This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/Qcb6MBj1jVMY5YJV__nFQrA67wU.roa
File:                     Qcb6MBj1jVMY5YJV__nFQrA67wU.roa (raw, json)
Hash identifier:          eNJ8rbIWqEmXeV+vpidHVif1VOtq0n7KG9qEAuZBikM=
Subject key identifier:   41:C6:FA:30:18:F5:8D:53:18:E5:82:55:FF:F9:C5:42:B0:3A:EF:05
Certificate issuer:       /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial:       019B7BA41583981E8CF8139A0071F713A8E5
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/Qcb6MBj1jVMY5YJV__nFQrA67wU.roa
Signing time:             Thu 01 Jan 2026 22:18:29 +0000
ROA not before:           Thu 01 Jan 2026 22:18:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48737
IP address blocks:        31.169.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:15:83:98:1e:8c:f8:13:9a:00:71:f7:13:a8:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
        Validity
            Not Before: Jan  1 22:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=41c6fa3018f58d5318e58255fff9c542b03aef05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d2:d6:f3:7d:e8:c0:cf:d4:12:fc:b5:2a:1e:
                    23:54:ed:75:21:b6:54:ea:db:a4:d2:71:64:21:51:
                    e5:a9:30:6c:2b:aa:e4:ea:a4:65:e5:95:52:75:ea:
                    67:19:1f:a6:43:37:d9:90:b4:22:9f:7c:1b:0b:c1:
                    c5:09:df:2f:fc:2d:c4:b4:a5:76:08:e4:64:5f:d6:
                    c2:bf:96:2b:e7:07:2f:45:ae:4f:84:eb:c3:3d:70:
                    b1:22:cb:ac:c1:d5:5b:8b:42:a2:17:22:27:22:0c:
                    fd:e1:11:84:c4:f7:7b:86:d5:18:cb:ef:d4:25:24:
                    73:06:95:f2:b1:db:e1:77:12:0b:be:d5:cb:12:4d:
                    d8:8d:87:2e:be:45:ce:03:a5:7c:40:31:a3:54:81:
                    ee:33:e0:73:11:60:d5:d3:32:6a:7b:2e:5f:f6:99:
                    0c:51:23:10:60:96:11:90:64:17:9d:34:79:59:a6:
                    31:4a:fe:00:d8:34:a7:cc:9a:7a:42:7d:fd:e4:08:
                    3b:ef:14:a1:b1:b1:79:9d:99:ea:32:2b:65:23:ef:
                    49:f4:fe:68:0a:34:6b:24:68:f8:6a:29:77:cb:6f:
                    c5:c7:6a:0f:e7:e4:dc:33:fb:40:1d:26:ac:71:23:
                    e1:58:79:66:11:14:c4:e2:cc:df:67:01:de:6a:3e:
                    e7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C6:FA:30:18:F5:8D:53:18:E5:82:55:FF:F9:C5:42:B0:3A:EF:05
            X509v3 Authority Key Identifier:
                keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/Qcb6MBj1jVMY5YJV__nFQrA67wU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.169.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:82:34:17:2b:91:74:f0:c5:49:f8:c6:23:d7:2d:e9:8c:38:
         f8:cb:d1:d6:07:2e:2d:f8:09:f3:21:52:16:ff:72:67:8f:41:
         9f:8f:3b:d2:79:c3:2b:90:7c:43:70:5a:c6:67:39:cc:52:d4:
         b2:0d:1d:88:ab:b3:5b:28:9c:60:be:41:16:db:a0:07:86:0e:
         69:15:01:8b:ee:5c:e0:57:2f:a9:b4:3c:dc:b8:b3:fa:27:23:
         9b:e1:bb:90:42:61:31:8b:8e:99:9d:13:5d:cc:9a:98:65:d8:
         ed:1e:8a:91:11:be:3d:57:3c:4f:8a:6e:78:1b:81:8c:44:fd:
         12:bd:e2:78:96:77:5b:6e:ff:77:b6:24:2d:58:6c:56:0a:aa:
         1b:cb:7c:75:52:ff:14:1a:5a:9b:a1:d2:de:72:f7:b9:64:49:
         f3:f8:33:9e:03:5c:a0:84:e9:1f:7d:ef:2c:0d:b0:fa:8d:8b:
         21:eb:9e:26:f2:e0:d7:b8:8b:88:14:f4:a7:2b:32:85:4c:f0:
         dc:6d:c5:48:76:33:08:af:2a:90:75:1f:91:0d:db:18:ab:23:
         4a:93:d3:64:0d:70:d0:ad:e0:a8:52:58:5e:ae:05:b2:68:98:
         86:12:8e:8b:3a:05:75:4c:77:21:f4:2d:e4:79:e0:7e:75:4f:
         f5:ce:e3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:20:28 2026 by rpki-client