This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/SWXQ_yriq_Z6hdo9s_S-su9IOcY.roa
File:                     SWXQ_yriq_Z6hdo9s_S-su9IOcY.roa (raw, json)
Hash identifier:          npoD/pw5DyWoHlNaWh25GF0UUSoDz0q9Mp04Q5//gew=
Subject key identifier:   49:65:D0:FF:2A:E2:AB:F6:7A:85:DA:3D:B3:F4:BE:B2:EF:48:39:C6
Certificate issuer:       /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial:       019B7C13607355226AB5B156159E3837056A
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/SWXQ_yriq_Z6hdo9s_S-su9IOcY.roa
Signing time:             Fri 02 Jan 2026 00:20:03 +0000
ROA not before:           Fri 02 Jan 2026 00:20:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     20473
IP address blocks:        5.145.118.0/24 maxlen: 24
                          5.145.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 09:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:60:73:55:22:6a:b5:b1:56:15:9e:38:37:05:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
        Validity
            Not Before: Jan  2 00:20:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4965d0ff2ae2abf67a85da3db3f4beb2ef4839c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:95:5b:39:d0:e3:4f:c6:8f:b9:e0:2c:8e:
                    6f:0c:30:f8:cf:23:3a:52:b6:b8:b5:b6:39:65:18:
                    31:e9:46:55:20:a5:70:a4:58:a7:8f:f5:83:22:0d:
                    73:dd:e3:a0:94:27:d6:62:1e:a5:6e:74:97:a3:f2:
                    bb:8f:5f:61:a6:c0:de:d1:15:c8:cd:3b:ee:c5:e7:
                    1e:e4:96:79:21:bd:09:fd:48:b2:5f:aa:b1:69:02:
                    64:7f:be:9d:5e:d8:8a:80:67:3d:d8:fe:28:34:8a:
                    2e:37:53:eb:22:2d:26:3d:c7:bb:d5:be:fd:dc:93:
                    29:7a:03:67:04:9b:23:4d:01:a7:9b:39:8d:3f:b1:
                    06:fe:12:c9:fa:d5:67:19:b9:8a:8c:c2:a6:c2:ec:
                    1f:ce:83:9d:46:44:85:4b:82:2b:cd:4f:af:2f:c5:
                    1e:fd:ab:f8:1e:1a:fc:eb:94:2f:32:d8:b6:e4:dc:
                    3d:8c:40:22:a4:09:9e:30:41:56:57:76:ca:45:89:
                    7c:33:bc:90:37:1b:d5:05:6f:29:17:e8:a1:11:29:
                    1a:50:df:10:25:77:62:a2:44:39:96:5a:19:63:31:
                    e9:98:7f:ef:96:9c:d8:db:6e:26:23:4b:3d:48:c1:
                    15:e6:9e:95:bf:43:f3:f0:c6:bf:f1:bd:7f:33:17:
                    25:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:65:D0:FF:2A:E2:AB:F6:7A:85:DA:3D:B3:F4:BE:B2:EF:48:39:C6
            X509v3 Authority Key Identifier:
                keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/SWXQ_yriq_Z6hdo9s_S-su9IOcY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.145.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:bf:c3:75:cd:f1:4d:eb:03:27:2a:7b:80:7a:1f:a9:fa:75:
         e7:75:11:9f:d4:5d:13:0e:8b:da:db:f8:17:1d:17:5f:5a:bb:
         85:17:eb:8c:cf:3a:82:cb:5d:7a:40:36:9e:a0:1a:4a:34:1e:
         dc:4b:21:0d:11:ba:19:33:7d:14:c2:80:72:99:f9:4a:d7:a3:
         a2:07:f6:8e:d6:42:67:1e:99:99:d2:c2:65:1d:94:76:93:7b:
         42:c7:bd:25:d6:fa:ad:dd:9d:6d:9a:bd:c4:da:57:54:02:bd:
         e7:a7:fc:1c:0b:d0:60:13:dc:1f:00:3c:76:d3:e9:e8:10:9b:
         32:86:5a:72:1d:4f:f3:8f:ef:77:2f:81:d8:cc:29:28:91:ce:
         da:49:95:f0:90:a2:16:06:6b:b1:54:d9:f2:a7:a1:f8:94:13:
         4b:cb:0d:10:0c:e0:d3:e2:c3:71:bb:eb:d5:6d:91:2e:e7:ae:
         6f:02:cd:91:f9:34:67:59:31:85:ef:75:ff:4a:10:e3:3f:41:
         53:60:b3:59:4d:d7:2e:b2:c4:7e:4b:17:ef:8e:40:18:63:86:
         57:a8:21:9d:a1:e7:09:0c:e1:5b:3c:ff:db:1f:01:0b:70:be:
         e0:61:81:12:45:cb:9d:b0:d5:43:17:5a:a0:fb:22:00:04:74:
         2c:47:04:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8E2BzVSJqtbFWFZ44NwVqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZTI2OTQ2NTJhYTI5ODUxMWVkYWZiZTE4ZDJiMWNkYmM3
OTI2MzgwHhcNMjYwMTAyMDAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTY1ZDBmZjJhZTJhYmY2N2E4NWRhM2RiM2Y0YmViMmVmNDgzOWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQCVWznQ40/Gj7ngLI5vDDD4zyM6
Ura4tbY5ZRgx6UZVIKVwpFinj/WDIg1z3eOglCfWYh6lbnSXo/K7j19hpsDe0RXI
zTvuxece5JZ5Ib0J/UiyX6qxaQJkf76dXtiKgGc92P4oNIouN1PrIi0mPce71b79
3JMpegNnBJsjTQGnmzmNP7EG/hLJ+tVnGbmKjMKmwuwfzoOdRkSFS4IrzU+vL8Ue
/av4Hhr865QvMti25Nw9jEAipAmeMEFWV3bKRYl8M7yQNxvVBW8pF+ihESkaUN8Q
JXdiokQ5lloZYzHpmH/vlpzY224mI0s9SMEV5p6Vv0Pz8Ma/8b1/Mxcl9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEll0P8q4qv2eoXaPbP0vrLvSDnGMB8GA1UdIwQY
MBaAFNbiaUZSqimFEe2vvhjSsc28eSY4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXVKcFJsS3FLWVVSN2EtLUdOS3h6Yng1SmpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84Y2M1MDYtN2U3MS00NzA1LWEyODkt
YjQyMzY0ODk1MDgzLzEvU1dYUV95cmlxX1o2aGRvOXNfUy1zdTlJT2NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC84Y2M1MDYtN2U3MS00NzA1LWEyODktYjQyMzY0ODk1MDgz
LzEvMXVKcFJsS3FLWVVSN2EtLUdOS3h6Yng1SmpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBZF2MA0G
CSqGSIb3DQEBCwUAA4IBAQAgv8N1zfFN6wMnKnuAeh+p+nXndRGf1F0TDova2/gX
HRdfWruFF+uMzzqCy116QDaeoBpKNB7cSyENEboZM30UwoBymflK16OiB/aO1kJn
HpmZ0sJlHZR2k3tCx70l1vqt3Z1tmr3E2ldUAr3np/wcC9BgE9wfADx20+noEJsy
hlpyHU/zj+93L4HYzCkokc7aSZXwkKIWBmuxVNnyp6H4lBNLyw0QDODT4sNxu+vV
bZEu565vAs2R+TRnWTGF73X/ShDjP0FTYLNZTdcussR+SxfvjkAYY4ZXqCGdoecJ
DOFbPP/bHwELcL7gYYESRcudsNVDF1qg+yIABHQsRwQl
-----END CERTIFICATE-----
Generated at Mon Jan 26 12:22:09 2026 by rpki-client