This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/C-Qps28bGJ9viEITk81kKk0b0dA.roa
File:                     C-Qps28bGJ9viEITk81kKk0b0dA.roa (raw, json)
Hash identifier:          YvQZ6I3rsCF/RjF8TlblPG71ruEskxswS8/cnuK9jtA=
Subject key identifier:   0B:E4:29:B3:6F:1B:18:9F:6F:88:42:13:93:CD:64:2A:4D:1B:D1:D0
Certificate issuer:       /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial:       019B79101B2274B2F8B6DB3DFB013C3CF55C
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/C-Qps28bGJ9viEITk81kKk0b0dA.roa
Signing time:             Thu 01 Jan 2026 10:17:37 +0000
ROA not before:           Thu 01 Jan 2026 10:17:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210392
IP address blocks:        185.112.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:1b:22:74:b2:f8:b6:db:3d:fb:01:3c:3c:f5:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
        Validity
            Not Before: Jan  1 10:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0be429b36f1b189f6f88421393cd642a4d1bd1d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dd:5f:8e:e0:c4:d7:c9:17:48:09:c6:94:eb:
                    bb:dd:36:76:11:f3:41:13:d4:c5:e7:98:93:f3:65:
                    41:8c:63:11:d8:f9:36:ae:e4:40:22:d8:5e:0f:14:
                    af:ce:81:ee:86:02:86:88:e3:3e:aa:a8:57:90:4f:
                    08:e5:f5:cb:9e:52:8c:c8:8a:87:ad:ba:e1:28:52:
                    56:74:9e:ae:a4:08:a8:da:02:3a:98:5e:17:95:bb:
                    1d:0c:7b:70:d0:54:f9:60:0e:f0:f1:40:36:48:93:
                    8b:db:d6:d4:91:c3:10:3a:76:e7:3e:d3:73:23:d9:
                    e1:de:81:d5:04:62:f6:f2:c0:13:8a:4c:0b:af:ee:
                    22:85:91:03:10:85:2e:03:c1:6f:dd:34:c4:96:fd:
                    4b:5e:b0:23:ee:15:31:0d:d3:d0:3b:8d:c6:c7:7b:
                    2f:4e:1b:3c:1c:07:e0:fd:6a:3b:a0:c5:9c:c1:df:
                    1c:cd:1a:6e:68:f6:57:40:58:2f:f8:e1:fa:48:b6:
                    81:9b:94:9e:c5:1a:3a:27:87:34:19:31:70:ff:28:
                    68:dc:b5:0f:9f:f9:4a:05:c0:73:91:1b:74:1f:a0:
                    4f:4b:7c:a4:89:c1:d8:d1:42:c8:dc:ca:d1:28:96:
                    82:2d:f3:e4:f1:16:dc:ee:73:9f:91:b2:22:52:a9:
                    9b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E4:29:B3:6F:1B:18:9F:6F:88:42:13:93:CD:64:2A:4D:1B:D1:D0
            X509v3 Authority Key Identifier:
                keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/C-Qps28bGJ9viEITk81kKk0b0dA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.112.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:8c:d6:74:1b:40:e0:29:a9:ba:a5:3d:61:44:7a:25:86:88:
         63:6b:bb:e1:38:05:d1:96:2c:2f:fd:cb:11:0f:98:30:3c:45:
         7f:a4:26:ce:48:0c:cb:86:d0:9d:58:97:6f:16:5b:47:08:4c:
         86:70:12:37:1f:42:aa:5f:ea:44:52:45:c5:cc:88:98:e9:05:
         69:37:4e:0b:2e:77:d3:e7:5e:95:4e:5d:b9:58:0b:1f:17:56:
         15:e0:ab:f5:45:e9:92:73:7b:ae:04:4e:72:cf:37:b5:f9:28:
         2b:4b:05:75:7c:ef:5b:58:e1:d3:31:b7:f1:dd:8a:5c:a4:72:
         08:ab:74:c7:4f:42:3d:56:ea:01:7d:a1:12:9e:c4:f7:2e:78:
         e7:76:a9:2a:bc:34:73:e6:88:e8:e5:d6:8b:d9:f5:31:f6:e8:
         bf:5d:68:e7:64:0a:71:b9:22:9b:43:ee:8d:52:c0:83:78:d6:
         ea:b1:6b:a8:7b:25:90:a4:80:b9:f5:61:ea:72:ec:31:d5:91:
         2f:f0:21:a7:15:40:91:d1:27:75:1c:9c:10:18:27:c4:bf:5b:
         5a:aa:c8:b4:42:cb:e7:f5:37:c7:1d:dd:0f:80:c9:92:bd:b2:
         41:a1:68:bf:bc:0d:06:f1:42:75:0e:1a:3a:f7:57:b5:2b:a6:
         ee:39:62:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:15:19 2026 by rpki-client