This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/QBFKLgi11NKJ5zU_rVsGKBgaPqU.roa
File:                     QBFKLgi11NKJ5zU_rVsGKBgaPqU.roa (raw, json)
Hash identifier:          s3k95x1VzUbbf2g6b3nFv6k0pr5SrChNuBIOJz+n4Fk=
Subject key identifier:   40:11:4A:2E:08:B5:D4:D2:89:E7:35:3F:AD:5B:06:28:18:1A:3E:A5
Certificate issuer:       /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial:       019B7F14FF8454A0550FACD530DB85DC645D
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/QBFKLgi11NKJ5zU_rVsGKBgaPqU.roa
Signing time:             Fri 02 Jan 2026 14:20:41 +0000
ROA not before:           Fri 02 Jan 2026 14:20:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59961
IP address blocks:        87.107.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:ff:84:54:a0:55:0f:ac:d5:30:db:85:dc:64:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
        Validity
            Not Before: Jan  2 14:20:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=40114a2e08b5d4d289e7353fad5b0628181a3ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:46:f9:d4:00:09:b9:ee:ee:ad:e6:3f:02:38:
                    5f:e8:b3:05:73:eb:f3:32:4e:c5:e5:e6:34:2d:31:
                    d7:5c:74:96:1d:2a:80:d9:2c:ba:69:24:19:15:4b:
                    ae:06:0b:7d:cd:2e:00:ff:8c:54:c1:0c:fe:5f:48:
                    6a:1e:0e:2e:5d:0b:15:72:ed:ca:55:ef:e7:70:64:
                    2e:f6:f8:f6:25:f9:7c:95:9f:2e:97:c3:0c:50:54:
                    41:f0:e8:48:83:72:70:40:ef:85:17:00:e5:d6:05:
                    85:b7:7c:90:88:44:e9:5f:de:19:b6:87:27:55:16:
                    e5:e0:63:96:a6:07:80:2e:6e:6e:39:77:31:5e:16:
                    d5:f7:32:58:25:4f:35:ff:f9:cb:29:9c:1a:e7:b9:
                    d1:be:35:78:71:71:2c:ba:3d:a2:dc:f6:65:ba:14:
                    c4:4a:92:61:e8:ef:73:dd:f1:f3:4f:30:a4:68:d9:
                    e9:fa:e0:31:f6:d8:63:4a:bb:b6:52:d6:01:0e:d6:
                    2c:02:07:18:6c:9d:31:89:7c:73:03:d0:9c:96:31:
                    de:75:8a:68:02:e1:6c:3a:c4:3b:ab:dd:d0:47:7e:
                    b5:15:56:4f:94:cd:39:6a:ca:08:93:2c:ab:58:7d:
                    86:9c:09:5f:7b:4e:fd:9a:6f:0a:14:4a:73:e2:15:
                    f2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:11:4A:2E:08:B5:D4:D2:89:E7:35:3F:AD:5B:06:28:18:1A:3E:A5
            X509v3 Authority Key Identifier:
                keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/QBFKLgi11NKJ5zU_rVsGKBgaPqU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.107.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:11:8c:5f:e3:f7:5d:68:9d:aa:f2:da:aa:87:3e:dc:71:20:
         f1:23:c4:23:f3:d1:dd:b2:b1:12:3d:d9:86:91:c8:8d:ed:f4:
         f7:36:2a:6a:c9:ec:a9:47:d0:5e:35:bd:d2:b7:61:12:64:ba:
         9a:42:43:02:3c:95:58:6e:5b:63:d4:93:42:f3:ed:de:bc:c4:
         1d:37:9d:69:13:ca:55:8e:29:41:48:58:96:be:3f:a2:8c:0a:
         95:5c:dd:6a:c5:08:c8:8d:1f:b4:db:ac:69:08:e8:fb:08:58:
         8d:73:c5:30:58:ec:68:a7:4d:2d:fb:2a:d1:c9:2a:16:ed:e6:
         1b:8b:9e:b8:d8:e2:94:2a:32:a4:83:d6:6d:c3:b7:f7:cc:95:
         de:ab:7d:32:a2:40:00:d6:b7:0d:3f:1a:92:09:b8:9b:55:fa:
         96:6b:00:e5:95:85:9a:f4:5e:0a:72:28:aa:0c:32:07:d6:42:
         e6:f2:e0:e1:a3:83:e8:14:4c:01:f4:23:ac:75:c3:5e:c9:b8:
         21:11:1b:5c:f0:db:36:28:5c:76:2b:bb:30:b5:47:92:22:07:
         2e:f7:bb:15:c3:ad:3f:f8:7f:26:d7:7b:cd:56:fb:4c:f2:dd:
         0f:00:c6:f9:1a:7e:75:11:bc:92:ae:20:3c:d8:09:9d:c7:b1:
         16:25:0c:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/FP+EVKBVD6zVMNuF3GRdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjYwMTAyMTQyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDExNGEyZTA4YjVkNGQyODllNzM1M2ZhZDViMDYyODE4MWEzZWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEb51AAJue7ureY/Ajhf6LMFc+vz
Mk7F5eY0LTHXXHSWHSqA2Sy6aSQZFUuuBgt9zS4A/4xUwQz+X0hqHg4uXQsVcu3K
Ve/ncGQu9vj2Jfl8lZ8ul8MMUFRB8OhIg3JwQO+FFwDl1gWFt3yQiETpX94Ztocn
VRbl4GOWpgeALm5uOXcxXhbV9zJYJU81//nLKZwa57nRvjV4cXEsuj2i3PZluhTE
SpJh6O9z3fHzTzCkaNnp+uAx9thjSru2UtYBDtYsAgcYbJ0xiXxzA9CcljHedYpo
AuFsOsQ7q93QR361FVZPlM05asoIkyyrWH2GnAlfe079mm8KFEpz4hXyswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEARSi4ItdTSiec1P61bBigYGj6lMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvUUJGS0xnaTExTktKNXpVX3JWc0dLQmdhUHFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV2syMA0G
CSqGSIb3DQEBCwUAA4IBAQCvEYxf4/ddaJ2q8tqqhz7ccSDxI8Qj89HdsrESPdmG
kciN7fT3NipqyeypR9BeNb3St2ESZLqaQkMCPJVYbltj1JNC8+3evMQdN51pE8pV
jilBSFiWvj+ijAqVXN1qxQjIjR+026xpCOj7CFiNc8UwWOxop00t+yrRySoW7eYb
i5642OKUKjKkg9Ztw7f3zJXeq30yokAA1rcNPxqSCbibVfqWawDllYWa9F4Kciiq
DDIH1kLm8uDho4PoFEwB9COsdcNeybghERtc8Ns2KFx2K7swtUeSIgcu97sVw60/
+H8m13vNVvtM8t0PAMb5Gn51EbySriA82Amdx7EWJQyk
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:59:16 2026 by rpki-client