This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/SW1-GU0vjRIMOdgKtktv6UJ2u5A.roa
File:                     SW1-GU0vjRIMOdgKtktv6UJ2u5A.roa (raw, json)
Hash identifier:          HYXdjq1s2CF7qtOBfZMvLVsZCpKL4ygUQusnxbvr3Iw=
Subject key identifier:   49:6D:7E:19:4D:2F:8D:12:0C:39:D8:0A:B6:4B:6F:E9:42:76:BB:90
Certificate issuer:       /CN=d46c4359926ac7f3acf8dc520e787a366271387c
Certificate serial:       019B7AC8B704B0748C5275F8066260829313
Authority key identifier: D4:6C:43:59:92:6A:C7:F3:AC:F8:DC:52:0E:78:7A:36:62:71:38:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GxDWZJqx_Os-NxSDnh6NmJxOHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/SW1-GU0vjRIMOdgKtktv6UJ2u5A.roa
Signing time:             Thu 01 Jan 2026 18:18:52 +0000
ROA not before:           Thu 01 Jan 2026 18:18:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200446
IP address blocks:        193.42.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GxDWZJqx_Os-NxSDnh6NmJxOHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 18:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:b7:04:b0:74:8c:52:75:f8:06:62:60:82:93:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46c4359926ac7f3acf8dc520e787a366271387c
        Validity
            Not Before: Jan  1 18:18:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=496d7e194d2f8d120c39d80ab64b6fe94276bb90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:76:43:f1:51:4d:21:bc:65:3f:94:67:1d:20:
                    3a:35:7b:8a:42:cc:4e:70:59:e3:0c:6d:93:dc:79:
                    3b:0f:35:83:9c:2a:d5:f8:87:ec:eb:67:d8:a8:cf:
                    dc:69:ed:98:18:13:84:5e:4c:90:2a:82:c7:e2:f1:
                    23:37:d2:38:09:78:be:7f:76:0e:7b:03:8f:ac:e4:
                    46:9c:c9:7a:f8:6f:9f:bb:7d:ef:5f:58:4a:26:b2:
                    d6:23:32:08:eb:7a:2f:f7:0b:07:6a:8c:eb:75:77:
                    2d:78:f0:55:1d:01:6f:12:fa:8a:ab:03:8c:da:b1:
                    68:40:04:be:bc:24:ef:22:56:17:58:29:c5:32:d6:
                    24:85:b8:21:dc:88:a8:96:01:89:18:42:f1:4e:5a:
                    6b:5c:e4:e9:16:f7:8c:6d:52:87:f4:af:fb:4a:47:
                    81:28:24:fe:ed:0f:ba:f5:2b:ba:33:50:8c:12:d4:
                    74:54:7f:26:d5:ed:89:4f:d8:50:a2:d7:17:be:b8:
                    ab:cc:51:ef:5c:6b:b2:f6:7f:68:68:a3:6e:23:a0:
                    13:3a:8a:28:f0:e5:91:73:1f:71:60:49:dd:58:bd:
                    17:26:2c:f8:a8:31:12:60:80:85:8a:f9:cf:e6:36:
                    eb:b4:56:0d:ba:9e:d4:ad:ae:d8:ae:7d:f5:ba:db:
                    6d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6D:7E:19:4D:2F:8D:12:0C:39:D8:0A:B6:4B:6F:E9:42:76:BB:90
            X509v3 Authority Key Identifier:
                keyid:D4:6C:43:59:92:6A:C7:F3:AC:F8:DC:52:0E:78:7A:36:62:71:38:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GxDWZJqx_Os-NxSDnh6NmJxOHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/SW1-GU0vjRIMOdgKtktv6UJ2u5A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:47:62:7b:95:12:cd:67:57:98:dc:93:4d:66:4e:34:68:77:
         f9:c7:82:c1:95:fa:ff:24:aa:be:2d:db:96:f3:27:f8:07:07:
         e2:6f:ee:8a:cf:da:ab:a6:ef:c1:bc:b4:01:33:dd:6f:e3:88:
         1e:fa:ba:ad:09:3c:7c:f6:c8:a2:74:00:ae:50:10:b9:b9:f3:
         d2:67:2a:be:19:e0:c8:7d:3d:fe:6c:e9:e7:16:10:66:2d:f8:
         4e:9c:35:a2:f9:08:1e:16:e6:c1:49:b0:87:27:ae:e9:0a:21:
         9a:4f:79:10:25:c3:07:bc:ea:2c:78:9d:50:37:38:ad:70:8b:
         4a:9d:b2:6f:f2:80:ab:44:bb:7c:68:fe:80:e6:b8:b2:c7:49:
         a0:5b:40:a5:33:4c:bf:66:0e:0f:e2:79:15:c4:1a:9c:6d:5d:
         21:72:ec:47:3e:e0:f7:72:bf:b0:65:9d:1b:67:76:fb:18:92:
         ae:40:f9:85:4d:5a:70:3b:ca:a6:52:37:99:0d:52:87:ed:b4:
         a3:e1:e9:61:4c:8c:01:38:f8:c7:d1:b6:8f:be:57:51:e1:d9:
         af:d6:fc:54:ae:2a:8f:c6:b1:5c:d5:88:93:e3:e8:e1:18:30:
         b0:31:ae:8b:38:cd:69:7e:f0:6c:a8:cf:e9:59:e3:b7:82:91:
         4d:1c:bb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 02:12:58 2026 by rpki-client