This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/qWcwIgnyIxs_PtWdUa-IE9Tv-Xk.roa
File:                     qWcwIgnyIxs_PtWdUa-IE9Tv-Xk.roa (raw, json)
Hash identifier:          9ILFHh9Hs3IUEt3YRTiDeu1eu68NWxrB0IUz1BKo+jo=
Subject key identifier:   A9:67:30:22:09:F2:23:1B:3F:3E:D5:9D:51:AF:88:13:D4:EF:F9:79
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       019B7C805CFD7A7E73E434909185C85DCE1A
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/qWcwIgnyIxs_PtWdUa-IE9Tv-Xk.roa
Signing time:             Fri 02 Jan 2026 02:19:05 +0000
ROA not before:           Fri 02 Jan 2026 02:19:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51076
IP address blocks:        80.242.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:5c:fd:7a:7e:73:e4:34:90:91:85:c8:5d:ce:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Jan  2 02:19:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a967302209f2231b3f3ed59d51af8813d4eff979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d5:62:e4:3f:21:20:91:38:01:e8:dd:8f:49:
                    68:5e:28:6b:88:65:e9:8b:dd:63:ad:41:a7:40:24:
                    b2:ad:73:1a:47:b1:52:8f:db:03:e1:bd:95:5e:5b:
                    0a:f6:34:f9:ac:2f:9b:ce:20:e5:e6:9a:a1:4f:4c:
                    1e:82:75:a5:3d:b1:08:32:48:8c:71:58:ff:eb:9b:
                    ce:fc:33:ce:0a:d0:65:e5:2a:72:2e:a6:20:97:58:
                    72:ab:ee:2c:24:f4:b4:56:f8:df:58:be:f1:33:fa:
                    8e:b2:ea:77:36:4d:6d:87:7e:12:83:fe:cc:dd:74:
                    1b:f0:ed:f8:ca:2d:96:ee:4c:7d:54:82:22:d6:ea:
                    bc:51:0e:2a:52:b9:8f:c2:38:7a:ad:cd:70:9f:dc:
                    34:46:99:50:df:6f:f2:a8:c6:ba:1d:03:06:7e:75:
                    fd:03:f0:15:24:21:31:7e:08:00:84:ea:fc:4f:f4:
                    c4:b7:cf:fe:4e:1a:e4:1c:9d:cf:68:68:eb:f3:67:
                    43:6f:82:4d:24:fc:5b:32:c5:bc:d6:72:de:26:7d:
                    9e:ce:12:38:5d:06:5a:19:8e:7a:e1:4c:b5:78:06:
                    7a:f7:db:eb:0f:80:05:c1:e2:04:31:d5:24:63:87:
                    5a:a8:8a:0c:cd:b3:bb:d7:c1:ac:a5:e0:3a:81:e7:
                    f3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:67:30:22:09:F2:23:1B:3F:3E:D5:9D:51:AF:88:13:D4:EF:F9:79
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/qWcwIgnyIxs_PtWdUa-IE9Tv-Xk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.242.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:e3:16:6a:2d:1e:ef:35:fe:a0:6f:0c:0a:c2:6e:61:e3:44:
         7c:5e:7f:79:50:8f:d8:06:26:5f:32:a4:ba:89:a5:d2:1d:b3:
         75:8f:cc:fe:74:a4:ae:72:b0:da:54:30:27:8b:2a:9b:d7:52:
         22:4b:ca:41:e5:62:37:ca:3f:c0:45:51:ad:73:72:98:7e:c1:
         1c:58:78:9d:8d:5d:bd:0a:48:99:8e:88:18:b7:f6:f3:ac:41:
         23:23:bb:11:b4:28:b5:11:4c:f5:bf:18:f2:d4:7b:be:97:f7:
         60:aa:8c:67:e6:42:26:ba:0c:98:2d:a1:b0:de:4e:2e:3f:b1:
         eb:70:e0:b0:97:ab:82:20:06:78:8b:60:3c:3b:a7:db:e8:1e:
         cf:cc:f7:d1:6e:bb:ef:21:d3:04:1a:75:d4:8c:6e:4c:d9:5d:
         2d:0d:3a:c9:a0:f5:e1:d5:90:08:72:0e:28:c6:35:40:1b:a9:
         a9:2c:11:49:f3:a5:c3:42:18:d6:75:d8:5e:09:3c:a1:b8:6d:
         f1:0c:33:42:43:e6:9f:2e:cb:d3:1a:40:e8:a1:a8:cb:c9:22:
         fd:6c:b9:5a:c5:f2:21:fc:e4:4a:28:8f:03:91:f8:71:4c:60:
         60:09:56:fd:59:50:a2:1e:ef:86:a2:4c:44:0a:0b:41:23:90:
         05:f3:6d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 03:55:47 2026 by rpki-client