This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/SRqia6YfXXJ2UoukZVUrTxtqyEQ.roa
File:                     SRqia6YfXXJ2UoukZVUrTxtqyEQ.roa (raw, json)
Hash identifier:          nPbXswUrrFqKL4mXICqBgwismUWqPb6a8TY0i6MyF08=
Subject key identifier:   49:1A:A2:6B:A6:1F:5D:72:76:52:8B:A4:65:55:2B:4F:1B:6A:C8:44
Certificate issuer:       /CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Certificate serial:       019B7910BFAD81AEB4BF4B8F9B8F82057F72
Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/SRqia6YfXXJ2UoukZVUrTxtqyEQ.roa
Signing time:             Thu 01 Jan 2026 10:18:19 +0000
ROA not before:           Thu 01 Jan 2026 10:18:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     64434
IP address blocks:        185.165.28.0/24 maxlen: 24
                          185.165.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:bf:ad:81:ae:b4:bf:4b:8f:9b:8f:82:05:7f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385
        Validity
            Not Before: Jan  1 10:18:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=491aa26ba61f5d7276528ba465552b4f1b6ac844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:84:1c:68:16:62:6e:10:4c:d6:b8:2c:34:93:
                    12:22:fc:bf:32:86:b0:5c:44:d6:06:f9:7b:bf:39:
                    25:9a:f8:6f:df:9d:81:03:79:fb:87:e2:cb:68:a3:
                    94:11:f9:bf:c1:00:c6:9b:31:dc:14:be:4b:dd:50:
                    47:a7:2b:2e:3d:93:58:57:89:d3:71:dc:74:58:2b:
                    f0:98:fc:6d:81:21:dc:55:c3:36:4e:82:ca:28:c3:
                    73:bb:a3:61:d1:9a:6e:f2:fa:8b:27:94:cd:d8:00:
                    7e:08:56:36:3e:c6:6d:db:76:cd:ce:6a:33:40:bf:
                    1c:88:71:b2:10:2a:a4:24:ca:a0:96:52:3d:e7:7d:
                    40:25:cf:2d:25:67:ff:bd:0a:fb:d3:b5:62:fd:f2:
                    78:84:ec:b0:93:43:00:ab:9c:d0:d1:db:8d:69:c0:
                    c1:99:07:2d:34:a8:be:2f:b9:a3:4e:aa:d3:89:79:
                    0f:fc:74:62:86:f7:4e:fb:7b:e7:0f:b3:91:94:50:
                    69:2f:75:41:53:e6:09:0b:80:68:37:dc:8e:27:28:
                    94:ab:e7:e3:d5:53:f5:eb:9d:aa:13:91:41:ac:41:
                    35:de:a2:d2:be:9b:a8:5c:3e:57:da:ab:ab:3e:b5:
                    10:78:6b:3b:58:96:47:37:04:b6:5c:48:4f:46:e9:
                    d4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:1A:A2:6B:A6:1F:5D:72:76:52:8B:A4:65:55:2B:4F:1B:6A:C8:44
            X509v3 Authority Key Identifier:
                keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/SRqia6YfXXJ2UoukZVUrTxtqyEQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.165.28.0/24
                  185.165.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:39:01:af:26:1b:01:48:60:64:09:77:84:ae:6e:cc:ce:a4:
         8f:14:c8:40:85:64:73:77:1b:c0:0e:67:ea:06:07:83:91:e1:
         7e:8e:25:0e:70:69:84:d4:29:5a:88:f3:86:6f:d7:1d:04:bf:
         71:b6:ff:2d:46:6a:69:1b:c9:d1:6f:59:f2:37:25:0c:44:1e:
         5a:ca:3c:48:00:fc:04:67:3f:dd:e5:26:ba:14:45:1d:5d:bf:
         68:39:da:d7:c5:90:6b:c6:19:01:8e:20:3e:19:39:83:0a:ba:
         3d:53:30:61:b5:01:5d:bd:31:e0:f8:3a:0d:27:93:50:97:b8:
         5b:8e:67:2c:3b:ee:be:b2:90:7f:a7:78:33:88:01:23:87:31:
         63:88:06:79:8c:7f:5e:be:5f:c1:52:4b:1d:46:b1:af:e0:fc:
         76:45:3d:24:2a:41:b9:37:46:b7:2a:04:6d:18:29:e8:09:2d:
         5e:d3:96:46:03:6c:1a:2d:96:87:66:dc:36:00:9a:ea:05:2d:
         6f:3c:0c:0f:7e:49:24:ec:2b:1a:93:8b:d0:05:5b:09:e7:08:
         75:c3:16:c8:ca:ec:1b:26:63:05:d1:90:b7:21:c1:f8:d1:89:
         d8:b5:46:b6:dd:93:5f:f9:4e:b0:52:d7:9b:23:81:35:f8:de:
         aa:23:2f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:23:41 2026 by rpki-client