This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QYey8QlYL7fC0Zp34AvhfI8rInc.roa
File:                     QYey8QlYL7fC0Zp34AvhfI8rInc.roa (raw, json)
Hash identifier:          T/es8dNqxd/LBHv0gwCicpgzFwE00qBw7hxNh8/EV40=
Subject key identifier:   41:87:B2:F1:09:58:2F:B7:C2:D1:9A:77:E0:0B:E1:7C:8F:2B:22:77
Certificate issuer:       /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial:       019B78347824A50B6B719792B7056F8DFC2D
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QYey8QlYL7fC0Zp34AvhfI8rInc.roa
Signing time:             Thu 01 Jan 2026 06:17:43 +0000
ROA not before:           Thu 01 Jan 2026 06:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199470
IP address blocks:        194.103.160.0/24 maxlen: 24
                          194.103.161.0/24 maxlen: 24
                          194.103.162.0/24 maxlen: 24
                          194.103.163.0/24 maxlen: 24
                          194.103.164.0/24 maxlen: 24
                          194.103.165.0/24 maxlen: 24
                          194.103.166.0/24 maxlen: 24
                          194.103.167.0/24 maxlen: 24
                          194.103.168.0/24 maxlen: 24
                          194.103.169.0/24 maxlen: 24
                          194.103.170.0/24 maxlen: 24
                          194.103.171.0/24 maxlen: 24
                          194.103.172.0/24 maxlen: 24
                          194.103.173.0/24 maxlen: 24
                          194.103.174.0/24 maxlen: 24
                          194.103.175.0/24 maxlen: 24
                          194.103.176.0/24 maxlen: 24
                          194.103.177.0/24 maxlen: 24
                          194.103.178.0/24 maxlen: 24
                          194.103.179.0/24 maxlen: 24
                          194.103.180.0/24 maxlen: 24
                          194.103.181.0/24 maxlen: 24
                          194.103.182.0/24 maxlen: 24
                          194.103.183.0/24 maxlen: 24
                          194.103.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:78:24:a5:0b:6b:71:97:92:b7:05:6f:8d:fc:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
        Validity
            Not Before: Jan  1 06:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4187b2f109582fb7c2d19a77e00be17c8f2b2277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:37:67:83:96:22:da:c6:c9:ec:79:04:c7:09:
                    58:44:b3:b7:ca:9a:ec:8c:58:d8:df:2a:b3:df:be:
                    fa:29:f3:de:33:67:e7:0c:2e:ac:97:5d:0e:31:69:
                    7f:1e:6e:b1:b4:5c:72:c3:b4:40:8c:2e:5a:de:d8:
                    08:e7:b4:09:19:8e:7d:20:1a:74:6b:20:73:6d:4d:
                    a9:5c:1d:7d:2d:91:86:b1:32:0e:cc:97:f5:85:32:
                    17:08:e2:c3:40:61:5b:22:8d:d7:82:69:1f:58:26:
                    ad:e9:fa:3a:9a:75:c2:28:b1:cd:26:b1:9d:95:0b:
                    bc:55:01:77:33:4e:b1:b7:35:d7:86:e0:5c:50:fe:
                    79:31:6a:da:db:1f:7d:73:b8:29:12:62:e1:26:69:
                    e2:fb:b4:10:81:f0:4f:07:40:08:db:8c:5a:75:8c:
                    7b:78:aa:8e:fc:cf:8d:e1:40:8f:2a:5f:ae:df:9d:
                    de:fe:ae:cc:a4:e8:8a:44:2d:3e:dc:1c:69:83:7f:
                    89:d0:27:5f:5e:94:33:f8:18:70:88:ef:fd:9b:c7:
                    ae:29:55:30:8e:02:ca:94:4f:01:00:40:d5:9a:a3:
                    27:07:a7:01:d8:3d:d9:e6:6d:06:7c:9c:1a:0b:ae:
                    17:29:2f:4c:82:b5:74:25:36:98:fb:7f:1d:6a:e3:
                    ac:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:87:B2:F1:09:58:2F:B7:C2:D1:9A:77:E0:0B:E1:7C:8F:2B:22:77
            X509v3 Authority Key Identifier:
                keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QYey8QlYL7fC0Zp34AvhfI8rInc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.103.160.0-194.103.185.255

    Signature Algorithm: sha256WithRSAEncryption
         20:7a:b8:75:ce:86:19:90:99:1f:3c:89:58:18:76:b6:59:6c:
         59:39:3e:80:e2:77:2d:1d:ed:b3:fe:c9:2f:9d:df:1e:f6:e5:
         9f:52:d5:d2:8e:30:3c:bd:7c:7c:6d:9e:d1:af:cb:10:63:09:
         59:a7:8b:35:f7:08:f9:76:0d:48:ce:88:64:d6:22:45:ad:4b:
         0c:f4:ef:17:82:da:9a:0f:30:59:45:de:18:82:40:4b:07:4f:
         f9:e1:1f:bb:b0:b2:1c:37:24:db:7b:0e:81:95:28:36:5a:38:
         fc:b7:a3:d8:14:6a:c3:5c:1a:cf:3a:ea:56:77:df:bf:19:8c:
         e9:9e:33:e6:f3:40:80:ba:ca:0d:fe:47:5a:4b:6f:f9:d3:8d:
         ff:8d:48:5f:4f:99:08:d7:9a:ef:9f:a7:b3:e2:77:10:82:6e:
         d1:c3:09:b2:73:81:f8:15:dc:5f:e7:3c:95:a8:24:8b:f6:a5:
         1c:39:49:1e:ec:22:da:4a:91:28:9d:3b:09:3c:ff:dd:0c:f4:
         98:42:7a:a1:f2:2e:3b:d4:c9:3a:50:9f:b4:4e:87:f5:ce:2c:
         21:e8:fd:ea:18:bb:bc:f1:1d:20:ea:e4:2b:c8:2b:e9:68:1c:
         d6:bd:be:32:eb:dc:5d:2f:e3:5b:ca:8c:a6:6d:bd:2f:c6:0a:
         6f:fe:4e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:15:27 2026 by rpki-client