This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/SwUYDEAlxO6M5eWOj4TfdQ0JQ2c.roa
File:                     SwUYDEAlxO6M5eWOj4TfdQ0JQ2c.roa (raw, json)
Hash identifier:          kp4VVBnJ9x9RoYER3ShnXFsDjH+5JSgU9IM02fkmGYw=
Subject key identifier:   4B:05:18:0C:40:25:C4:EE:8C:E5:E5:8E:8F:84:DF:75:0D:09:43:67
Certificate issuer:       /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial:       019B7DCAAD43219E01443378C4A880DC22C7
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/SwUYDEAlxO6M5eWOj4TfdQ0JQ2c.roa
Signing time:             Fri 02 Jan 2026 08:19:53 +0000
ROA not before:           Fri 02 Jan 2026 08:19:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50533
IP address blocks:        134.101.64.0/18 maxlen: 18
                          134.101.64.0/19 maxlen: 19
                          134.101.64.0/24 maxlen: 24
                          134.101.96.0/20 maxlen: 20
                          134.101.112.0/21 maxlen: 21
                          134.101.126.0/24 maxlen: 24
                          134.101.127.0/24 maxlen: 24
                          145.14.224.0/20 maxlen: 20
                          145.14.224.0/23 maxlen: 23
                          185.160.248.0/22 maxlen: 22
                          2a00:17f1::/32 maxlen: 32
                          2a00:17f4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:ad:43:21:9e:01:44:33:78:c4:a8:80:dc:22:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
        Validity
            Not Before: Jan  2 08:19:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4b05180c4025c4ee8ce5e58e8f84df750d094367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6b:85:03:18:9c:c6:dd:6a:f3:fc:aa:98:53:
                    5a:10:78:42:c2:cb:48:d0:b9:69:e1:fc:c2:8c:6e:
                    24:60:0a:2a:cd:87:4f:12:1e:5f:ac:99:ce:9c:74:
                    b2:7c:47:d6:e8:1e:2f:77:6e:bb:63:5a:71:14:e9:
                    71:ef:fe:7c:72:3c:f5:d1:5b:a5:00:16:3d:36:b0:
                    33:01:43:b9:e9:b2:85:04:ed:af:3d:16:3e:16:d7:
                    59:d6:74:d3:e7:20:fe:a9:c5:3c:95:f9:c8:cc:ec:
                    35:bd:49:8b:c1:d9:7c:5c:f5:25:3d:f3:20:b9:86:
                    0b:ff:3c:7e:59:b8:88:ae:49:63:7d:f2:82:cd:36:
                    a1:24:e9:3f:51:50:da:0b:ef:b0:35:4f:65:f2:0f:
                    ea:59:42:8e:6f:c0:91:57:0f:8a:9e:ad:7f:02:13:
                    94:9e:f8:e9:a6:c9:39:9d:e7:c3:71:9f:75:e1:f8:
                    d4:53:e3:fa:22:fb:78:15:04:ce:4f:2d:b6:6e:e0:
                    13:58:b2:1b:c6:4d:0a:9f:98:b7:98:6e:51:36:98:
                    f1:0b:5b:02:90:24:a6:62:79:8c:2c:1e:9b:94:1f:
                    07:77:3a:7c:0e:d9:37:e1:6f:96:57:83:60:42:cf:
                    cd:fb:2e:5f:73:21:25:8d:5d:57:67:18:3f:aa:b6:
                    21:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:05:18:0C:40:25:C4:EE:8C:E5:E5:8E:8F:84:DF:75:0D:09:43:67
            X509v3 Authority Key Identifier:
                keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/SwUYDEAlxO6M5eWOj4TfdQ0JQ2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.101.64.0/18
                  145.14.224.0/20
                  185.160.248.0/22
                IPv6:
                  2a00:17f1::/32
                  2a00:17f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:97:93:96:a6:b4:a9:24:a9:1d:81:23:97:63:83:34:88:3b:
         6d:95:3d:94:ba:8e:df:d2:bb:0b:aa:ec:1f:72:38:0d:8d:97:
         e3:65:92:97:c6:99:6a:01:93:9c:da:cf:b1:e0:4d:81:de:dd:
         c7:ff:71:d1:ae:6b:0d:88:cc:f3:04:e4:bd:60:3d:e8:cb:60:
         73:41:7d:6e:d4:5c:f2:cc:38:d0:02:4e:23:9c:f0:e4:0e:43:
         fd:09:9c:b0:47:f6:ea:7a:b3:91:a6:9c:b1:71:0d:8a:3e:f6:
         9b:08:76:aa:b7:e1:f3:bb:02:eb:c2:26:0d:32:b2:5f:1b:37:
         56:6f:76:23:31:36:3b:a2:cb:47:9b:af:77:8f:fe:77:0a:ad:
         f7:17:4e:2c:36:11:6d:dc:12:b3:d3:db:34:dc:30:ab:8b:f3:
         b6:f5:7a:68:28:fc:1a:69:b7:6d:ce:6d:e8:71:6d:1e:71:47:
         8b:f0:63:3e:82:c3:d2:54:ca:76:2d:2a:0a:ec:c2:b5:0f:a8:
         9d:6a:e5:a5:d3:84:ce:82:3b:46:9d:16:cd:d9:f4:c1:96:17:
         60:ef:77:72:ff:ac:29:78:4c:73:d8:3d:9d:47:d3:69:1c:f8:
         9e:ae:6b:a8:66:85:e0:07:66:4e:76:f5:7a:2b:c3:df:b6:3b:
         f2:d5:dd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:43:08 2026 by rpki-client