This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/SBQ_xqUrpNzgYwAsOKFWEfBcWKU.roa
File:                     SBQ_xqUrpNzgYwAsOKFWEfBcWKU.roa (raw, json)
Hash identifier:          r7gescwog8g3OhaT+uiQpA9jU7IQngckD+CGfZrI6kY=
Subject key identifier:   48:14:3F:C6:A5:2B:A4:DC:E0:63:00:2C:38:A1:56:11:F0:5C:58:A5
Certificate issuer:       /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial:       019B7D5BBEFC175B8A578AE5BFB673F6810D
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/SBQ_xqUrpNzgYwAsOKFWEfBcWKU.roa
Signing time:             Fri 02 Jan 2026 06:18:43 +0000
ROA not before:           Fri 02 Jan 2026 06:18:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201135
IP address blocks:        185.84.188.0/23 maxlen: 23
                          185.84.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:be:fc:17:5b:8a:57:8a:e5:bf:b6:73:f6:81:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
        Validity
            Not Before: Jan  2 06:18:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=48143fc6a52ba4dce063002c38a15611f05c58a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5d:d6:8c:33:ce:a7:38:e8:e2:f2:7c:bd:72:
                    92:4a:ae:64:79:9b:95:9c:78:a2:92:5a:9e:79:cf:
                    09:cb:af:2f:6d:5f:a3:b5:65:9e:f6:49:88:26:82:
                    2f:a4:32:ab:6b:f3:61:89:67:5d:30:1e:cc:d4:39:
                    36:1c:51:3b:ea:08:47:3c:65:15:8d:5c:17:d5:91:
                    db:c1:e6:97:a3:37:60:b8:76:60:b0:84:53:5c:6f:
                    ac:87:38:af:6c:49:9a:51:fc:14:5d:d2:e6:b8:ea:
                    07:b7:20:f9:15:a9:c1:b4:d4:fd:ec:e0:ee:d0:d9:
                    c1:79:20:9c:27:ee:b0:8e:ee:d0:4c:c7:d2:62:a5:
                    7a:63:b1:99:7a:ff:09:97:b3:9a:66:82:eb:fa:82:
                    cc:0b:c5:15:69:6d:1b:ad:db:1f:28:d4:64:10:ed:
                    fe:e3:04:06:41:84:fa:3d:fa:ee:e6:1b:e9:fe:ed:
                    67:f6:05:db:a0:d2:0c:52:d3:68:da:19:dc:53:43:
                    1b:1a:d3:67:6a:8e:6a:ca:d5:7c:90:1a:ac:34:88:
                    de:df:28:12:70:ad:1d:4e:1d:44:80:b5:18:6a:b1:
                    5a:32:2d:7d:36:90:b8:af:25:60:d1:bd:96:e7:90:
                    18:a7:46:35:f7:e6:f1:51:00:5e:2a:1b:9f:ca:ac:
                    64:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:14:3F:C6:A5:2B:A4:DC:E0:63:00:2C:38:A1:56:11:F0:5C:58:A5
            X509v3 Authority Key Identifier:
                keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/SBQ_xqUrpNzgYwAsOKFWEfBcWKU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.84.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:f7:e1:b9:f7:25:51:29:33:69:cf:1c:47:a8:9e:52:7a:cf:
         bb:59:8a:ae:bb:44:f8:06:73:44:e2:72:db:ff:a0:ce:b4:10:
         22:23:03:ad:c8:89:a7:0d:38:e9:46:c7:10:0a:07:94:e2:2d:
         dd:14:7d:e8:35:e1:fa:72:17:45:93:52:b9:d2:b6:db:de:62:
         89:05:33:e1:51:18:47:f3:ad:fe:06:2f:2a:de:98:cb:ca:97:
         98:e8:e4:b1:83:27:72:59:9a:29:e7:17:7b:ed:8f:c3:68:ce:
         23:80:8e:17:a0:76:78:c0:bd:31:a1:71:41:1f:63:71:34:5a:
         be:1c:bc:55:61:b4:aa:15:d3:2d:67:bd:33:21:c8:7d:eb:22:
         a7:80:e7:a0:ae:63:8c:c0:26:e8:21:13:87:37:73:ac:67:49:
         9d:4b:b8:50:c7:7e:31:1f:9f:8d:21:93:d2:68:4e:3a:42:d7:
         40:43:30:26:af:ed:3e:95:34:ca:f1:b4:68:05:55:b1:9c:0a:
         42:ed:c4:4b:2e:60:4c:a8:f5:27:c1:08:88:6e:6f:87:01:52:
         34:4c:ec:a4:fc:07:04:de:b5:d9:a8:0d:b7:9f:ca:37:2e:92:
         ee:a9:e9:56:65:dd:05:9c:95:7b:55:34:3f:f6:81:22:70:f8:
         1d:81:87:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9W778F1uKV4rlv7Zz9oENMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZmM2ZTQ1MTgxZDgzOWZkMTBlNGE5MDI3NjJmMjZjOWE2
NDY3OTYwHhcNMjYwMTAyMDYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODE0M2ZjNmE1MmJhNGRjZTA2MzAwMmMzOGExNTYxMWYwNWM1OGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV3WjDPOpzjo4vJ8vXKSSq5keZuV
nHiiklqeec8Jy68vbV+jtWWe9kmIJoIvpDKra/NhiWddMB7M1Dk2HFE76ghHPGUV
jVwX1ZHbweaXozdguHZgsIRTXG+shzivbEmaUfwUXdLmuOoHtyD5FanBtNT97ODu
0NnBeSCcJ+6wju7QTMfSYqV6Y7GZev8Jl7OaZoLr+oLMC8UVaW0brdsfKNRkEO3+
4wQGQYT6Pfru5hvp/u1n9gXboNIMUtNo2hncU0MbGtNnao5qytV8kBqsNIje3ygS
cK0dTh1EgLUYarFaMi19NpC4ryVg0b2W55AYp0Y19+bxUQBeKhufyqxkLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEgUP8alK6Tc4GMALDihVhHwXFilMB8GA1UdIwQY
MBaAFNj8bkUYHYOf0Q5KkCdi8myaZGeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlB4dVJSZ2RnNV9SRGtxUUoyTHliSnBrWjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82MjM0M2MtZWRiZS00YThhLTg0ZjIt
N2ViMmViODViODRhLzEvU0JRX3hxVXJwTnpnWXdBc09LRldFZkJjV0tVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82MjM0M2MtZWRiZS00YThhLTg0ZjItN2ViMmViODViODRh
LzEvMlB4dVJSZ2RnNV9SRGtxUUoyTHliSnBrWjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVS8MA0G
CSqGSIb3DQEBCwUAA4IBAQCR9+G59yVRKTNpzxxHqJ5Ses+7WYquu0T4BnNE4nLb
/6DOtBAiIwOtyImnDTjpRscQCgeU4i3dFH3oNeH6chdFk1K50rbb3mKJBTPhURhH
863+Bi8q3pjLypeY6OSxgydyWZop5xd77Y/DaM4jgI4XoHZ4wL0xoXFBH2NxNFq+
HLxVYbSqFdMtZ70zIch96yKngOegrmOMwCboIROHN3OsZ0mdS7hQx34xH5+NIZPS
aE46QtdAQzAmr+0+lTTK8bRoBVWxnApC7cRLLmBMqPUnwQiIbm+HAVI0TOyk/AcE
3rXZqA23n8o3LpLuqelWZd0FnJV7VTQ/9oEicPgdgYcV
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:01:33 2026 by rpki-client