This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/SWYonVyw6t-M4w3DUnG06hLvLEk.roa
File:                     SWYonVyw6t-M4w3DUnG06hLvLEk.roa (raw, json)
Hash identifier:          tco63oARuy5EvMpcq7VsYr3Rw0Zp8rf/jNLMSLMD8J0=
Subject key identifier:   49:66:28:9D:5C:B0:EA:DF:8C:E3:0D:C3:52:71:B4:EA:12:EF:2C:49
Certificate issuer:       /CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Certificate serial:       019B7DCB5E11D90BC38926CEA0EC7287059A
Authority key identifier: 7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/SWYonVyw6t-M4w3DUnG06hLvLEk.roa
Signing time:             Fri 02 Jan 2026 08:20:38 +0000
ROA not before:           Fri 02 Jan 2026 08:20:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59883
IP address blocks:        185.67.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:5e:11:d9:0b:c3:89:26:ce:a0:ec:72:87:05:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
        Validity
            Not Before: Jan  2 08:20:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4966289d5cb0eadf8ce30dc35271b4ea12ef2c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4b:40:2c:21:19:a5:4e:b1:06:ad:83:ed:88:
                    22:b1:19:4d:2f:95:e0:2d:8a:a4:ab:cd:0f:bf:a6:
                    a0:3f:6d:73:24:e1:bf:cc:d7:ff:0c:dd:b3:91:31:
                    27:ae:75:58:5f:16:67:0f:29:ce:1d:93:bc:f0:03:
                    21:4c:ab:c7:c9:5f:41:c0:17:c9:50:a6:68:93:94:
                    cf:fa:1e:18:a5:2a:5d:1f:57:ae:9f:c9:bb:b0:5e:
                    8c:87:84:ba:2b:2f:4b:bc:03:73:ab:f5:96:31:f2:
                    ae:34:f6:4a:5f:23:7d:a7:70:b4:40:c3:37:6a:4d:
                    3f:f8:2f:ae:0e:45:89:4f:44:6c:12:57:fc:a0:0e:
                    6b:fd:6c:d3:9b:54:d8:5a:cd:c9:d4:e0:eb:c6:93:
                    b5:ac:ef:6f:85:7e:63:30:b0:31:7f:df:50:b5:eb:
                    0c:c9:45:c8:36:66:65:f5:8e:dc:c6:c8:ac:73:cc:
                    b1:66:b9:28:8f:0d:04:56:5d:a7:4c:6d:1c:30:66:
                    3f:7a:b3:3c:76:1b:c6:12:fd:d5:bf:94:2c:ce:e5:
                    da:4f:78:78:ac:1b:e3:0b:08:43:e7:ad:a1:3c:7d:
                    4c:ab:ab:be:c7:dc:04:cc:1e:9d:4e:a7:88:7c:1f:
                    86:45:ca:43:e3:f1:f4:03:ea:f0:95:5b:f1:eb:2c:
                    bf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:66:28:9D:5C:B0:EA:DF:8C:E3:0D:C3:52:71:B4:EA:12:EF:2C:49
            X509v3 Authority Key Identifier:
                keyid:7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/SWYonVyw6t-M4w3DUnG06hLvLEk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.67.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:a2:00:ec:c9:d8:aa:12:7f:b2:a6:01:d9:ec:38:6e:19:44:
         41:53:77:81:c8:66:17:b1:1a:6b:e5:57:3d:52:b6:b8:31:96:
         cc:c4:ad:6c:bb:c6:73:4f:76:60:a7:19:d9:7b:3a:62:ec:a9:
         97:2b:05:00:39:66:56:b1:0d:ec:05:06:19:e9:4b:a8:3c:e6:
         11:82:04:c2:0b:66:e1:4b:58:7a:0e:79:15:6d:eb:dd:7e:81:
         03:e8:e9:8c:fe:ad:e9:5e:c0:02:e7:f5:bb:e3:b5:a6:24:ee:
         bb:2f:9e:0d:3b:72:fa:68:9b:03:0a:e0:b7:73:30:f2:9c:52:
         1f:1f:42:84:3d:dc:d4:16:3a:c8:af:66:a3:5d:b4:ba:5a:ce:
         f1:27:cc:98:7d:40:59:3d:e3:6d:d3:ac:d3:26:21:27:b1:c2:
         e9:0a:e6:bc:ef:9a:97:b5:8c:3b:28:04:28:e6:0c:2f:ee:6e:
         ab:da:f3:ec:60:8a:1e:1e:fd:4d:dc:25:92:f1:e9:e3:bb:c7:
         30:cb:52:d4:95:df:7f:8c:e2:d9:61:34:bb:85:13:78:a3:0b:
         48:ad:44:9b:f7:15:a8:6d:c2:a8:cb:59:08:85:af:7d:1a:03:
         2e:2a:36:88:6e:3e:02:9e:2a:d0:7a:67:83:42:0a:b0:03:c1:
         c5:94:81:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9y14R2QvDiSbOoOxyhwWaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZTBhZjQ1YWI0ZTU3NDU2ZjVhMGE0MGRmYTg0ZjhkODA2
MTA2NjQwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTY2Mjg5ZDVjYjBlYWRmOGNlMzBkYzM1MjcxYjRlYTEyZWYyYzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUtALCEZpU6xBq2D7YgisRlNL5Xg
LYqkq80Pv6agP21zJOG/zNf/DN2zkTEnrnVYXxZnDynOHZO88AMhTKvHyV9BwBfJ
UKZok5TP+h4YpSpdH1eun8m7sF6Mh4S6Ky9LvANzq/WWMfKuNPZKXyN9p3C0QMM3
ak0/+C+uDkWJT0RsElf8oA5r/WzTm1TYWs3J1ODrxpO1rO9vhX5jMLAxf99QtesM
yUXINmZl9Y7cxsisc8yxZrkojw0EVl2nTG0cMGY/erM8dhvGEv3Vv5QszuXaT3h4
rBvjCwhD562hPH1Mq6u+x9wEzB6dTqeIfB+GRcpD4/H0A+rwlVvx6yy/gQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFElmKJ1csOrfjOMNw1JxtOoS7yxJMB8GA1UdIwQY
MBaAFHvgr0WrTldFb1oKQN+oT42AYQZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZS1DdlJhdE9WMFZ2V2dwQTM2aFBqWUJoQm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9hYzFmYTktNGVjOC00MDE2LTlhZGQt
NGMzYmU5YTI4ZDkzLzEvU1dZb25WeXc2dC1NNHczRFVuRzA2aEx2TEVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9hYzFmYTktNGVjOC00MDE2LTlhZGQtNGMzYmU5YTI4ZDkz
LzEvZS1DdlJhdE9WMFZ2V2dwQTM2aFBqWUJoQm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUOgMA0G
CSqGSIb3DQEBCwUAA4IBAQBWogDsydiqEn+ypgHZ7DhuGURBU3eByGYXsRpr5Vc9
Ura4MZbMxK1su8ZzT3ZgpxnZezpi7KmXKwUAOWZWsQ3sBQYZ6UuoPOYRggTCC2bh
S1h6DnkVbevdfoED6OmM/q3pXsAC5/W747WmJO67L54NO3L6aJsDCuC3czDynFIf
H0KEPdzUFjrIr2ajXbS6Ws7xJ8yYfUBZPeNt06zTJiEnscLpCua875qXtYw7KAQo
5gwv7m6r2vPsYIoeHv1N3CWS8enju8cwy1LUld9/jOLZYTS7hRN4owtIrUSb9xWo
bcKoy1kIha99GgMuKjaIbj4CnirQemeDQgqwA8HFlIHE
-----END CERTIFICATE-----
Generated at Tue Feb 10 07:11:29 2026 by rpki-client