This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/QCOkKhVPwXWq7ZYcjP5XA5__-w0.roa
File:                     QCOkKhVPwXWq7ZYcjP5XA5__-w0.roa (raw, json)
Hash identifier:          yCp7nQtUoqbxV6edT97tismvCFyHyPZSJ19bn2y3n4k=
Subject key identifier:   40:23:A4:2A:15:4F:C1:75:AA:ED:96:1C:8C:FE:57:03:9F:FF:FB:0D
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       019B783454F8E9603A569E6C6B16B3490520
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/QCOkKhVPwXWq7ZYcjP5XA5__-w0.roa
Signing time:             Thu 01 Jan 2026 06:17:34 +0000
ROA not before:           Thu 01 Jan 2026 06:17:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     139659
IP address blocks:        45.11.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:54:f8:e9:60:3a:56:9e:6c:6b:16:b3:49:05:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Jan  1 06:17:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4023a42a154fc175aaed961c8cfe57039ffffb0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1e:2d:5b:57:c0:3f:f8:a7:1f:b0:a2:4e:6e:
                    b5:27:c3:7d:67:ed:53:03:84:d2:9e:a5:ea:17:6f:
                    cb:6e:fb:38:09:3e:8c:a8:64:fd:21:9f:9c:79:f8:
                    3c:a8:e9:ee:82:9f:f0:05:cb:85:83:8e:e8:eb:d8:
                    95:a2:02:73:b6:2f:ce:b8:d4:49:5e:f2:2b:d9:9c:
                    f8:ef:54:55:bd:ee:e3:ce:c9:74:30:42:b5:ad:95:
                    e2:4d:fe:3d:8a:3b:2c:3d:88:22:07:8b:0a:4f:ff:
                    c1:4b:41:2d:da:3d:4e:be:d4:32:6f:04:d4:52:66:
                    4c:8f:ff:b8:84:7d:98:bf:b6:0e:3b:c6:e3:f0:d5:
                    20:f6:75:1c:92:ca:25:12:cf:b7:a2:7c:c8:03:dd:
                    83:e4:bf:62:27:9c:cb:42:b9:47:5d:b9:b9:d1:4d:
                    09:e8:54:d1:e9:57:d6:61:c7:ad:06:be:a5:44:f8:
                    2d:ac:da:ce:61:7c:b4:7f:aa:ff:1f:af:9c:12:07:
                    d0:2c:d8:51:05:dd:c1:34:04:48:33:e2:d3:27:0d:
                    0e:cc:4c:b4:34:cc:f6:57:86:89:2b:4a:fa:ad:58:
                    b5:ff:a3:f8:b1:3c:af:f9:17:8f:08:67:9b:83:48:
                    f8:b9:6c:51:2b:38:fb:53:1a:8b:5b:54:ea:a0:42:
                    79:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:23:A4:2A:15:4F:C1:75:AA:ED:96:1C:8C:FE:57:03:9F:FF:FB:0D
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/QCOkKhVPwXWq7ZYcjP5XA5__-w0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:ef:42:e6:4c:c5:fb:3b:18:54:9e:ea:04:48:14:e8:2d:42:
         f0:4a:38:55:c4:7d:31:5e:7c:27:c2:06:7b:d0:a7:23:8d:9d:
         f9:78:be:41:7f:d9:56:d9:aa:fc:04:f5:43:f1:c3:35:e2:e5:
         ce:b1:dc:9e:5c:22:78:13:17:cc:e5:b5:f7:15:32:e2:8a:35:
         dc:08:4a:29:72:fc:5c:bb:cd:a7:33:57:ba:d7:0a:23:64:e3:
         49:03:b6:a4:8c:95:f6:12:6d:d6:30:e5:78:98:77:a0:a5:33:
         2c:37:82:f8:75:01:08:e5:02:52:eb:1c:ac:d3:ab:58:aa:9d:
         92:40:9f:c3:ac:4f:12:a3:b2:08:e3:47:35:b6:9a:e0:86:de:
         24:fb:06:66:54:1a:d5:b3:ce:39:06:e6:8f:7d:f9:e8:ac:82:
         27:97:85:40:8d:de:2d:2b:a9:74:db:7e:a3:14:df:f2:20:48:
         94:5a:43:49:ae:32:3e:55:61:72:46:94:f3:a5:e5:6c:9b:05:
         cf:3c:e9:6b:67:38:12:47:6f:fa:c8:4f:b0:6a:7b:1d:92:ab:
         19:6e:c1:d6:83:b7:56:cd:7d:d4:c1:f1:85:d1:36:86:bf:62:
         f6:73:ad:3b:75:74:10:0d:87:82:56:a5:b7:2e:3f:81:8a:ae:
         52:3f:e4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:39:49 2026 by rpki-client