This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/1/39342e3132342e37392e302f32342d3234203d3e20323130383037.roa
File:                     39342e3132342e37392e302f32342d3234203d3e20323130383037.roa (raw, json)
Hash identifier:          RVHnVRpkw2yjQQsWSDcyzvgMk2GPFyClTmdi1MobMZw=
Subject key identifier:   70:4A:FD:5F:AF:D0:D3:61:9B:D6:29:27:C7:87:AA:72:6A:16:93:33
Certificate issuer:       /CN=917b088922d0f33feca164e08554ec992daa39c5
Certificate serial:       387D1378686B758A7716E328F6DF042EA5A0D2F3
Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
Subject info access:      rsync://0.sb/repo/sb/1/39342e3132342e37392e302f32342d3234203d3e20323130383037.roa
Signing time:             Tue 25 Nov 2025 06:53:53 +0000
ROA not before:           Tue 25 Nov 2025 06:48:53 +0000
ROA not after:            Tue 24 Nov 2026 06:53:53 +0000
asID:                     210807
IP address blocks:        94.124.79.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7d:13:78:68:6b:75:8a:77:16:e3:28:f6:df:04:2e:a5:a0:d2:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5
        Validity
            Not Before: Nov 25 06:48:53 2025 GMT
            Not After : Nov 24 06:53:53 2026 GMT
        Subject: CN=704AFD5FAFD0D3619BD62927C787AA726A169333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:96:3d:ca:65:88:2d:9e:61:4c:4a:d6:23:1c:
                    4f:a3:6d:82:13:a0:de:81:67:40:29:84:ed:fb:6d:
                    dc:5a:2a:33:9b:01:78:0a:ea:83:1c:13:5a:b1:7c:
                    5c:f0:57:2f:2e:84:7d:78:c1:f3:ba:e0:92:cd:73:
                    87:a7:fa:6c:d1:fa:4b:09:53:e5:58:3d:4a:38:01:
                    26:de:ec:0b:5c:f2:c7:d0:88:c5:9e:34:cb:bb:03:
                    14:ee:c2:61:37:88:79:70:73:55:30:9b:82:b3:3e:
                    68:0d:5e:56:a1:a9:80:00:1a:60:ec:db:5b:2b:69:
                    ee:38:f5:ea:94:2a:5f:85:76:61:3b:6f:d5:79:71:
                    0d:62:f8:5a:58:6f:fe:43:2f:20:36:31:73:57:06:
                    2c:eb:bd:50:2a:40:c5:ce:10:69:e6:53:c8:e1:18:
                    5d:a1:7d:d3:f6:d0:6d:6f:9e:a8:bc:b7:75:43:f4:
                    97:cb:2f:23:b3:70:67:85:47:f0:93:41:ea:c1:a1:
                    3c:df:24:1b:ff:5e:5d:1d:ca:98:03:1d:15:a5:6c:
                    b7:89:40:c6:8e:26:07:a8:9a:c7:f1:b8:1e:0d:39:
                    36:c9:dc:fd:dd:43:1a:92:eb:9b:da:45:70:04:1f:
                    06:f8:af:46:8c:d5:c1:07:27:01:a4:1a:69:cd:63:
                    db:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4A:FD:5F:AF:D0:D3:61:9B:D6:29:27:C7:87:AA:72:6A:16:93:33
            X509v3 Authority Key Identifier:
                keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/1/39342e3132342e37392e302f32342d3234203d3e20323130383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.124.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:3a:1f:d9:ed:c1:21:ad:34:20:2f:66:84:b8:0f:66:68:43:
         4d:76:ee:c1:04:6f:86:9f:2c:3c:6a:8c:f3:f9:ee:cb:ad:bf:
         b1:7e:9a:f6:4f:e9:ba:21:33:bf:a9:89:3d:b7:93:d8:28:2a:
         c9:ce:ce:a9:be:d4:fa:01:5a:30:bc:c7:08:c3:7e:c7:86:19:
         5d:59:e0:47:b9:c2:66:29:17:c2:54:8d:a2:ed:30:32:59:03:
         69:50:35:53:d8:2f:da:03:77:9f:ef:9a:c1:d3:62:ff:f8:61:
         3f:a8:bb:cc:53:e3:14:6a:45:78:8a:6c:06:37:33:97:c1:61:
         ce:1f:4f:d7:86:74:42:01:a9:54:2f:08:54:eb:37:b9:75:e0:
         bc:cb:c7:cd:4c:77:f9:50:ca:d6:c6:82:5a:b2:1c:8d:42:e9:
         af:16:06:0e:9f:35:a8:60:e3:8d:45:31:33:7f:ad:65:58:ec:
         57:21:ff:78:a6:93:d8:16:d9:12:d8:74:65:3d:49:aa:a0:f5:
         55:e8:08:4d:d8:09:0f:ee:c6:22:9b:09:1e:4f:da:ae:c5:eb:
         89:80:10:de:f0:42:4a:86:d7:55:16:68:18:ab:1f:44:52:05:
         54:07:82:2a:dc:10:45:27:8a:b5:c9:f1:79:84:15:95:cd:42:
         e4:a7:38:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----