This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/1/326131313a383038303a3a2f32392d3438203d3e20323130383037.roa
File:                     326131313a383038303a3a2f32392d3438203d3e20323130383037.roa (raw, json)
Hash identifier:          woDr+FC3WnOjzvmk0NebwcKvsWWawWtl9wfENSe7R6c=
Subject key identifier:   66:78:88:8A:A3:E7:ED:1F:8E:0E:B0:C7:C4:3E:9A:B1:E9:10:23:53
Certificate issuer:       /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial:       69F45B24D002AA0609BA33589CE97C1CCB455537
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access:      rsync://0.sb/repo/sb/1/326131313a383038303a3a2f32392d3438203d3e20323130383037.roa
Signing time:             Tue 25 Nov 2025 06:53:53 +0000
ROA not before:           Tue 25 Nov 2025 06:48:53 +0000
ROA not after:            Tue 24 Nov 2026 06:53:53 +0000
asID:                     210807
IP address blocks:        2a11:8080::/29 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f4:5b:24:d0:02:aa:06:09:ba:33:58:9c:e9:7c:1c:cb:45:55:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
        Validity
            Not Before: Nov 25 06:48:53 2025 GMT
            Not After : Nov 24 06:53:53 2026 GMT
        Subject: CN=6678888AA3E7ED1F8E0EB0C7C43E9AB1E9102353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:13:3c:3f:7f:08:ee:ec:25:3d:c0:da:08:8e:
                    78:eb:eb:af:76:fa:97:d7:97:77:60:69:df:96:e4:
                    f5:f7:5b:57:2f:4e:bb:22:be:ab:cd:94:dd:ad:1a:
                    f7:73:bc:b8:b3:15:f2:ee:33:df:15:21:b7:4d:b9:
                    c3:d6:d3:be:eb:d0:10:e2:e5:44:74:12:66:52:01:
                    a3:ff:50:b9:45:49:9d:c9:a9:3d:09:7d:aa:8d:6b:
                    4b:5a:0a:57:a4:40:30:e1:08:49:90:e4:61:00:da:
                    da:ec:4b:88:65:67:f6:f5:dd:4e:02:26:e5:7e:02:
                    ce:5b:f1:76:e4:91:cb:24:0d:c8:05:2d:d8:b3:57:
                    79:13:fd:97:81:e9:0b:9e:4a:c5:3f:b9:2a:19:86:
                    d0:c7:13:4e:e1:60:44:b1:a1:0a:ff:f6:b8:d5:13:
                    64:60:f7:d3:91:24:b9:88:08:62:e1:c0:a8:63:87:
                    fd:34:2a:e7:66:f4:d7:1f:8d:53:12:3a:a4:c6:bd:
                    28:fd:33:1a:3d:04:13:c6:66:c5:e2:74:96:4c:11:
                    b7:ad:0d:12:a5:6c:7f:98:93:24:13:47:cd:8b:a9:
                    ac:00:4c:e6:ed:4d:ca:f3:0c:bc:61:aa:73:31:6b:
                    36:ed:10:ab:a5:f3:e3:b7:f8:f8:45:cf:20:3f:6d:
                    6e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:78:88:8A:A3:E7:ED:1F:8E:0E:B0:C7:C4:3E:9A:B1:E9:10:23:53
            X509v3 Authority Key Identifier:
                keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/1/326131313a383038303a3a2f32392d3438203d3e20323130383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:8080::/29

    Signature Algorithm: sha256WithRSAEncryption
         0a:19:93:ab:0f:e8:72:54:14:bf:30:d6:05:6b:ec:60:61:b5:
         78:1d:9e:96:5d:f5:e6:9b:91:68:4d:e6:e6:2a:60:03:bc:f0:
         01:d9:c0:89:4b:6f:c4:b7:d5:8f:1a:a8:ff:72:77:b0:59:c1:
         cf:29:d1:ed:8c:88:26:ce:76:30:89:73:e7:62:97:02:eb:a5:
         7c:c9:99:5b:b2:cc:ce:59:dd:0f:ce:cc:55:6b:f9:5a:a7:d5:
         b1:95:3f:6f:c4:94:f5:cb:49:b8:b4:74:53:62:c3:61:e0:53:
         ad:09:2f:92:e3:8d:84:28:b5:20:8e:a5:99:f8:a1:ab:21:23:
         ff:89:6c:83:cf:ef:1e:75:f8:79:0c:10:3c:89:a7:2b:a6:32:
         e9:42:2d:4c:22:23:2c:7b:85:8a:db:30:80:39:0a:c6:ad:f9:
         f1:f8:a5:c1:ae:09:ce:93:b9:c7:e1:c3:eb:24:35:36:31:29:
         f3:b2:bf:d2:10:fb:28:08:38:7b:c7:f2:54:c4:a9:3f:0f:d6:
         09:79:9d:9c:f7:b4:59:d4:5f:66:3e:cd:91:84:f3:97:4a:9f:
         06:f3:db:3f:87:0a:67:f9:ca:12:e5:41:3b:28:90:66:16:e7:
         ef:42:f1:f4:cf:af:dc:49:52:10:ea:bd:4e:08:de:e1:03:19:
         b1:03:10:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----