This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qqWh30wzMzzqjlZZiZGZ_f8WPeM.roa
File:                     qqWh30wzMzzqjlZZiZGZ_f8WPeM.roa (raw, json)
Hash identifier:          Q4re9Ekym5pqodEicjeUXUvBYItEPNmkWDA3wbFvgic=
Subject key identifier:   AA:A5:A1:DF:4C:33:33:3C:EA:8E:56:59:89:91:99:FD:FF:16:3D:E3
Certificate issuer:       /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial:       019B78348D1FD113A2611573257EE9D47EC7
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qqWh30wzMzzqjlZZiZGZ_f8WPeM.roa
Signing time:             Thu 01 Jan 2026 06:17:48 +0000
ROA not before:           Thu 01 Jan 2026 06:17:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208639
IP address blocks:        193.180.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:8d:1f:d1:13:a2:61:15:73:25:7e:e9:d4:7e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
        Validity
            Not Before: Jan  1 06:17:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=aaa5a1df4c33333cea8e5659899199fdff163de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9e:02:0b:55:70:25:b6:ee:59:cf:05:ca:1c:
                    51:88:73:4b:b6:f1:5c:4d:f7:c7:d2:8a:9b:17:31:
                    de:00:5d:01:d0:77:8f:36:64:7c:76:ca:2b:21:dc:
                    d5:0c:7e:53:e0:18:78:6d:57:94:a3:5c:bb:77:94:
                    4d:dd:f2:f0:72:fc:54:ab:bb:52:60:fb:e7:32:e9:
                    4b:63:6a:4d:6c:d4:7c:b9:4f:b8:72:36:7f:2d:de:
                    be:8e:0e:ee:0b:60:8d:05:b5:65:46:c7:42:c4:eb:
                    1e:08:2b:ea:db:0e:56:7a:00:26:9b:8b:78:7b:96:
                    a6:89:86:6e:3e:75:1b:ac:6e:4b:4a:d1:0c:fa:f4:
                    68:cc:56:b2:31:be:76:f1:26:f8:a1:9b:44:f5:5f:
                    64:16:84:0c:5d:db:c6:36:8a:9c:c3:75:13:74:0e:
                    05:1e:11:46:22:19:5b:58:57:1e:3d:c6:95:94:2c:
                    84:76:ce:a0:8f:a6:bf:06:ca:05:e5:e7:a4:f6:f1:
                    ef:20:05:fb:67:04:e2:08:6f:03:24:de:7b:5d:9b:
                    45:4d:14:5f:e5:9a:a1:a8:fa:f1:2d:88:32:3a:9e:
                    df:d4:6a:8f:cf:60:26:c5:87:74:b1:aa:62:55:40:
                    60:78:f8:a9:db:87:20:d8:92:c5:05:40:70:b1:2b:
                    37:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A5:A1:DF:4C:33:33:3C:EA:8E:56:59:89:91:99:FD:FF:16:3D:E3
            X509v3 Authority Key Identifier:
                keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qqWh30wzMzzqjlZZiZGZ_f8WPeM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.180.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:b0:23:2c:65:ad:b5:71:86:61:f1:58:22:fc:57:0b:82:d4:
         ac:50:6f:ef:3a:b8:16:97:06:f4:e1:52:07:17:a2:00:21:55:
         a3:75:1f:87:e2:c9:76:48:05:f1:a6:47:14:98:7c:88:07:ec:
         03:b6:c8:d0:4d:e2:08:64:f3:f8:a2:c0:42:9a:a3:13:20:8b:
         aa:c4:23:0a:b9:91:bc:de:2d:03:ff:ec:75:7a:b4:ad:08:58:
         a9:ca:76:df:ae:e8:22:dd:e2:90:05:11:24:3b:51:3f:d9:cc:
         4e:3a:ec:22:ac:ea:72:59:7e:ab:03:d5:3b:b6:d2:67:40:0e:
         a0:54:32:10:ab:a0:62:9a:18:6f:85:21:9c:c2:97:a4:08:ec:
         fb:c5:70:11:33:26:91:a9:91:86:e3:9d:73:25:c6:41:59:73:
         6e:ca:16:a5:6a:c0:ad:8a:15:f1:f9:91:18:15:8f:b5:01:ed:
         1d:2b:fa:27:fc:b1:6f:c4:dd:99:44:0a:01:2a:9e:dc:c4:23:
         d6:e1:3f:13:76:52:4a:7c:04:7c:19:d6:c7:a1:14:20:c4:4e:
         f0:1e:f3:64:12:5a:5e:4d:a1:63:ae:29:ae:87:1e:36:58:1e:
         54:00:03:32:df:27:09:5e:88:ac:dc:6d:34:b4:4d:0d:5e:90:
         b0:25:e8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:20:46 2026 by rpki-client