This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/q5QCzkumzST46_juxutwokUmgo0.roa
File:                     q5QCzkumzST46_juxutwokUmgo0.roa (raw, json)
Hash identifier:          MDvObiRF/vbaGYpuLSQ+tLb0/l9IEYefgNBYbZcoyeU=
Subject key identifier:   AB:94:02:CE:4B:A6:CD:24:F8:EB:F8:EE:C6:EB:70:A2:45:26:82:8D
Certificate issuer:       /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial:       019B12F11C3AF2576EFA5E7AE0603D846890
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/q5QCzkumzST46_juxutwokUmgo0.roa
Signing time:             Fri 12 Dec 2025 14:22:29 +0000
ROA not before:           Fri 12 Dec 2025 14:22:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     5533
IP address blocks:        77.91.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:12:f1:1c:3a:f2:57:6e:fa:5e:7a:e0:60:3d:84:68:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
        Validity
            Not Before: Dec 12 14:22:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ab9402ce4ba6cd24f8ebf8eec6eb70a24526828d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:20:15:3d:57:6b:64:49:fa:79:cc:81:d9:85:
                    f3:d3:6f:b2:4d:76:be:36:33:b9:cc:5a:43:7c:27:
                    80:af:a1:61:81:c9:81:c8:23:52:29:88:ff:de:94:
                    b3:8d:20:38:f0:2b:4c:00:de:b3:90:5c:1a:39:27:
                    92:26:0f:dd:53:85:10:eb:7c:93:e3:dc:e6:fe:2f:
                    2a:0c:e7:65:96:76:06:54:fa:2b:a6:56:c9:cb:ba:
                    d1:6b:2e:0e:84:07:07:9d:36:6f:bc:fd:5c:53:92:
                    61:c1:a6:66:5f:9e:f2:8e:a8:7f:0f:1b:2c:c3:bf:
                    7e:0d:35:2a:c2:99:25:3b:2a:33:a4:f3:b7:4f:03:
                    75:e2:27:f2:9e:f5:61:35:2f:db:5b:cb:3b:0e:d7:
                    ec:3d:14:95:60:a1:ff:b3:b3:9e:72:0a:75:61:1e:
                    e5:22:f5:6c:c7:24:84:be:f3:62:2c:23:79:9a:5d:
                    d1:9d:0c:4b:28:3c:dd:d7:a8:ac:35:ba:06:3a:bd:
                    6e:31:70:86:99:a0:40:97:5e:c1:d6:0a:e0:f9:85:
                    ed:be:06:d7:57:ce:d7:cb:54:dd:15:16:f5:b7:14:
                    a9:47:b4:3b:0b:d3:c5:f1:ca:0a:31:3e:4c:5b:0c:
                    2d:bc:61:87:f2:7f:00:7e:b7:4c:d5:64:39:68:87:
                    11:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:94:02:CE:4B:A6:CD:24:F8:EB:F8:EE:C6:EB:70:A2:45:26:82:8D
            X509v3 Authority Key Identifier:
                keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/q5QCzkumzST46_juxutwokUmgo0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.91.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:d9:63:1f:9b:b8:86:05:e1:89:25:5e:20:de:4e:85:35:81:
         e4:67:70:d5:b3:d0:dc:16:3f:08:65:d3:90:7a:85:88:8f:5d:
         96:f8:ed:49:96:0b:90:62:ef:a3:05:b2:da:bc:96:08:d3:56:
         eb:66:f8:69:ed:9d:97:c1:80:b8:8c:8b:70:13:d1:aa:75:59:
         88:bd:dd:f5:62:d3:6c:6d:d2:b8:90:45:32:e5:9b:1b:08:1e:
         64:77:c4:1d:8c:21:6e:4d:ad:c5:37:f7:d8:65:5e:fd:61:b0:
         61:9e:d8:21:f5:b1:ad:da:87:0d:57:00:c7:78:d5:2b:0f:77:
         29:d1:55:c5:f2:15:b0:21:4d:01:be:47:69:ab:0c:20:2f:70:
         a0:75:0b:4d:40:a9:11:3d:f4:3d:0f:6b:dd:09:be:0f:45:a5:
         78:ed:ec:6f:40:6f:8a:bf:b6:93:d3:0f:a8:d0:f6:fd:44:7a:
         82:99:37:46:4e:56:93:f7:ff:25:0d:1f:47:e2:39:ea:a1:8b:
         50:43:8b:4f:70:40:ec:73:2f:df:8c:60:38:27:56:8b:69:d1:
         d6:87:27:c4:78:19:33:35:5d:f0:73:5c:06:00:a6:6c:0c:44:
         2f:37:30:4f:0c:90:bc:74:c3:e7:62:83:40:da:16:e5:74:a8:
         70:21:1a:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZsS8Rw68ldu+l564GA9hGiQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNjQxZmM5MDNkNWI0Y2M5NzE2NDkzMjRhNGIzNGU0Zjgy
NDIyYzUwHhcNMjUxMjEyMTQyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjk0MDJjZTRiYTZjZDI0ZjhlYmY4ZWVjNmViNzBhMjQ1MjY4MjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SAVPVdrZEn6ecyB2YXz02+yTXa+
NjO5zFpDfCeAr6FhgcmByCNSKYj/3pSzjSA48CtMAN6zkFwaOSeSJg/dU4UQ63yT
49zm/i8qDOdllnYGVPorplbJy7rRay4OhAcHnTZvvP1cU5JhwaZmX57yjqh/Dxss
w79+DTUqwpklOyozpPO3TwN14ifynvVhNS/bW8s7DtfsPRSVYKH/s7Oecgp1YR7l
IvVsxySEvvNiLCN5ml3RnQxLKDzd16isNboGOr1uMXCGmaBAl17B1grg+YXtvgbX
V87Xy1TdFRb1txSpR7Q7C9PF8coKMT5MWwwtvGGH8n8AfrdM1WQ5aIcR2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKuUAs5Lps0k+Ov47sbrcKJFJoKNMB8GA1UdIwQY
MBaAFNtkH8kD1bTMlxZJMkpLNOT4JCLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzkt
N2ZlZTU5MWEyMDljLzEvcTVRQ3prdW16U1Q0Nl9qdXh1dHdva1VtZ28wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzktN2ZlZTU5MWEyMDlj
LzEvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTVvIMA0G
CSqGSIb3DQEBCwUAA4IBAQCN2WMfm7iGBeGJJV4g3k6FNYHkZ3DVs9DcFj8IZdOQ
eoWIj12W+O1JlguQYu+jBbLavJYI01brZvhp7Z2XwYC4jItwE9GqdVmIvd31YtNs
bdK4kEUy5ZsbCB5kd8QdjCFuTa3FN/fYZV79YbBhntgh9bGt2ocNVwDHeNUrD3cp
0VXF8hWwIU0BvkdpqwwgL3CgdQtNQKkRPfQ9D2vdCb4PRaV47exvQG+Kv7aT0w+o
0Pb9RHqCmTdGTlaT9/8lDR9H4jnqoYtQQ4tPcEDscy/fjGA4J1aLadHWhyfEeBkz
NV3wc1wGAKZsDEQvNzBPDJC8dMPnYoNA2hbldKhwIRqf
-----END CERTIFICATE-----
Generated at Sat Dec 20 04:31:48 2025 by rpki-client