This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Sq2F_2MHygjFpi07suhBUa1R_68.roa
File:                     Sq2F_2MHygjFpi07suhBUa1R_68.roa (raw, json)
Hash identifier:          ZG5062dDlxQJwdav6+4ilTyJp7ZFq4AHU9MeUnd4pII=
Subject key identifier:   4A:AD:85:FF:63:07:CA:08:C5:A6:2D:3B:B2:E8:41:51:AD:51:FF:AF
Certificate issuer:       /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial:       019B7D5BEB64CE4F3A981A444EB98FEC3F7D
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Sq2F_2MHygjFpi07suhBUa1R_68.roa
Signing time:             Fri 02 Jan 2026 06:18:54 +0000
ROA not before:           Fri 02 Jan 2026 06:18:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43278
IP address blocks:        95.181.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:eb:64:ce:4f:3a:98:1a:44:4e:b9:8f:ec:3f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
        Validity
            Not Before: Jan  2 06:18:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4aad85ff6307ca08c5a62d3bb2e84151ad51ffaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5a:c3:dc:93:1a:91:82:cc:df:66:3a:34:da:
                    1b:af:cb:1e:9a:c8:b7:de:ef:9c:46:2c:1e:ab:7d:
                    0d:47:85:b3:41:28:39:53:eb:91:40:a1:e8:a1:03:
                    3e:72:40:35:4c:fb:10:76:04:f0:6a:ba:c3:db:c4:
                    58:9a:96:a7:8b:fa:c2:54:0d:6f:f9:03:26:e3:7d:
                    69:66:61:ce:c6:6c:16:db:11:95:83:e1:93:2c:07:
                    f2:37:04:9f:c7:fe:b1:0d:32:63:31:d3:17:26:92:
                    37:87:6f:4e:4d:b3:09:4a:92:0d:58:21:08:9d:b1:
                    8c:22:8f:97:88:28:e7:c8:4f:5e:c4:f1:6a:63:f9:
                    8a:09:a3:a3:49:79:63:79:62:01:f6:69:f0:e6:f8:
                    7a:38:c8:4a:da:3d:e9:9a:56:a4:3a:8e:ab:80:5c:
                    b1:44:92:50:7a:02:bd:f6:aa:21:38:9d:0d:43:13:
                    a6:4a:24:a9:5c:b6:d2:66:46:cf:3b:c8:7b:06:d8:
                    26:74:e2:52:b1:4d:99:a5:ea:27:ca:c9:25:ae:ef:
                    0a:62:1f:92:15:cb:87:f0:9b:08:17:1f:57:4d:25:
                    61:f0:32:39:d6:27:57:45:a6:f3:75:de:bd:ba:e6:
                    33:f2:33:35:cf:74:77:81:10:ba:3d:fc:13:8f:10:
                    9f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AD:85:FF:63:07:CA:08:C5:A6:2D:3B:B2:E8:41:51:AD:51:FF:AF
            X509v3 Authority Key Identifier:
                keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Sq2F_2MHygjFpi07suhBUa1R_68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.181.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:b3:3e:2c:c3:95:80:c1:c9:fc:5b:29:31:b3:62:c6:db:98:
         f3:58:cb:a3:7c:9b:bb:81:31:a7:e5:77:af:56:14:1f:4f:d3:
         25:64:a5:27:98:e5:ab:5d:6e:db:b3:4f:1d:cc:64:8b:74:8b:
         92:e4:75:9a:a3:b1:61:f2:8f:80:ea:7f:7c:7d:04:e2:27:4f:
         aa:33:7e:e8:7f:14:a0:53:40:81:3e:d0:83:1a:97:93:31:c5:
         24:fa:20:4a:7f:c4:03:19:a9:c9:cd:27:b2:b8:26:c9:2c:d9:
         0d:7d:02:a3:e4:16:c0:96:65:d2:d7:85:b1:a3:c5:2a:11:9a:
         c1:9d:f5:f0:25:a1:86:29:0c:0e:f1:bb:29:56:08:47:15:31:
         58:06:7c:dc:00:57:92:70:d6:b7:70:4e:7e:c5:46:ca:0f:11:
         85:31:bc:5e:38:b1:84:a5:c2:55:9a:ab:13:46:8b:b7:fd:ae:
         50:a3:d2:27:06:f9:d0:c7:87:99:07:a2:5b:da:e0:bd:43:3c:
         12:13:2a:07:73:94:c3:ad:d1:15:14:36:f8:ef:07:2b:e8:8b:
         37:33:cc:81:db:f9:1b:b1:f0:63:a7:ff:80:69:c4:26:ea:bd:
         86:2e:bb:d6:01:0d:f4:a2:17:29:90:55:73:ab:ae:59:56:9f:
         0c:80:ee:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:46:13 2026 by rpki-client