This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SWLNmYYm6Zq0D2jQ9d5JvtPt1cA.roa
File:                     SWLNmYYm6Zq0D2jQ9d5JvtPt1cA.roa (raw, json)
Hash identifier:          jzLKP/SbyyXvM8oP+/GO3/4crN42V8JTzUOZ8ggXFRk=
Subject key identifier:   49:62:CD:99:86:26:E9:9A:B4:0F:68:D0:F5:DE:49:BE:D3:ED:D5:C0
Certificate issuer:       /CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Certificate serial:       019B7AC79B0552E51D1BDDD59DB4AAC14A38
Authority key identifier: 4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SWLNmYYm6Zq0D2jQ9d5JvtPt1cA.roa
Signing time:             Thu 01 Jan 2026 18:17:40 +0000
ROA not before:           Thu 01 Jan 2026 18:17:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201454
IP address blocks:        45.140.0.0/22 maxlen: 22
                          185.73.24.0/22 maxlen: 22
                          185.112.24.0/22 maxlen: 22
                          188.94.216.0/21 maxlen: 21
                          2a01:6f80::/32 maxlen: 32
                          2a02:c340::/29 maxlen: 29
                          2a05:3f00::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:9b:05:52:e5:1d:1b:dd:d5:9d:b4:aa:c1:4a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
        Validity
            Not Before: Jan  1 18:17:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4962cd998626e99ab40f68d0f5de49bed3edd5c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ce:83:34:6d:a5:72:79:6a:82:24:02:9a:13:
                    59:c9:1a:96:e7:24:8d:19:67:f5:17:62:c3:5c:e7:
                    cb:3e:d8:aa:37:3c:81:17:cc:d3:e2:ff:fa:2f:7f:
                    a5:66:76:32:a2:61:67:49:05:e4:ba:61:4a:8d:f1:
                    b8:02:38:f3:b1:55:1b:67:8a:83:f6:ce:dc:bc:2c:
                    a3:03:66:45:42:e6:03:ea:a2:5c:c5:42:63:36:aa:
                    49:3f:09:0d:4f:27:9f:f5:53:28:d9:ef:8b:70:b6:
                    20:62:a4:9f:41:4f:22:c7:ff:65:ed:1e:6d:20:3f:
                    eb:a9:8d:b0:92:1d:fe:ed:08:f4:14:9d:db:e3:80:
                    79:f0:e9:44:45:0e:60:44:ce:a2:07:69:d3:2c:b0:
                    f1:db:82:eb:61:b1:36:28:96:9c:fd:66:84:39:ba:
                    26:9a:a0:14:28:9c:04:a1:f7:3a:72:a6:ce:d2:6f:
                    5e:5b:c9:6d:d2:0a:b3:7f:29:9a:a9:56:cf:0a:14:
                    a7:a1:2f:61:bc:8f:a1:93:c3:ad:52:8e:84:5e:57:
                    af:f3:19:69:22:38:83:3f:c1:d6:d3:5d:a6:b9:b1:
                    74:3f:d5:6a:99:a1:a8:68:e0:a9:1d:6c:08:c2:05:
                    78:3e:fe:6f:61:08:6d:df:46:61:a9:9d:48:d5:bc:
                    a0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:62:CD:99:86:26:E9:9A:B4:0F:68:D0:F5:DE:49:BE:D3:ED:D5:C0
            X509v3 Authority Key Identifier:
                keyid:4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SWLNmYYm6Zq0D2jQ9d5JvtPt1cA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.0.0/22
                  185.73.24.0/22
                  185.112.24.0/22
                  188.94.216.0/21
                IPv6:
                  2a01:6f80::/32
                  2a02:c340::/29
                  2a05:3f00::/29

    Signature Algorithm: sha256WithRSAEncryption
         c0:be:b6:98:10:e0:51:6b:a3:a7:70:71:e8:5b:fe:7f:54:aa:
         60:ba:7f:70:5d:0a:9d:30:8a:8b:00:34:2a:0f:30:a1:df:e3:
         9d:1a:7c:5d:00:d9:c1:74:63:5b:37:85:52:94:39:1a:7a:4e:
         ca:7f:40:5b:ac:de:65:a6:b1:65:c6:3b:83:12:58:df:5d:0b:
         42:56:37:81:8f:d4:79:4b:35:f5:ee:a9:7c:5a:50:a5:58:23:
         75:03:43:2d:c3:15:3f:ab:b7:a6:98:30:43:51:26:c5:32:7a:
         a7:98:a7:25:7a:6d:e0:e0:7c:8b:4f:85:ea:57:22:37:65:5f:
         9c:7d:a1:35:60:09:12:d3:ae:f4:da:48:a8:cc:75:ea:ac:77:
         d0:68:a8:16:fe:56:07:89:20:8f:a5:e6:16:5c:a8:f2:29:b4:
         7d:ef:ef:3f:56:86:1f:cb:db:b4:ef:1e:c1:a6:47:76:78:fa:
         dc:79:4a:69:56:f7:5c:d2:ff:fa:9d:1f:4c:3c:26:55:3f:68:
         6c:1f:22:d5:fa:c2:4b:af:b4:84:67:44:e8:fa:b8:06:d8:6c:
         90:79:00:fd:3a:7c:da:38:9d:3d:34:1e:73:67:20:de:71:af:
         60:6f:b7:88:7a:84:32:03:1b:d2:ea:1a:ef:47:cd:fe:e3:a7:
         f3:a9:3e:ca
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAZt6x5sFUuUdG93VnbSqwUo4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOWM1ZTU2YWFjZDAxZmZiMjgyNWE5MzFlZDVlZGU0MWMz
ZjkyZTYwHhcNMjYwMTAxMTgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTYyY2Q5OTg2MjZlOTlhYjQwZjY4ZDBmNWRlNDliZWQzZWRkNWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM6DNG2lcnlqgiQCmhNZyRqW5ySN
GWf1F2LDXOfLPtiqNzyBF8zT4v/6L3+lZnYyomFnSQXkumFKjfG4AjjzsVUbZ4qD
9s7cvCyjA2ZFQuYD6qJcxUJjNqpJPwkNTyef9VMo2e+LcLYgYqSfQU8ix/9l7R5t
ID/rqY2wkh3+7Qj0FJ3b44B58OlERQ5gRM6iB2nTLLDx24LrYbE2KJac/WaEObom
mqAUKJwEofc6cqbO0m9eW8lt0gqzfymaqVbPChSnoS9hvI+hk8OtUo6EXlev8xlp
IjiDP8HW012mubF0P9VqmaGoaOCpHWwIwgV4Pv5vYQht30ZhqZ1I1bygDQIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFElizZmGJumatA9o0PXeSb7T7dXAMB8GA1UdIwQY
MBaAFEqcXlaqzQH/soJakx7V7eQcP5LmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3B4ZVZxck5BZi15Z2xxVEh0WHQ1Qndfa3VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jMDEwZGMtMDkxMC00MzQxLThiMzMt
MmU2OTRiMzM5OTMzLzEvU1dMTm1ZWW02WnEwRDJqUTlkNUp2dFB0MWNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jMDEwZGMtMDkxMC00MzQxLThiMzMtMmU2OTRiMzM5OTMz
LzEvU3B4ZVZxck5BZi15Z2xxVEh0WHQ1Qndfa3VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAeBAIAATAYAwQCLYwAAwQC
uUkYAwQCuXAYAwQDvF7YMBsEAgACMBUDBQAqAW+AAwUDKgLDQAMFAyoFPwAwDQYJ
KoZIhvcNAQELBQADggEBAMC+tpgQ4FFro6dwcehb/n9UqmC6f3BdCp0wiosANCoP
MKHf450afF0A2cF0Y1s3hVKUORp6Tsp/QFus3mWmsWXGO4MSWN9dC0JWN4GP1HlL
NfXuqXxaUKVYI3UDQy3DFT+rt6aYMENRJsUyeqeYpyV6beDgfItPhepXIjdlX5x9
oTVgCRLTrvTaSKjMdeqsd9BoqBb+VgeJII+l5hZcqPIptH3v7z9Whh/L27TvHsGm
R3Z4+tx5SmlW91zS//qdH0w8JlU/aGwfItX6wkuvtIRnROj6uAbYbJB5AP06fNo4
nT00HnNnIN5xr2Bvt4h6hDIDG9LqGu9Hzf7jp/OpPso=
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:40:37 2026 by rpki-client