This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/smuPovOHBHHaIAv32qcc0ZyhNkQ.roa
File:                     smuPovOHBHHaIAv32qcc0ZyhNkQ.roa (raw, json)
Hash identifier:          HcQ/8p3eoCWjnnKfMtVzm8focRBIq46dCnVV7vdjMxQ=
Subject key identifier:   B2:6B:8F:A2:F3:87:04:71:DA:20:0B:F7:DA:A7:1C:D1:9C:A1:36:44
Certificate issuer:       /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial:       019B7B35C7F20C391FF6D6448AE0BA1BBF1F
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/smuPovOHBHHaIAv32qcc0ZyhNkQ.roa
Signing time:             Thu 01 Jan 2026 20:18:00 +0000
ROA not before:           Thu 01 Jan 2026 20:18:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15440
IP address blocks:        193.187.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 20:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:c7:f2:0c:39:1f:f6:d6:44:8a:e0:ba:1b:bf:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
        Validity
            Not Before: Jan  1 20:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b26b8fa2f3870471da200bf7daa71cd19ca13644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a1:db:a7:f9:38:bb:41:9d:e2:de:a5:28:0a:
                    a5:cf:98:76:f0:32:98:9f:29:37:0c:62:2a:08:1c:
                    f5:5b:18:0c:66:58:b5:71:18:70:6d:97:04:ac:cd:
                    f9:23:8c:d9:f3:3e:4d:4d:80:72:c7:92:f0:19:64:
                    d6:75:da:74:91:50:20:c2:fb:d1:63:07:75:b2:9d:
                    04:e2:3f:19:9c:56:71:d5:17:b9:f8:ad:87:44:f5:
                    2e:51:70:0c:8e:0d:bc:45:d4:2e:8f:2b:d6:ce:be:
                    27:04:9e:ba:b0:65:ca:96:65:e3:46:65:db:43:62:
                    81:e4:b7:d5:df:8b:86:8d:43:c3:75:d4:88:91:c6:
                    c3:fc:64:d9:8a:1a:00:11:e0:32:f4:31:23:22:75:
                    ac:70:7d:a6:0c:f6:ef:8b:22:41:d4:bd:ef:ce:ac:
                    59:41:a4:ef:60:b7:12:02:03:ac:e5:c4:f9:c0:42:
                    ec:b8:11:82:78:59:60:44:f9:09:65:15:4d:fc:e3:
                    d2:49:6a:ac:2d:dd:7b:f4:85:f9:ad:0f:97:3a:30:
                    9d:37:a1:7f:19:3e:10:ca:69:19:29:55:0b:89:cc:
                    03:a5:62:37:39:bc:05:4c:12:8f:b7:d5:bb:d3:18:
                    57:49:2a:dd:d6:ea:2c:da:60:c3:c4:20:52:65:2c:
                    7c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6B:8F:A2:F3:87:04:71:DA:20:0B:F7:DA:A7:1C:D1:9C:A1:36:44
            X509v3 Authority Key Identifier:
                keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/smuPovOHBHHaIAv32qcc0ZyhNkQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.187.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:e6:70:be:bc:11:de:48:56:5b:4a:21:c3:4f:c2:aa:b8:34:
         f3:fd:95:b6:1f:0f:bf:68:20:e2:ba:c4:81:d5:f5:7d:04:84:
         4e:4e:2c:b8:bb:49:a5:5d:52:10:a9:d7:25:3b:9c:6c:60:ab:
         9e:70:2c:f4:85:55:a8:d4:07:6b:68:35:b3:9c:72:da:01:9e:
         0c:f9:c9:d8:d2:65:97:2a:99:e1:50:bc:e6:ff:ec:eb:31:25:
         c0:b0:85:1d:38:82:35:2a:9e:00:f1:e8:aa:41:56:a3:5f:ca:
         61:a2:ad:2f:b4:d5:f7:a5:e4:c5:21:d7:2b:1a:da:d3:44:91:
         17:df:b3:74:da:f8:0f:24:f7:50:97:b5:cd:3f:9d:c6:be:e7:
         45:80:1e:7d:6d:aa:01:19:bd:fe:04:31:40:83:ae:26:02:93:
         b0:f5:88:4a:08:d7:f9:d6:b5:a2:21:56:00:79:db:d0:bd:bc:
         1e:10:53:18:a9:ba:48:97:8b:8b:0a:b4:47:c2:52:1f:61:2c:
         f1:e7:37:9e:0b:0a:43:9a:14:c2:c8:c6:d1:b4:7c:e7:f3:45:
         78:b3:93:64:9a:4e:f6:0b:42:8c:f6:93:db:90:c8:7c:f3:7d:
         c9:48:39:dc:4b:34:c6:3b:6c:d8:33:b8:9d:85:7b:e0:20:bd:
         5c:84:c7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 06:05:05 2026 by rpki-client