This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/sq_j1691pyhvkH9BoIr0BcNKCxI.roa
File:                     sq_j1691pyhvkH9BoIr0BcNKCxI.roa (raw, json)
Hash identifier:          i+UMV8SIsi3sQ/GKmfxv9CROSQ0ya0P5Ih29wcl+1k0=
Subject key identifier:   B2:AF:E3:D7:AF:75:A7:28:6F:90:7F:41:A0:8A:F4:05:C3:4A:0B:12
Certificate issuer:       /CN=463528c540a6d577c2d1cc1a6eea17124b392386
Certificate serial:       019B79EC0CF3EAD9303F30EAD49758373E3F
Authority key identifier: 46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/sq_j1691pyhvkH9BoIr0BcNKCxI.roa
Signing time:             Thu 01 Jan 2026 14:17:51 +0000
ROA not before:           Thu 01 Jan 2026 14:17:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61094
IP address blocks:        194.56.72.0/23 maxlen: 24
                          194.56.74.0/24 maxlen: 24
                          194.56.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:0c:f3:ea:d9:30:3f:30:ea:d4:97:58:37:3e:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463528c540a6d577c2d1cc1a6eea17124b392386
        Validity
            Not Before: Jan  1 14:17:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b2afe3d7af75a7286f907f41a08af405c34a0b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ae:06:91:b0:df:81:39:20:05:74:72:71:0c:
                    fb:64:55:07:9a:cc:38:d8:61:02:6d:3e:4b:7b:a0:
                    14:85:9d:8a:43:b6:c1:21:20:d6:cf:3e:fa:d0:0a:
                    57:6e:0f:94:69:d5:fa:d9:f8:0d:b7:96:02:b1:5c:
                    d1:03:28:88:e7:27:82:0b:75:e2:64:e6:78:34:8f:
                    3d:e6:bb:01:de:31:bd:6d:79:4a:bf:85:50:d5:ce:
                    39:dc:bc:9b:34:aa:0c:da:ef:bd:fb:9c:16:94:1a:
                    20:ab:cd:cb:03:8e:fc:df:02:70:5d:2a:44:e9:dd:
                    30:35:0a:93:9a:6c:88:a0:45:99:c1:cc:8f:e4:4e:
                    e2:7c:5e:e7:fb:8b:7a:c3:13:57:92:2e:72:7f:80:
                    42:8f:0b:42:d5:8d:89:f1:bc:8d:7a:3d:4b:f8:25:
                    6f:e6:65:7c:4e:14:ab:57:f1:a2:5e:44:19:f6:83:
                    c7:06:18:5d:9b:a7:ce:14:b3:de:57:10:ac:93:02:
                    dd:16:2e:cb:6f:b8:8b:40:8d:f3:1e:4b:81:e8:e8:
                    d9:f9:a1:a4:ef:3c:6b:91:b0:43:6d:48:49:7e:aa:
                    04:98:1a:6d:94:f2:5f:aa:f4:8e:74:61:a4:cc:9f:
                    eb:c0:e0:a3:21:9a:44:50:a4:5e:2e:0a:86:48:b1:
                    bc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AF:E3:D7:AF:75:A7:28:6F:90:7F:41:A0:8A:F4:05:C3:4A:0B:12
            X509v3 Authority Key Identifier:
                keyid:46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/sq_j1691pyhvkH9BoIr0BcNKCxI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.56.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:40:8a:d4:4f:32:3b:23:9c:42:89:43:2e:d6:ed:1f:b7:39:
         e0:93:2f:8d:ba:07:b6:ff:9f:2c:bd:e3:fe:4a:74:7a:b7:aa:
         61:d6:bc:49:1d:9b:5c:37:8b:b7:7b:51:72:64:70:ea:7b:04:
         d3:0c:44:8f:b9:a8:7b:e2:3b:9f:bc:99:f2:3f:61:8e:d4:7d:
         0d:bd:fb:12:e8:dc:88:51:d8:60:cc:ef:c5:b6:c7:95:a9:59:
         22:25:6a:47:5e:96:6f:18:03:f4:35:5a:24:e7:86:45:6d:b1:
         20:05:e4:69:89:c1:e7:d5:c4:d7:dd:4a:55:12:ef:ee:f7:98:
         b9:2e:4b:00:17:9c:67:aa:70:79:20:aa:da:03:1b:1b:01:99:
         90:c9:87:e5:ea:a2:38:49:4e:33:4f:f9:7f:bf:d0:97:29:c2:
         65:5f:eb:db:64:99:77:70:c0:bf:7a:0b:98:97:f6:db:ab:77:
         9b:89:e3:ab:12:41:4d:a1:1c:e0:8d:50:d4:20:f5:2b:26:49:
         2c:58:bd:bd:ac:60:03:fd:28:10:48:9a:0c:ec:9c:25:78:10:
         11:7b:df:9d:08:30:d9:1c:d4:31:7b:e4:6a:94:25:98:c2:84:
         37:98:70:dd:76:d9:41:04:dc:c8:c0:6b:f9:09:79:21:ac:46:
         30:80:cb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:15:41 2026 by rpki-client