This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/q-zqsg0WA9A3CLx_H7o9C1rqVRM.roa
File:                     q-zqsg0WA9A3CLx_H7o9C1rqVRM.roa (raw, json)
Hash identifier:          SQ6ImDPF329xjOk8vUCjrjeBwJl+4TG12T8hMzCestY=
Subject key identifier:   AB:EC:EA:B2:0D:16:03:D0:37:08:BC:7F:1F:BA:3D:0B:5A:EA:55:13
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       019B77C77CC3885A195AE08D6B1CC4DC19C8
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/q-zqsg0WA9A3CLx_H7o9C1rqVRM.roa
Signing time:             Thu 01 Jan 2026 04:18:40 +0000
ROA not before:           Thu 01 Jan 2026 04:18:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206850
IP address blocks:        77.74.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:7c:c3:88:5a:19:5a:e0:8d:6b:1c:c4:dc:19:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Jan  1 04:18:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=abeceab20d1603d03708bc7f1fba3d0b5aea5513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c2:0c:ab:4e:c8:bd:d2:f5:54:6b:77:41:85:
                    05:7d:a9:14:a1:70:97:8c:1c:13:b1:a2:ad:ab:41:
                    52:3d:10:c0:69:bd:9d:0d:0d:4e:d6:51:fd:cd:5d:
                    3a:5b:e4:2e:83:0b:04:81:0f:53:f5:a7:a6:8b:ac:
                    e9:30:51:5a:6e:ff:ee:93:6e:52:d2:4d:21:6b:d5:
                    b8:37:25:a2:36:bc:aa:7d:ef:d1:a4:99:5c:f2:b6:
                    06:3d:48:5f:66:29:83:91:24:72:46:9f:67:3b:0b:
                    56:62:26:b5:49:d3:56:4b:97:7f:90:c5:ea:ac:46:
                    7e:7a:aa:0f:71:20:3c:03:71:f9:8d:be:53:6a:db:
                    b6:b6:7e:3b:f8:7f:59:15:38:fd:e5:5c:7e:a6:3a:
                    2f:7f:79:af:5b:8b:35:a8:09:50:50:37:c3:7e:10:
                    18:88:36:cd:91:a8:78:2a:c0:f8:df:be:e1:e0:9e:
                    5c:9c:98:ae:20:a4:91:61:6c:89:c6:9a:e3:f2:c1:
                    f0:27:ce:06:a0:ac:b8:fb:44:04:e3:21:13:e6:48:
                    b0:03:b8:64:9d:d2:71:30:f3:0b:e3:df:ab:12:8f:
                    41:8e:25:82:00:1b:25:bd:94:0f:1e:66:bc:08:63:
                    7b:ea:d6:99:cd:b3:ca:7b:fd:e2:2e:1b:c0:09:df:
                    8d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:EC:EA:B2:0D:16:03:D0:37:08:BC:7F:1F:BA:3D:0B:5A:EA:55:13
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/q-zqsg0WA9A3CLx_H7o9C1rqVRM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.74.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:89:29:9f:c7:63:0b:36:f3:ad:a1:ba:1b:47:af:71:2d:7c:
         2f:cb:11:11:cf:4b:7c:ba:8a:f4:54:b7:a5:44:d8:26:6d:1d:
         54:25:59:62:6b:d7:1b:9a:65:38:19:69:a1:94:fb:ce:8d:0e:
         5d:a8:81:c5:cb:d9:d0:3c:c5:03:f8:bc:31:a2:a3:bd:28:c0:
         9d:5e:1f:c2:c7:c0:f2:60:95:ca:dd:c5:ab:fb:09:65:ca:ef:
         bc:20:95:d1:c0:ca:54:b9:3c:e0:fa:54:64:f4:7f:94:97:35:
         5d:4b:8b:7b:55:2a:33:e6:de:1c:1c:b9:10:c2:be:2f:1f:d0:
         03:cc:7c:43:f8:f0:9d:7c:2d:4f:b5:cf:7f:9f:1f:d5:3d:26:
         1c:7d:08:53:8a:e3:f9:40:59:db:07:cb:fb:a4:1b:99:12:ad:
         18:ba:99:2d:8a:9e:0d:99:90:ae:2b:e6:f6:5c:37:6b:0d:a4:
         1a:8b:69:5e:0e:cb:37:72:ee:b4:0e:a3:14:1f:24:5c:55:e2:
         84:13:3c:6e:33:2d:9b:58:2c:d2:e4:96:49:e3:5c:cd:43:39:
         29:b4:a9:0a:93:e4:5d:7f:5e:6d:34:99:4e:a0:b5:d7:e4:60:
         54:74:03:46:28:df:76:a2:9d:31:85:8f:77:9c:71:18:7d:31:
         f5:6e:93:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:42:21 2026 by rpki-client