This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/sqVsxOVZxJPg_EuE31JcVIzmHm8.roa
File:                     sqVsxOVZxJPg_EuE31JcVIzmHm8.roa (raw, json)
Hash identifier:          wEDb4nMLRJ3yvD/n5TS/p1dHt0nML7GsJdHh+1QO8rA=
Subject key identifier:   B2:A5:6C:C4:E5:59:C4:93:E0:FC:4B:84:DF:52:5C:54:8C:E6:1E:6F
Certificate issuer:       /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial:       019C1076DA4BB5F545678FA1C7892B8E4EC4
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/sqVsxOVZxJPg_EuE31JcVIzmHm8.roa
Signing time:             Fri 30 Jan 2026 19:52:30 +0000
ROA not before:           Fri 30 Jan 2026 19:52:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216361
IP address blocks:        185.244.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:10:76:da:4b:b5:f5:45:67:8f:a1:c7:89:2b:8e:4e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
        Validity
            Not Before: Jan 30 19:52:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b2a56cc4e559c493e0fc4b84df525c548ce61e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a2:4b:25:41:6c:db:79:cb:69:97:8f:b2:1e:
                    e4:aa:a7:68:bc:bd:75:04:50:1c:f1:d9:da:fc:57:
                    b3:8c:10:0a:79:d0:10:33:2b:a5:1c:24:c9:6c:82:
                    7d:e8:fe:3d:c9:ec:54:90:1d:76:6e:ff:f6:73:91:
                    1c:5f:2a:f4:70:ef:94:96:bf:a7:bf:fc:60:e7:af:
                    e5:c8:30:6e:79:4a:26:cf:f2:d5:79:55:af:a8:0c:
                    46:cd:84:f6:0f:63:80:6e:ed:2a:01:61:38:42:42:
                    42:ad:65:27:5c:60:67:d8:bb:a9:a0:38:d4:c8:67:
                    b0:8a:b7:16:ea:47:d9:df:ce:d4:48:47:44:ca:c3:
                    3a:07:81:08:c8:eb:ef:a2:1d:bc:ac:92:53:86:c1:
                    3f:9c:56:53:9b:17:b5:8c:79:2a:45:45:aa:5b:98:
                    37:ef:dd:85:c9:18:a4:36:6d:ee:f2:83:02:7b:80:
                    6c:21:52:22:e6:28:32:d5:b1:90:98:ee:a6:49:48:
                    78:79:25:11:c7:de:35:d5:c2:81:0a:06:d5:ee:be:
                    ac:aa:c0:e6:4c:41:f5:01:ba:b8:fe:97:eb:0e:67:
                    e8:8a:d4:06:c9:6f:d5:18:0b:7c:f7:c8:c8:4c:c6:
                    1e:fb:9a:f1:7d:1f:c0:c8:61:91:f5:1f:83:94:56:
                    e6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A5:6C:C4:E5:59:C4:93:E0:FC:4B:84:DF:52:5C:54:8C:E6:1E:6F
            X509v3 Authority Key Identifier:
                keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/sqVsxOVZxJPg_EuE31JcVIzmHm8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.244.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:18:47:60:27:b4:e0:92:56:58:bd:f3:f2:60:d3:18:62:56:
         6b:18:e9:6e:8a:ff:bf:d3:7e:35:d7:1a:1f:4a:d4:f6:a7:c3:
         1a:c7:59:80:40:ab:69:71:5d:f3:99:9e:87:84:80:ea:13:b7:
         a5:f1:0d:bc:ac:1d:9c:68:18:2c:29:57:ae:2e:f2:4c:2c:88:
         5d:b6:be:4c:2f:30:b7:52:8c:5a:35:af:ae:c6:b2:f3:78:7f:
         4e:29:0a:04:52:69:cd:ec:66:1b:60:32:4b:54:e2:87:55:37:
         7a:d8:a4:0e:2e:12:ba:68:3b:12:b8:03:bc:58:93:f2:cf:88:
         0c:6a:ef:b3:3a:2d:2a:b4:4a:8a:8d:74:8c:2f:d3:07:60:e2:
         33:93:e6:6c:7e:d7:1f:86:4c:24:74:28:ed:23:56:3a:9c:d1:
         96:42:bc:52:c5:2d:60:e8:68:78:7f:90:f5:12:1d:70:f0:9e:
         b1:24:46:46:b2:b9:71:37:b7:20:35:e9:ac:e9:09:2f:63:3d:
         b1:9b:c8:00:f9:98:f5:ac:da:bc:09:8f:d6:6a:f6:1c:71:4e:
         bc:99:bb:b0:95:8a:68:3d:9d:20:fe:f6:37:ee:2f:52:a2:c3:
         eb:80:c8:37:bf:cd:6a:67:b1:f0:4a:c2:56:e2:00:38:b5:88:
         c8:44:b1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:26:05 2026 by rpki-client