This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/SBaxEKn6omM3IqhrS7K0Wod8GDA.roa
File:                     SBaxEKn6omM3IqhrS7K0Wod8GDA.roa (raw, json)
Hash identifier:          SyVRYDfJpMcJBFiaCrbmVlK9aAfcGPsjIqUsOCOATQY=
Subject key identifier:   48:16:B1:10:A9:FA:A2:63:37:22:A8:6B:4B:B2:B4:5A:87:7C:18:30
Certificate issuer:       /CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Certificate serial:       019B7D5C0AF7CCE69B1E874E4DAEB6F01CF2
Authority key identifier: 01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/SBaxEKn6omM3IqhrS7K0Wod8GDA.roa
Signing time:             Fri 02 Jan 2026 06:19:02 +0000
ROA not before:           Fri 02 Jan 2026 06:19:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     13189
IP address blocks:        82.100.64.0/18 maxlen: 18
                          185.199.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:0a:f7:cc:e6:9b:1e:87:4e:4d:ae:b6:f0:1c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
        Validity
            Not Before: Jan  2 06:19:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4816b110a9faa2633722a86b4bb2b45a877c1830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f3:c4:24:97:c8:67:93:d5:ea:aa:43:3a:47:
                    df:fe:39:51:ca:8a:60:0d:5a:35:e8:ec:1a:20:0d:
                    30:2b:6d:d1:be:f2:0b:5f:f7:ed:e3:22:52:ec:5b:
                    58:0c:50:da:80:2c:c8:0c:c0:f8:a1:d8:20:b4:35:
                    89:29:b3:cd:b0:d7:4d:d1:55:4d:c9:92:76:d7:18:
                    93:78:ab:7e:11:03:33:e1:49:6f:01:ec:b0:bb:a5:
                    a1:63:95:c9:1a:0a:0a:b3:85:ca:3d:30:d7:8c:94:
                    52:66:be:e2:a2:4d:b1:66:0c:ab:43:bd:69:42:5a:
                    99:cc:4a:b1:5b:9d:2b:ee:04:46:ad:72:b5:5d:2b:
                    77:c4:a7:82:81:ce:df:46:6f:48:52:e7:8c:67:8f:
                    89:9a:8a:ea:bb:f1:b1:0a:4b:42:71:f7:c0:42:9e:
                    64:ff:f0:e7:0b:29:be:cd:e1:a2:d3:51:2a:61:59:
                    a9:94:31:1b:f6:5e:d1:fc:fb:ab:3b:cd:d4:3f:c5:
                    b4:ca:85:a7:70:c2:d2:15:28:3f:73:e9:eb:37:f2:
                    2a:6c:b2:34:f6:18:65:3f:0f:5d:b7:f3:34:62:09:
                    19:c8:9c:f0:41:09:86:7c:b4:e0:96:5b:1a:74:73:
                    3f:df:d5:20:82:f4:2b:11:22:01:14:82:66:c8:b1:
                    05:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:16:B1:10:A9:FA:A2:63:37:22:A8:6B:4B:B2:B4:5A:87:7C:18:30
            X509v3 Authority Key Identifier:
                keyid:01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/SBaxEKn6omM3IqhrS7K0Wod8GDA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.100.64.0/18
                  185.199.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:13:12:e2:ac:66:26:b5:0b:c3:ce:41:e2:3b:69:fc:03:13:
         79:11:11:dc:60:ee:a2:07:4e:5c:44:7d:2e:4a:3f:28:51:4c:
         40:77:c0:d7:da:b3:f2:83:f4:4e:1d:05:6a:03:4a:96:85:c4:
         96:a2:7d:75:dd:df:c5:34:12:6f:2c:ba:d9:cc:57:5c:ed:58:
         e9:20:0c:22:a8:82:ac:94:8b:02:56:7c:2c:ac:5a:40:6d:11:
         3e:81:3a:59:35:77:23:41:9b:92:81:9f:f1:27:7d:3a:77:22:
         d3:f0:84:ff:9f:40:12:18:20:ec:de:31:e1:ba:15:e2:52:13:
         79:34:83:95:0d:ad:73:4c:76:7c:ab:d2:77:93:5e:e8:03:f1:
         b3:fa:44:5f:b8:9b:b9:e5:d8:a5:3c:8d:9d:25:25:80:fe:84:
         0a:fa:0e:c5:80:82:53:b6:d5:a9:19:95:15:e2:03:5f:b7:96:
         2f:68:62:92:68:a9:bd:9e:6b:68:72:da:7f:55:db:71:8e:1b:
         90:dc:87:ea:c8:bc:f5:42:1c:e5:4d:73:7b:43:b9:fb:77:05:
         2b:c0:08:9d:c2:77:2f:e0:48:f2:81:fd:78:81:da:74:4c:8f:
         0d:8b:2a:5c:ac:45:2d:ad:bb:6c:e3:8f:e7:a9:46:ba:19:a6:
         63:17:5d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:11:27 2026 by rpki-client