This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/SMb-rYCNgB0GGUftiR0-0tMpWdM.roa
File:                     SMb-rYCNgB0GGUftiR0-0tMpWdM.roa (raw, json)
Hash identifier:          uzxaI3f+u6QODKvTbBU5GWkNbNSg2FXZc5mS8nAJPjw=
Subject key identifier:   48:C6:FE:AD:80:8D:80:1D:06:19:47:ED:89:1D:3E:D2:D3:29:59:D3
Certificate issuer:       /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial:       019B783450DB3DD2533B1D3652086B01A0EF
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/SMb-rYCNgB0GGUftiR0-0tMpWdM.roa
Signing time:             Thu 01 Jan 2026 06:17:33 +0000
ROA not before:           Thu 01 Jan 2026 06:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     5550
IP address blocks:        153.19.0.0/16 maxlen: 16
                          2001:4070::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:50:db:3d:d2:53:3b:1d:36:52:08:6b:01:a0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
        Validity
            Not Before: Jan  1 06:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=48c6fead808d801d061947ed891d3ed2d32959d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a1:ed:80:0e:1c:60:3e:cb:59:9c:49:47:c3:
                    8e:b1:34:09:a4:b2:4d:4b:03:7a:fa:30:98:32:83:
                    aa:09:58:1b:7e:59:30:0c:65:7d:44:29:1e:ee:18:
                    b6:30:1b:07:7f:6e:42:f3:dc:73:e6:a6:73:70:40:
                    f4:56:10:49:5a:47:83:83:c0:8c:43:bd:9a:a5:bd:
                    fd:3b:b0:33:64:0f:da:8a:45:55:1d:aa:bd:c0:99:
                    12:de:a6:f9:e0:b3:ba:a2:fa:6a:db:f1:cd:d8:3a:
                    7c:43:5c:f5:74:fd:60:f5:43:3c:2d:88:f2:7a:94:
                    5e:b4:fb:76:6d:6c:0e:2f:d8:5e:b0:77:bd:7a:e9:
                    f7:6d:34:1c:e7:2d:d9:bb:e7:ab:73:28:d9:c4:c5:
                    db:47:ce:25:9c:e8:f2:8e:cc:97:39:6d:0d:50:00:
                    24:bb:ed:17:44:80:ed:4d:f6:07:4c:9f:7d:49:87:
                    8f:64:a4:d2:b5:ab:df:4a:3e:70:a3:4f:eb:10:30:
                    bd:ce:6d:cb:9f:ee:9b:61:ad:ec:4e:2c:c4:53:76:
                    22:2f:4a:2e:d8:49:88:e7:90:a3:57:44:78:ed:f5:
                    f5:44:00:40:1e:e3:5c:69:4e:2d:d3:94:a6:79:8b:
                    a3:a2:b6:04:3e:59:9d:2a:b8:90:2c:59:c5:e5:b1:
                    c4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C6:FE:AD:80:8D:80:1D:06:19:47:ED:89:1D:3E:D2:D3:29:59:D3
            X509v3 Authority Key Identifier:
                keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/SMb-rYCNgB0GGUftiR0-0tMpWdM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.19.0.0/16
                IPv6:
                  2001:4070::/33

    Signature Algorithm: sha256WithRSAEncryption
         3f:fd:fa:6a:b1:17:b0:f4:bb:e6:f2:3b:8d:3c:eb:7e:f3:d2:
         2e:f8:9e:50:f1:75:fe:dd:cd:69:fd:38:7f:d8:93:ff:8f:00:
         41:fe:f5:25:17:a3:8f:00:19:b3:ac:b0:8b:90:07:e2:6a:54:
         a2:c5:d5:e7:97:54:f3:26:19:32:29:fc:f9:c3:bd:e3:39:b9:
         ee:0a:b1:ff:73:b0:fc:d3:f9:78:ae:2f:19:30:82:2e:3f:0c:
         22:91:02:04:68:3c:d2:44:4a:6d:1c:1e:9b:0d:42:53:e8:29:
         dc:48:5f:76:60:1b:c3:a7:2f:69:b4:35:06:78:1e:da:9d:ca:
         34:cc:58:f9:31:71:2a:e0:b2:60:b8:c4:44:7b:a5:19:ce:33:
         ea:30:14:99:8e:16:b9:3c:51:e1:29:af:a5:20:e8:07:06:d5:
         34:13:50:88:fb:21:7d:23:7b:bc:75:3f:f6:3f:33:0b:4e:16:
         44:57:f2:34:44:2c:f8:04:5d:2f:3a:4c:ac:c4:51:93:a4:95:
         24:38:7e:06:91:73:67:a1:a3:25:a6:83:2b:64:11:81:a2:d9:
         7a:10:86:c6:b8:0c:c2:53:b8:66:ba:ee:7b:37:5b:33:b5:6b:
         8f:51:00:f9:88:f3:48:1e:af:22:ee:11:0c:f8:fc:54:6f:2f:
         7e:89:df:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:38 2026 by rpki-client