This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/1/326131313a333a3530303a3a2f34302d3438203d3e203433333537.roa
File:                     326131313a333a3530303a3a2f34302d3438203d3e203433333537.roa (raw, json)
Hash identifier:          b2sQ+1fXF/xv9gfaPWHaHOQnsz11ntVtJj8boytIj+0=
Subject key identifier:   B1:5A:8D:91:D5:76:D8:83:40:17:89:C0:0A:72:CD:66:B3:AE:1A:A9
Certificate issuer:       /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial:       3BAF0F933DBE4005B9C3D3D26698FF338185537E
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access:      rsync://0.sb/repo/sb/1/326131313a333a3530303a3a2f34302d3438203d3e203433333537.roa
Signing time:             Thu 27 Nov 2025 11:53:53 +0000
ROA not before:           Thu 27 Nov 2025 11:48:53 +0000
ROA not after:            Thu 26 Nov 2026 11:53:53 +0000
asID:                     43357
IP address blocks:        2a11:3:500::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:af:0f:93:3d:be:40:05:b9:c3:d3:d2:66:98:ff:33:81:85:53:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
        Validity
            Not Before: Nov 27 11:48:53 2025 GMT
            Not After : Nov 26 11:53:53 2026 GMT
        Subject: CN=B15A8D91D576D883401789C00A72CD66B3AE1AA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:06:e1:6b:df:be:cc:40:69:22:8b:82:c9:6f:
                    cd:1a:5f:07:8f:57:00:bc:5f:24:3e:bb:55:ea:cd:
                    a0:e4:70:df:34:3c:bb:c2:28:02:8b:8f:45:83:59:
                    ca:80:f8:35:47:20:0e:65:53:42:1f:e7:1c:8c:7f:
                    08:d2:23:6a:81:7f:0d:02:ac:67:71:af:10:df:b2:
                    03:58:a7:cc:93:03:03:8c:0d:86:17:d8:50:fb:bb:
                    c1:5b:b9:50:13:43:90:5d:00:33:fe:85:ec:17:6c:
                    12:6b:09:1a:65:5c:2d:da:43:15:50:73:8d:c1:24:
                    b9:df:b0:fb:b9:1c:e7:07:3e:8b:22:7a:40:7a:d3:
                    82:1f:5a:f5:36:1e:a6:2a:5b:f3:b2:9d:04:37:8a:
                    18:19:b5:39:cc:2d:69:e1:c9:fe:10:d4:c1:18:f5:
                    bf:cb:95:41:9e:e8:e7:16:65:23:dd:96:c5:19:4f:
                    58:2b:29:86:0e:20:1a:0f:d1:2a:c7:c4:9b:2d:f9:
                    07:63:6a:1e:6a:63:b9:2c:a5:ad:89:0c:cb:9e:84:
                    52:5a:22:32:ab:85:4f:14:11:40:07:09:9d:f9:f3:
                    24:27:6c:91:95:5d:6f:20:d6:c6:67:76:ca:23:9e:
                    93:df:fe:a0:e7:d7:9d:5d:c7:ee:82:2a:08:db:6f:
                    74:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5A:8D:91:D5:76:D8:83:40:17:89:C0:0A:72:CD:66:B3:AE:1A:A9
            X509v3 Authority Key Identifier:
                keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/1/326131313a333a3530303a3a2f34302d3438203d3e203433333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:3:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:94:86:eb:bd:e3:f5:d4:5b:02:66:76:be:50:94:15:df:d9:
         50:21:f4:ab:c3:4c:08:a6:ae:19:fa:c8:ec:ec:97:26:bc:e6:
         14:bc:3a:c6:0b:c8:f2:e0:1a:20:83:2b:0d:dd:ce:cf:d7:4d:
         be:11:57:78:05:ec:8d:f5:15:6b:78:c5:39:34:d8:b0:aa:87:
         cb:06:21:d7:e3:9d:5a:0f:de:42:d0:28:f7:d3:ca:98:e4:16:
         54:4e:7c:a3:b3:bd:44:33:5e:d5:e6:e4:d6:85:dd:87:58:3f:
         11:6f:da:39:84:8e:71:12:5b:2f:7e:89:35:48:fa:1d:98:e9:
         fa:56:02:b3:12:56:f9:43:d9:c3:9a:80:3d:49:8b:b3:88:7c:
         d0:92:89:d9:5b:25:c6:aa:0f:96:2c:d6:12:f0:73:81:f3:29:
         a9:5a:c8:43:0c:30:05:66:fb:db:40:5c:cb:e4:0d:e4:f7:55:
         38:0d:97:36:c6:46:f0:96:bb:c5:ef:7d:c1:5e:58:1e:7d:3a:
         45:4c:cc:5a:f1:7c:8f:fc:ca:79:c0:22:75:2b:1b:bb:3b:3d:
         7c:f9:97:b1:f1:1c:ff:e4:25:97:25:0c:58:4f:e9:1d:55:fb:
         d9:8f:cf:1a:d9:47:c9:7a:19:19:7d:08:40:52:3c:5b:37:34:
         03:f7:40:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 07:52:39 2025 by rpki-client