This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/SqsOc_l_Byw8A63bMs7bGr5Csfk.roa
File:                     SqsOc_l_Byw8A63bMs7bGr5Csfk.roa (raw, json)
Hash identifier:          yDuYEQpT9u0kVYnoDL0S45vkKwdy3kU/Xh9r8KwY0Mg=
Subject key identifier:   4A:AB:0E:73:F9:7F:07:2C:3C:03:AD:DB:32:CE:DB:1A:BE:42:B1:F9
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019C38A91DABB258EAF5AA84707A19B7ED44
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/SqsOc_l_Byw8A63bMs7bGr5Csfk.roa
Signing time:             Sat 07 Feb 2026 15:12:13 +0000
ROA not before:           Sat 07 Feb 2026 15:12:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213644
IP address blocks:        45.11.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 15:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:38:a9:1d:ab:b2:58:ea:f5:aa:84:70:7a:19:b7:ed:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Feb  7 15:12:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4aab0e73f97f072c3c03addb32cedb1abe42b1f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e6:35:f2:f2:9f:e4:76:7e:09:10:ec:e9:dc:
                    6a:a6:90:44:0c:88:27:b4:04:c7:f4:9f:e0:b9:d7:
                    71:df:2b:09:a9:43:0b:7b:25:c7:fd:12:38:b2:f7:
                    0b:e3:98:9b:89:51:3f:ea:da:ee:b9:4a:d4:3c:38:
                    ab:c3:39:14:67:51:c8:c1:51:90:a4:0e:be:ae:13:
                    c3:9e:ea:b6:55:40:0b:02:de:4c:c2:7d:94:20:f0:
                    aa:70:49:e7:eb:c2:2f:a3:61:a5:db:14:2d:cc:a4:
                    04:68:cc:ee:3f:e2:85:64:80:4f:e6:23:df:a1:5b:
                    f2:a2:c2:25:19:ba:db:62:1a:5d:fc:f4:6e:89:f2:
                    5d:e6:5d:87:cb:4a:16:8b:b6:84:1f:78:ef:9d:d1:
                    e2:35:92:5a:0e:47:f3:b0:c9:0f:a9:f9:2a:62:51:
                    1b:e7:51:40:b9:02:0b:1b:89:6e:e4:da:1a:8d:43:
                    f6:2d:80:c1:57:ca:37:a4:a1:5d:5c:d6:ef:34:83:
                    0f:88:77:eb:a6:dd:f2:21:28:f7:c6:96:53:b3:27:
                    0b:8f:33:e0:98:77:2d:74:91:83:75:21:70:18:02:
                    e9:fe:28:4a:a8:d6:7b:26:f6:86:cd:ee:c0:a6:1b:
                    ca:62:3e:4e:26:06:8e:0e:b7:b4:79:5d:40:6c:00:
                    18:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AB:0E:73:F9:7F:07:2C:3C:03:AD:DB:32:CE:DB:1A:BE:42:B1:F9
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/SqsOc_l_Byw8A63bMs7bGr5Csfk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:f7:9b:65:9d:a1:3c:99:ed:3b:03:b1:d8:70:34:dd:fb:5d:
         fd:bb:cf:db:86:aa:cb:5b:b0:5c:79:7f:4a:4e:98:9a:f0:b3:
         56:ed:e7:95:9c:f2:49:88:6c:b3:65:88:3d:66:6d:1b:5c:ad:
         63:e2:d5:1b:7e:29:a3:dd:8c:b8:55:30:72:02:80:b8:a5:3e:
         ab:13:3b:c6:d2:1c:ab:e3:cb:f8:0e:c3:41:b4:e4:4e:67:49:
         36:90:f8:0e:00:62:75:f1:c4:b1:b8:31:d5:6b:18:86:f3:27:
         b6:8a:ea:b5:66:d5:d9:c0:05:1e:c6:4f:b2:10:4a:a8:49:bd:
         6a:24:5f:80:d9:5c:a9:2d:59:d6:5c:43:62:4c:2f:5d:90:15:
         47:19:cf:9f:74:b8:bb:93:30:fc:cf:46:e2:34:7b:69:27:96:
         0e:57:32:cb:c3:70:bf:45:98:46:40:e9:b9:fa:96:b7:3f:ee:
         f0:9f:d7:42:ab:ba:b9:ce:3c:5b:72:a1:ce:8d:93:ac:ca:2c:
         e8:99:c7:6e:12:f8:6d:56:11:5b:02:6f:75:e1:e8:e5:a2:74:
         4f:4c:d2:cb:02:0b:3d:0a:56:80:d7:c5:6e:2b:33:54:28:4c:
         dc:49:63:9f:4d:44:7f:16:b9:41:ed:c4:d0:19:ed:bd:d0:7f:
         1b:7e:28:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 00:20:00 2026 by rpki-client