This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SvLlyBIC6CN9YzNmvCwuspkXgPc.roa
File:                     SvLlyBIC6CN9YzNmvCwuspkXgPc.roa (raw, json)
Hash identifier:          qCxqcBvlVAk1P47ctXJNvn2lrS5UtW567l3SUt+XdNE=
Subject key identifier:   4A:F2:E5:C8:12:02:E8:23:7D:63:33:66:BC:2C:2E:B2:99:17:80:F7
Certificate issuer:       /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial:       019B791086575CF33C138B570BD1C997F481
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SvLlyBIC6CN9YzNmvCwuspkXgPc.roa
Signing time:             Thu 01 Jan 2026 10:18:04 +0000
ROA not before:           Thu 01 Jan 2026 10:18:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48300
IP address blocks:        2a12:bec0:400::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:86:57:5c:f3:3c:13:8b:57:0b:d1:c9:97:f4:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
        Validity
            Not Before: Jan  1 10:18:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4af2e5c81202e8237d633366bc2c2eb2991780f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:26:5e:a3:fc:34:da:f4:c3:b4:bb:a4:ec:0e:
                    90:1d:10:19:54:0f:e7:51:83:a9:27:2a:a9:8f:68:
                    9b:5b:d2:80:c9:0e:81:c6:df:f0:52:1d:9d:07:f8:
                    41:79:94:0c:c0:b3:2d:cf:b0:6d:51:3e:73:b2:61:
                    dc:45:3c:69:6c:fb:c5:74:34:cf:35:a1:1f:1d:7e:
                    9b:e0:d5:4c:c1:50:25:b4:f3:47:8f:b4:52:ad:d5:
                    b2:0f:8e:e3:bb:28:ab:e4:5b:d2:e0:bb:51:cc:c9:
                    e9:91:85:67:82:6b:b1:3e:fb:eb:0f:02:b3:bf:cb:
                    cd:65:20:68:2a:ea:43:28:52:46:63:f4:25:11:07:
                    0d:21:7a:37:b6:86:b0:a1:88:4d:4d:f0:b1:99:e1:
                    93:6e:01:26:76:cb:e5:0f:a6:52:1e:fa:05:e2:5e:
                    e7:0b:0b:7b:59:3f:de:1f:d5:80:51:1d:49:81:13:
                    56:c0:bb:a3:9b:a2:06:84:4b:a5:e1:5b:b6:5e:05:
                    1d:6e:85:f0:47:b3:69:bf:99:ac:8c:8d:13:22:3a:
                    26:cc:46:dd:d3:29:f3:fe:fe:0e:0a:62:09:f7:b8:
                    f4:c0:f4:67:6f:3d:29:b0:87:13:93:74:fb:ef:bd:
                    6a:83:e5:7d:04:a6:4b:4a:57:da:d4:fe:fd:3a:d3:
                    77:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F2:E5:C8:12:02:E8:23:7D:63:33:66:BC:2C:2E:B2:99:17:80:F7
            X509v3 Authority Key Identifier:
                keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SvLlyBIC6CN9YzNmvCwuspkXgPc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:bec0:400::/44

    Signature Algorithm: sha256WithRSAEncryption
         a2:a3:84:e3:8c:f4:c0:2c:2a:0b:6c:04:c7:f0:6f:35:3a:bd:
         c5:38:98:33:6f:9c:27:e6:0b:03:f2:17:db:12:f0:38:e5:e7:
         37:ef:84:33:87:25:61:08:67:78:2d:b7:0f:90:61:2e:e3:eb:
         bd:4c:45:b5:b6:e4:ef:0c:95:53:41:63:fd:a3:9d:2e:d5:11:
         8e:5e:bd:3b:df:11:38:1c:e3:b7:fb:a4:87:e4:ae:0a:e5:11:
         14:4f:99:5b:e3:5f:e2:b8:56:5d:49:84:69:44:c7:43:51:68:
         15:b6:6b:9a:8e:76:71:0f:df:f5:bd:b7:d4:fc:99:5a:4a:8f:
         e2:c7:e0:d1:7c:40:58:4b:8e:b4:a5:ee:30:4b:ad:35:3e:cd:
         39:3b:04:37:a2:26:58:44:e6:41:93:a2:f0:f3:35:91:49:53:
         85:76:d4:b7:8c:28:fe:59:7f:7e:16:f4:90:19:0e:03:1a:e8:
         0c:e5:06:f7:0c:5b:3a:a6:ea:c2:3d:7c:53:e7:d8:e2:63:d8:
         74:d2:e9:87:0f:3e:8f:79:93:8f:99:db:d4:56:c5:fe:18:9f:
         99:29:19:7b:28:f3:b3:51:89:cf:24:a0:1f:85:ff:03:5a:e7:
         a2:16:b8:bd:2e:5f:89:9a:ca:80:47:6b:b6:ed:17:ba:52:d3:
         d6:4b:68:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:49:03 2026 by rpki-client