This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/qywQfHr-iDREwY45Lb9DdbVEsiA.roa
File:                     qywQfHr-iDREwY45Lb9DdbVEsiA.roa (raw, json)
Hash identifier:          nzIzFnPSZOOqRPozy+81kowYJfHot6yq6Ssr4EDZ6yY=
Subject key identifier:   AB:2C:10:7C:7A:FE:88:34:44:C1:8E:39:2D:BF:43:75:B5:44:B2:20
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       019B26859EE433A3720EDD4CDDAE211BF7F8
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/qywQfHr-iDREwY45Lb9DdbVEsiA.roa
Signing time:             Tue 16 Dec 2025 09:37:29 +0000
ROA not before:           Tue 16 Dec 2025 09:37:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     216438
IP address blocks:        185.146.193.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:26:85:9e:e4:33:a3:72:0e:dd:4c:dd:ae:21:1b:f7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Dec 16 09:37:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ab2c107c7afe883444c18e392dbf4375b544b220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:98:9c:38:c8:d2:cd:82:23:f4:be:e7:85:bb:
                    37:b2:16:6c:7c:57:14:70:44:cc:ab:cc:4f:f7:78:
                    73:28:8e:4b:cf:24:c1:11:0e:cb:75:39:43:f7:4d:
                    38:70:31:c8:b1:b6:af:3c:13:59:f2:14:a9:2b:27:
                    4c:dc:7c:0c:db:f6:a0:68:e8:00:43:da:74:11:ad:
                    a6:45:09:8b:89:4c:f5:f3:20:7d:ff:39:25:ed:f4:
                    87:49:1e:ed:a9:21:c4:e8:d8:d8:3b:08:2e:33:99:
                    9e:60:fe:8d:f5:2c:d0:95:03:32:6b:e5:e5:67:a8:
                    9b:d2:2c:38:c4:a6:af:82:e4:f9:dc:b2:f3:ae:12:
                    b0:00:0a:92:59:36:d7:b1:e6:c8:b3:55:95:18:ac:
                    25:b3:e8:20:bf:11:6a:18:0d:19:7b:5c:39:74:a1:
                    05:db:0c:10:17:36:c6:66:a0:8a:c2:e9:15:26:22:
                    e3:3f:d9:db:6f:da:56:e6:b7:ed:c8:aa:86:f9:b6:
                    8a:ad:53:4a:b6:39:8e:68:d1:c9:2d:74:e1:ea:71:
                    c5:92:0d:52:a4:ff:c3:3e:06:9e:51:81:ab:31:4f:
                    58:41:9f:57:d3:e2:6b:5f:12:66:5e:ff:55:db:5f:
                    34:6f:77:2b:49:7e:e8:82:c1:89:f9:90:8d:72:26:
                    75:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2C:10:7C:7A:FE:88:34:44:C1:8E:39:2D:BF:43:75:B5:44:B2:20
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/qywQfHr-iDREwY45Lb9DdbVEsiA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.146.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:90:c3:07:57:b9:74:75:6d:98:1a:dd:6d:3b:e0:f2:85:76:
         5f:4e:77:79:6c:e3:82:f2:4c:e0:52:08:66:cd:f2:b0:a4:ce:
         23:af:7a:83:8e:f6:66:6b:58:61:04:07:e7:ef:36:25:59:f8:
         c7:f2:c5:96:a3:66:3b:8f:89:ff:c0:0c:48:d8:d5:2f:81:65:
         dd:6c:42:b7:0b:ab:b9:b6:6f:0e:ec:20:52:48:11:69:99:f1:
         97:cf:2e:33:bd:b9:18:d0:aa:fa:6b:ff:e8:18:fa:1e:6c:fa:
         f4:c7:fe:a7:fe:04:7f:d0:a4:d1:6c:cc:09:87:d6:3c:f9:49:
         d4:63:84:f4:fe:2a:fb:b8:d8:b3:37:cc:8f:82:de:53:26:93:
         a2:02:89:d1:e4:d0:cb:ce:47:97:73:0b:5c:ee:61:3f:0b:90:
         db:87:05:fb:20:b8:b0:3d:8c:f8:78:91:64:07:a1:58:9d:b8:
         bf:4c:59:32:b9:e8:b8:6e:29:99:d1:f2:43:92:48:42:f4:79:
         40:1c:2d:15:39:89:77:9e:bd:97:c7:d6:8f:b6:dd:64:46:12:
         dd:ff:d9:13:3c:d7:33:17:f9:38:28:e0:84:96:7b:7d:45:a0:
         3e:6e:25:32:f7:59:61:c6:11:43:ef:ba:6a:3d:eb:c7:be:80:
         92:5d:b5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 07:14:32 2025 by rpki-client