This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/QVoMIPeCUFrk5bxFsPoRfsrvGSw.roa
File:                     QVoMIPeCUFrk5bxFsPoRfsrvGSw.roa (raw, json)
Hash identifier:          eQ5qNmayw3NJjRPGsMleqFUXeNcmfxmEvvPybtQSVss=
Subject key identifier:   41:5A:0C:20:F7:82:50:5A:E4:E5:BC:45:B0:FA:11:7E:CA:EF:19:2C
Certificate issuer:       /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Certificate serial:       019B79EC19BD15DF9691BFC6A13CB05226F8
Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/QVoMIPeCUFrk5bxFsPoRfsrvGSw.roa
Signing time:             Thu 01 Jan 2026 14:17:54 +0000
ROA not before:           Thu 01 Jan 2026 14:17:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35197
IP address blocks:        185.61.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:19:bd:15:df:96:91:bf:c6:a1:3c:b0:52:26:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
        Validity
            Not Before: Jan  1 14:17:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=415a0c20f782505ae4e5bc45b0fa117ecaef192c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:97:fe:f6:a2:6c:c0:ea:b6:c3:32:2e:40:df:
                    fd:9f:50:96:85:4f:bc:ff:e7:d9:7d:8d:33:1d:0b:
                    da:c1:14:d9:9c:11:3d:c6:b3:4a:9f:6e:37:25:25:
                    6e:11:70:b1:d8:07:e4:0e:cf:7c:e0:00:35:c9:25:
                    dd:a8:56:3e:34:a1:8b:37:e9:b1:99:4b:38:81:7d:
                    06:67:13:a1:1f:0c:0f:c1:2c:3d:74:93:6e:37:57:
                    8a:a7:1a:4e:6b:bd:b4:92:6b:02:0a:9f:39:7f:07:
                    1c:f0:47:5d:e2:47:34:98:92:27:22:55:72:74:e9:
                    3f:e1:5c:42:7b:74:78:55:ba:23:48:71:bb:fe:75:
                    bc:9d:e5:3d:eb:35:41:5c:eb:9a:3c:9f:53:be:36:
                    7c:54:b4:f2:cc:a6:86:78:9a:0f:73:b2:c3:fc:92:
                    1b:3d:c8:3b:0a:b7:69:87:da:51:7b:da:33:36:5f:
                    97:19:17:8d:61:de:c8:c7:5c:ac:51:15:4c:b5:30:
                    8d:7a:e3:07:80:01:c9:9d:19:8b:c4:d7:dd:46:fa:
                    36:9c:5e:92:28:5b:e4:d7:d0:df:f2:2a:d8:dd:95:
                    b5:19:1f:31:78:5a:df:b2:88:14:14:5b:5a:48:05:
                    18:0d:3e:c8:cf:f7:38:14:2d:7d:f1:18:67:91:7e:
                    0b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5A:0C:20:F7:82:50:5A:E4:E5:BC:45:B0:FA:11:7E:CA:EF:19:2C
            X509v3 Authority Key Identifier:
                keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/QVoMIPeCUFrk5bxFsPoRfsrvGSw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.61.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:83:2e:4a:bc:cc:9a:60:da:3f:f4:fe:37:b2:94:95:99:2f:
         73:a9:25:75:03:e5:2e:d2:0a:94:1f:ee:ec:ef:d3:b9:9f:0c:
         9a:32:ae:3d:8e:03:3e:84:4a:fd:eb:b6:43:d9:8c:a2:25:2f:
         b2:44:72:a4:72:58:cc:ab:ef:5a:f0:eb:47:dc:43:bd:ba:36:
         35:cc:74:03:f8:79:38:67:1c:9c:97:92:55:ce:03:dc:27:ce:
         32:6b:81:40:a0:7a:f2:a8:0a:5f:b2:c0:fa:3a:a7:2b:48:6d:
         bf:ad:a9:7a:ff:bb:07:34:10:b7:fd:46:94:06:28:a9:1f:41:
         9a:11:b4:4e:00:89:ef:ef:53:56:33:fc:b0:49:9d:80:6f:f7:
         23:18:dc:b7:67:ec:0d:65:14:85:1d:dd:10:fe:d0:9c:e0:87:
         f3:a5:ff:b8:90:e9:3a:0b:97:05:7d:0f:2f:f2:72:6f:bd:f5:
         d8:d0:87:cb:8b:83:68:8f:1d:8f:00:78:78:91:d2:14:a1:d7:
         d9:c5:0d:40:48:11:12:06:d1:ca:ac:66:eb:52:a5:5e:c8:6e:
         29:7c:f9:f1:49:38:e3:1f:f8:d4:b8:1f:06:63:04:de:74:30:
         98:bd:f4:36:e7:88:5f:09:a2:59:df:67:e6:5c:69:6b:ee:46:
         92:ec:fb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:49:53 2026 by rpki-client