This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/sw0oe-dobZ6fJFG_GscuQ4GVq7o.roa
File:                     sw0oe-dobZ6fJFG_GscuQ4GVq7o.roa (raw, json)
Hash identifier:          AU4biGusQn+Pp3yN5SN18gLtQ3Tc0np/ZEieGyZNZ4w=
Subject key identifier:   B3:0D:28:7B:E7:68:6D:9E:9F:24:51:BF:1A:C7:2E:43:81:95:AB:BA
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       019B7EA6CEAE4B88D7A585E2A36681180AAC
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/sw0oe-dobZ6fJFG_GscuQ4GVq7o.roa
Signing time:             Fri 02 Jan 2026 12:20:19 +0000
ROA not before:           Fri 02 Jan 2026 12:20:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61190
IP address blocks:        185.0.30.0/24 maxlen: 24
                          2001:7f8:11c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 02:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:ce:ae:4b:88:d7:a5:85:e2:a3:66:81:18:0a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  2 12:20:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b30d287be7686d9e9f2451bf1ac72e438195abba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:25:35:97:7d:69:46:76:e6:14:19:5e:b6:89:
                    22:8d:1b:20:b5:ba:f5:74:8a:bc:de:62:07:76:a4:
                    24:53:7f:07:4c:55:03:8d:0e:bc:51:9e:ab:f8:af:
                    cb:a9:91:b5:2b:70:7c:80:ce:9c:c1:3f:7d:0c:d6:
                    c6:2a:bf:52:e5:b1:1c:31:c9:a1:6f:b7:5d:e3:73:
                    da:3e:af:d3:0f:79:f8:47:fe:3f:3c:8a:5f:dc:b3:
                    f3:ca:45:28:13:b9:72:65:1e:4f:ac:87:e0:c9:8a:
                    c6:76:d7:e0:9a:11:82:7e:fd:f7:05:e1:8b:36:03:
                    73:27:02:47:30:69:75:34:b6:d1:3b:11:21:53:4e:
                    84:ae:68:1d:e2:5c:aa:f0:50:a1:c9:5e:91:61:ea:
                    94:f7:b0:b9:f9:d2:aa:a0:91:01:53:ac:93:c3:f5:
                    a6:e4:31:f8:df:63:e6:e4:d1:0a:d0:58:d6:c9:fb:
                    c9:ca:74:76:ad:02:eb:ea:cf:26:19:db:45:b8:b0:
                    0f:8a:dd:99:db:74:ed:0e:9e:5c:16:eb:df:e1:32:
                    c2:21:42:56:23:32:59:6e:ea:ba:c2:94:b6:f0:8f:
                    71:2a:a0:95:a7:da:36:26:8a:7d:59:7e:71:19:a9:
                    a6:b5:73:67:8a:31:91:f8:9a:88:94:58:cd:64:60:
                    f7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0D:28:7B:E7:68:6D:9E:9F:24:51:BF:1A:C7:2E:43:81:95:AB:BA
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/sw0oe-dobZ6fJFG_GscuQ4GVq7o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.0.30.0/24
                IPv6:
                  2001:7f8:11c::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:44:3f:c4:02:76:50:01:75:e1:cb:84:22:ff:87:b6:7b:77:
         7b:30:74:2f:2d:b6:83:ca:9e:ea:0f:53:04:1f:f1:d8:b0:72:
         49:09:d5:2d:60:64:02:6c:88:9f:6e:51:5b:4b:a7:ae:61:b1:
         86:c2:ba:51:00:9e:51:17:cb:10:db:df:25:ad:41:8f:a6:a5:
         fa:6a:9e:0b:79:dc:c5:bd:03:b8:75:a2:22:52:5e:19:37:19:
         f5:c6:6a:be:47:61:c3:62:e0:52:e0:0e:ad:ca:c7:c1:1a:76:
         7d:10:60:e5:5d:ed:da:1a:b7:1b:bb:f2:c8:29:a8:e2:3c:63:
         d6:ca:ab:02:09:3e:17:5e:82:3b:49:65:70:10:f9:a8:20:51:
         5b:15:08:a7:ef:4a:c9:ee:cf:3e:aa:b5:b3:0d:8b:28:6d:97:
         f8:15:9c:cc:2c:d7:93:23:a8:ec:ff:b0:65:e2:dd:b2:1a:0f:
         9e:56:75:b4:2f:a1:5f:ba:81:95:7f:cf:2c:2a:a8:ec:4b:61:
         d6:66:26:78:1c:cc:e5:65:4a:c9:80:08:98:e3:69:ee:80:cd:
         93:20:fe:ec:a6:6c:27:dc:ae:03:a5:84:2a:d8:e7:14:eb:27:
         b6:59:9c:c0:04:f8:ce:0b:1e:a6:55:1b:c0:1d:9f:50:3b:f3:
         0c:dd:98:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:05:17 2026 by rpki-client