This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/SBkwHvt900-57kJpZ9RaSSUYx-4.roa
File:                     SBkwHvt900-57kJpZ9RaSSUYx-4.roa (raw, json)
Hash identifier:          0SaNKcs6gs+27OHlgQunAnN46wU1fNd07yilD0h7eqI=
Subject key identifier:   48:19:30:1E:FB:7D:D3:4F:B9:EE:42:69:67:D4:5A:49:25:18:C7:EE
Certificate issuer:       /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial:       019B7F14FB157866ADFD6178775AC3ED752C
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/SBkwHvt900-57kJpZ9RaSSUYx-4.roa
Signing time:             Fri 02 Jan 2026 14:20:40 +0000
ROA not before:           Fri 02 Jan 2026 14:20:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48147
IP address blocks:        87.107.100.0/24 maxlen: 24
                          87.107.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:fb:15:78:66:ad:fd:61:78:77:5a:c3:ed:75:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
        Validity
            Not Before: Jan  2 14:20:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4819301efb7dd34fb9ee426967d45a492518c7ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:33:b6:f1:13:7d:88:7a:10:aa:84:4f:97:71:
                    10:a8:b6:4f:86:92:7c:ac:e7:0d:89:92:2a:ba:8a:
                    7f:9d:83:f6:89:d5:49:33:68:97:fd:51:38:01:15:
                    7e:a3:19:50:92:ae:a8:0d:8f:ff:80:8b:93:f6:09:
                    3f:1a:37:cf:4d:ad:13:de:cd:ca:3f:ff:14:38:d1:
                    fa:a5:9d:05:5a:19:35:08:28:bf:15:47:33:4f:5f:
                    15:02:aa:81:05:25:5f:43:e9:66:0b:cd:92:dc:73:
                    be:c6:99:57:b4:b7:9b:cb:28:c4:24:70:91:7b:11:
                    46:2f:91:69:9f:ab:62:23:9a:c9:22:81:cc:5b:ae:
                    1e:00:9d:3c:e3:51:c2:ea:55:c0:70:a8:d3:9a:4e:
                    8d:2e:f6:ae:89:47:f3:6a:41:d7:09:b0:c3:52:d4:
                    08:c3:b0:97:c9:4e:c6:bf:2c:79:13:da:1c:bc:d7:
                    da:cb:08:5b:04:c9:e9:a8:52:12:da:d3:d1:da:2d:
                    e7:38:33:98:6b:cb:97:ef:67:2e:0d:aa:c3:3a:9f:
                    b6:85:9d:7b:73:73:96:8a:a9:32:c9:f5:b1:8b:a1:
                    e6:da:0b:39:6a:3e:84:33:e1:90:13:d5:21:2b:0d:
                    9a:77:56:a4:5a:07:54:33:03:0d:dc:16:9e:ac:51:
                    eb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:19:30:1E:FB:7D:D3:4F:B9:EE:42:69:67:D4:5A:49:25:18:C7:EE
            X509v3 Authority Key Identifier:
                keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/SBkwHvt900-57kJpZ9RaSSUYx-4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.107.100.0/24
                  87.107.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:20:a5:5a:f9:9d:e3:10:ee:57:b5:64:86:15:57:44:e9:ce:
         f5:90:74:12:98:29:32:79:63:d4:9b:4d:c9:04:8b:f4:14:22:
         fa:e1:34:09:97:92:6f:b6:4d:f1:ec:da:75:78:0c:fd:b3:40:
         ac:a6:89:70:9c:1a:06:54:b3:10:df:28:63:70:2d:18:b5:4e:
         fa:fc:da:7e:07:c2:64:52:23:bc:4c:ff:51:fa:09:b8:63:79:
         1f:0e:21:a3:7b:95:3e:d5:42:fa:cb:4a:f9:d2:22:6a:ca:27:
         f7:5e:77:2a:1e:9a:99:9d:87:30:5c:f3:8a:b5:7d:e9:f1:36:
         5b:fa:0b:62:e7:50:75:59:5b:53:c7:9a:86:d2:b3:47:67:61:
         ff:87:6b:47:6d:a5:39:5b:81:52:d4:01:86:0f:a6:bb:98:14:
         65:8d:8f:93:94:98:2d:8c:96:2e:35:50:17:38:84:df:12:d8:
         57:56:2f:02:aa:00:3a:ff:c4:9a:c8:77:73:18:90:b3:08:c4:
         31:3a:12:8b:a7:3d:12:1d:ec:0c:5e:51:27:9c:77:e2:41:a4:
         e8:eb:06:b3:e5:51:a1:95:3e:4b:42:f9:ff:8a:eb:f9:fa:e6:
         43:89:d2:31:57:31:3b:ce:cb:16:43:0d:20:34:26:df:7f:88:
         dd:d5:8e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:29:08 2026 by rpki-client