This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/scbnCacDGbwAgXPlseqNuVHKXp0.roa
File:                     scbnCacDGbwAgXPlseqNuVHKXp0.roa (raw, json)
Hash identifier:          wfVDM3bGNx8GG4Hh6J1oMRghCSW2WpnRzRxXrNjLYlc=
Subject key identifier:   B1:C6:E7:09:A7:03:19:BC:00:81:73:E5:B1:EA:8D:B9:51:CA:5E:9D
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       019B7F8543679C74B8C95D017D03237D4063
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/scbnCacDGbwAgXPlseqNuVHKXp0.roa
Signing time:             Fri 02 Jan 2026 16:23:18 +0000
ROA not before:           Fri 02 Jan 2026 16:23:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204872
IP address blocks:        195.216.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:43:67:9c:74:b8:c9:5d:01:7d:03:23:7d:40:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: Jan  2 16:23:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b1c6e709a70319bc008173e5b1ea8db951ca5e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9d:98:79:1f:b0:ea:3d:09:a3:97:89:b4:2e:
                    c1:00:8c:cd:ee:21:59:14:30:9d:71:cc:c9:a7:86:
                    c5:88:bd:07:57:70:fe:5f:09:5d:c2:f2:ae:06:49:
                    52:39:1b:c6:5a:bd:ae:da:d1:de:5e:fb:85:2a:a3:
                    f3:94:8a:c0:28:22:d2:07:01:3a:1f:65:aa:ec:e7:
                    97:b5:72:af:1e:60:09:4e:34:f1:49:55:a7:f7:9b:
                    f9:7d:cc:16:f5:b6:ab:f6:90:d1:9d:4e:21:df:bd:
                    95:74:5d:8d:2b:9f:98:91:3b:b0:f2:43:32:9e:bc:
                    87:d9:02:df:4e:45:65:3d:9e:df:38:7e:59:95:6e:
                    10:38:9b:d5:e7:0b:ce:83:be:58:f4:46:1f:48:83:
                    53:4a:f7:51:cf:f0:9c:39:f2:b8:78:f7:3c:bc:5d:
                    87:75:c0:e9:1e:58:fe:69:77:2a:0f:df:ab:3f:8d:
                    ce:54:26:a0:f7:21:5b:d1:b8:b0:19:46:ad:d1:41:
                    43:52:4e:0b:a2:7c:9b:c0:2d:d3:2a:01:e4:5e:ec:
                    f6:6c:b6:cf:f3:da:0f:68:b9:23:be:46:6c:56:2f:
                    53:b1:70:3d:35:03:84:2d:66:52:af:b6:3b:fb:26:
                    2c:e4:f7:51:90:7e:f2:7f:fb:d2:ca:02:a7:4f:d6:
                    cb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C6:E7:09:A7:03:19:BC:00:81:73:E5:B1:EA:8D:B9:51:CA:5E:9D
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/scbnCacDGbwAgXPlseqNuVHKXp0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.216.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:c1:37:bf:b0:cc:74:3b:14:a9:69:7e:0d:a8:4d:1c:ef:ab:
         3a:03:b2:e1:4e:a1:de:42:39:6e:b4:72:e6:99:22:6b:59:6c:
         d4:e2:f5:8c:bb:b4:5d:80:c6:32:ce:ec:7c:12:a2:a7:f2:9c:
         0c:d4:3c:df:1a:eb:35:99:2d:83:65:46:04:40:09:65:59:48:
         04:79:44:19:eb:e0:2e:02:f8:57:df:c2:63:cb:ad:27:a1:3f:
         ea:90:ba:4d:e6:06:3d:ef:17:aa:65:bc:a3:6e:f9:a8:9e:27:
         d9:97:6c:08:50:96:f0:a2:4d:ff:72:49:3f:bb:30:25:9d:14:
         99:e2:b8:c1:25:af:fa:a4:48:fd:a6:7e:7c:24:e1:21:4d:d6:
         9d:5f:f1:dd:09:af:85:78:93:27:da:0a:db:3b:89:0a:c0:ff:
         3d:6f:92:eb:e5:15:59:85:f0:fd:0a:e5:2a:ad:f1:cc:7c:fb:
         ea:b6:34:ce:0d:3d:62:82:5f:eb:51:c8:1f:f6:7f:cc:fa:0c:
         7e:94:24:8d:dc:3b:60:08:ce:da:64:48:36:7f:06:87:b0:c0:
         01:39:2f:b1:32:e8:7c:0d:eb:a3:a6:76:99:b2:69:08:9d:d2:
         51:ab:9e:0b:7e:2e:95:8a:06:49:cf:0c:c2:7a:4a:96:3e:d0:
         c4:03:03:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:50:49 2026 by rpki-client