This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/SBPxsejssvnNBd6B5rjqdkZcDBg.roa
File:                     SBPxsejssvnNBd6B5rjqdkZcDBg.roa (raw, json)
Hash identifier:          Qf+8cA8rtOdKbVLhu1ogxEr7n5tmA+r1Dz37TcVI92U=
Subject key identifier:   48:13:F1:B1:E8:EC:B2:F9:CD:05:DE:81:E6:B8:EA:76:46:5C:0C:18
Certificate issuer:       /CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Certificate serial:       019B7EA571DC35C2760472FF20F1DE34DBE7
Authority key identifier: 9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/SBPxsejssvnNBd6B5rjqdkZcDBg.roa
Signing time:             Fri 02 Jan 2026 12:18:50 +0000
ROA not before:           Fri 02 Jan 2026 12:18:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59790
IP address blocks:        5.154.243.0/24 maxlen: 24
                          176.56.40.0/22 maxlen: 22
                          185.65.208.0/22 maxlen: 22
                          185.109.144.0/22 maxlen: 22
                          185.182.164.0/22 maxlen: 22
                          185.227.52.0/22 maxlen: 22
                          193.93.140.0/23 maxlen: 23
                          193.124.14.0/24 maxlen: 24
                          193.124.84.0/24 maxlen: 24
                          194.135.47.0/24 maxlen: 24
                          194.135.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a5:71:dc:35:c2:76:04:72:ff:20:f1:de:34:db:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
        Validity
            Not Before: Jan  2 12:18:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4813f1b1e8ecb2f9cd05de81e6b8ea76465c0c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8d:aa:a8:92:9e:1b:81:61:4c:a8:85:18:f5:
                    8e:c7:5f:e0:b4:f8:bc:67:cb:49:fc:4d:43:4c:c4:
                    62:a4:d4:98:b3:9b:7a:a6:8e:74:95:4c:4f:47:9e:
                    59:ee:45:15:b9:c9:16:6d:05:b6:20:bd:0f:79:b0:
                    87:9a:77:1a:63:47:09:4c:d1:9c:2d:3f:87:93:0f:
                    cb:7a:cd:e5:a9:ae:56:17:fc:7b:c6:18:12:a9:b5:
                    9a:cd:7d:09:8f:b8:70:e5:0e:c8:c7:71:f2:23:c3:
                    94:6c:9f:f8:49:55:d0:c4:93:75:c3:04:3c:cc:c7:
                    0e:6e:f9:c9:0f:c7:cd:b2:92:2d:fb:d1:25:d2:d0:
                    52:ea:00:eb:2b:02:9a:50:1e:50:d3:47:88:df:8b:
                    f1:a8:32:56:cc:4c:d6:28:05:c0:06:bf:9b:df:51:
                    32:1e:6b:6f:6c:6d:2e:0a:4f:c8:57:b9:6a:63:a5:
                    e7:a8:ea:bd:01:b6:41:bb:53:b9:32:77:09:7f:63:
                    a8:8c:1f:6b:26:b6:d5:03:de:e7:69:80:67:a6:0f:
                    f3:f0:7d:0a:6f:5a:bd:d2:38:bb:79:8b:1e:95:9e:
                    bf:17:1b:f7:e6:70:a0:e3:76:4c:bf:0d:71:ce:4c:
                    c7:31:9a:b0:f4:74:c9:08:92:39:66:73:6e:67:6f:
                    dd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:13:F1:B1:E8:EC:B2:F9:CD:05:DE:81:E6:B8:EA:76:46:5C:0C:18
            X509v3 Authority Key Identifier:
                keyid:9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/SBPxsejssvnNBd6B5rjqdkZcDBg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.154.243.0/24
                  176.56.40.0/22
                  185.65.208.0/22
                  185.109.144.0/22
                  185.182.164.0/22
                  185.227.52.0/22
                  193.93.140.0/23
                  193.124.14.0/24
                  193.124.84.0/24
                  194.135.47.0/24
                  194.135.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:4f:d4:3b:40:df:50:3a:cf:a0:0d:14:09:c3:ae:0a:88:40:
         cd:22:55:54:c9:43:3c:e2:4b:32:57:39:16:8a:1a:89:b0:0f:
         91:97:db:55:1a:64:f2:4c:95:bb:84:8e:73:2b:2b:0c:e1:68:
         ca:c5:39:1f:1e:60:7b:f8:31:0d:38:12:6a:cb:56:43:5c:de:
         7e:dc:21:76:8a:47:08:df:e3:76:76:ce:aa:0c:f6:f5:69:f9:
         bc:c7:6c:34:92:ea:3c:66:1e:29:fc:c8:76:5f:53:e8:46:25:
         64:ec:64:41:e0:9f:80:77:c8:c2:0a:6c:5b:bf:bd:0d:9c:9a:
         1e:ac:cf:9a:ab:e6:44:6e:ce:d9:9f:90:c3:51:be:ec:ed:96:
         6f:50:5f:b5:5c:7e:ad:4f:b9:63:35:ff:18:7e:47:b5:d2:81:
         fc:1c:31:11:3c:28:c2:8e:d3:28:0c:48:b1:f4:2c:cf:03:7d:
         73:d2:4a:02:f5:f9:56:c5:59:62:0e:34:7c:60:a5:ac:c6:94:
         85:9b:64:93:16:d9:c4:79:53:3b:15:ff:6b:7b:16:33:01:4d:
         5e:a9:57:59:dc:11:85:73:69:1b:9b:59:a8:f7:f8:de:8c:64:
         55:44:7a:24:7a:c6:f1:a7:39:18:80:77:8f:0c:2b:6d:a3:0f:
         57:79:01:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:54:48 2026 by rpki-client