64:21:fa:1d:f5:53:d5:32:13:
                    a6:86:65:1c:fe:85:41:2f:a8:28:e8:e2:14:e1:91:
                    dc:18:e7:78:2b:44:6e:ac:88:b8:b7:1c:6c:27:0a:
                    d4:cc:69:2b:02:80:31:17:1b:af:35:14:94:aa:49:
                    7e:d0:9f:1d:ba:7a:94:2c:d6:9e:cc:b9:2e:0c:55:
                    9f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0B:37:EE:BD:F8:93:CD:4A:60:92:32:19:51:C0:9E:36:6A:CA:8A
            X509v3 Authority Key Identifier:
                keyid:E6:FF:81:69:34:7F:53:07:2B:2D:11:AD:18:D9:A2:53:CA:FE:FA:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/1Qs37r34k81KYJIyGVHAnjZqyoo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.162.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:f9:39:6c:58:03:9a:4c:bb:10:e0:f5:24:48:75:76:a0:42:
         b2:99:b4:23:9b:87:25:0d:00:bf:9c:0f:a5:8b:0e:fc:18:bd:
         df:52:58:32:2b:37:9a:07:6d:50:88:e0:18:59:d2:52:13:50:
         a4:96:1e:1b:c3:a9:9c:bb:1e:51:4f:78:48:6b:f0:2d:cf:dc:
         80:fd:74:52:41:6c:00:2d:de:17:6c:18:bc:57:e3:9f:99:66:
         7c:8d:0c:e3:84:ca:7a:8e:4f:2b:71:75:91:4d:be:ca:7c:27:
         f1:f9:e1:7c:78:18:39:69:77:54:80:29:98:44:b2:91:03:3b:
         90:fe:00:47:83:47:6d:72:48:44:b9:f2:45:08:51:bd:04:23:
         53:fc:f0:1e:61:73:5f:af:35:66:bc:00:e9:a6:f6:20:12:09:
         d4:47:62:e7:1b:63:a8:24:f8:87:7f:17:5f:f6:28:46:61:9d:
         32:20:f9:26:88:11:42:1b:d3:95:dc:50:da:63:ff:b5:3b:27:
         ff:59:4b:c7:18:51:04:53:9a:87:e6:89:6d:e1:cf:f0:33:79:
         46:d5:0b:d3:b4:99:76:ee:9d:8f:1d:34:4c:af:47:6c:72:22:
         a3:8e:96:46:f1:d1:d5:2f:95:d1:8d:84:29:de:be:7a:7a:e0:
         b0:3e:95:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6WrjlELcsvmfZEofn+R9gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZmY4MTY5MzQ3ZjUzMDcyYjJkMTFhZDE4ZDlhMjUzY2Fm
ZWZhZTcwHhcNMjYwMTAxMTYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTBiMzdlZWJkZjg5M2NkNGE2MDkyMzIxOTUxYzA5ZTM2NmFjYThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusv/i8+MQl61K8GA9m7uo5XnzQjM
Q4Mx1KC7vNz7SSq9YdXEDvpFqgqfQSYrv2NU4QQJX7KmN5RilkwoYZkoUm1wdwHq
mZtrkUo8i0f9lvIKm/XhAc8/HW0W133sDCoZloFaWy/FTzRMbVNkH370S+0lchk6
UejqSn0oaWtQ1rCPZcSnd+ESdeza/dLh48CR/oErWULNmJZEGzPc7aRZhFzj+EOo
QjYZ/GjJPkyVX/aZPU/oQLO3zk9kIfod9VPVMhOmhmUc/oVBL6go6OIU4ZHcGOd4
K0RurIi4txxsJwrUzGkrAoAxFxuvNRSUqkl+0J8dunqULNaezLkuDFWf0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNULN+69+JPNSmCSMhlRwJ42asqKMB8GA1UdIwQY
MBaAFOb/gWk0f1MHKy0RrRjZolPK/vrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXYtQmFUUl9Vd2NyTFJHdEdObWlVOHItLXVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC81MGY3NDktNTU4MS00NjAxLWFlNDEt
OWZiMDNkMDNlZmY5LzEvMVFzMzdyMzRrODFLWUpJeUdWSEFualpxeW9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC81MGY3NDktNTU4MS00NjAxLWFlNDEtOWZiMDNkMDNlZmY5
LzEvNXYtQmFUUl9Vd2NyTFJHdEdObWlVOHItLXVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaIAMA0G
CSqGSIb3DQEBCwUAA4IBAQBF+TlsWAOaTLsQ4PUkSHV2oEKymbQjm4clDQC/nA+l
iw78GL3fUlgyKzeaB21QiOAYWdJSE1Cklh4bw6mcux5RT3hIa/Atz9yA/XRSQWwA
Ld4XbBi8V+OfmWZ8jQzjhMp6jk8rcXWRTb7KfCfx+eF8eBg5aXdUgCmYRLKRAzuQ
/gBHg0dtckhEufJFCFG9BCNT/PAeYXNfrzVmvADppvYgEgnUR2LnG2OoJPiHfxdf
9ihGYZ0yIPkmiBFCG9OV3FDaY/+1Oyf/WUvHGFEEU5qH5olt4c/wM3lG1QvTtJl2
7p2PHTRMr0dsciKjjpZG8dHVL5XRjYQp3r56euCwPpUR
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:49:37 2026 by rpki-client