This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/SzwS05A_9OqODKb5430fwurrmnQ.roa
File:                     SzwS05A_9OqODKb5430fwurrmnQ.roa (raw, json)
Hash identifier:          D3mNcritYDIYKOE6pGbT0Jy+94ZKnyNdGFix5X9/Iuk=
Subject key identifier:   4B:3C:12:D3:90:3F:F4:EA:8E:0C:A6:F9:E3:7D:1F:C2:EA:EB:9A:74
Certificate issuer:       /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Certificate serial:       019B7D5B531CD91B9077161F3DDA47159B39
Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/SzwS05A_9OqODKb5430fwurrmnQ.roa
Signing time:             Fri 02 Jan 2026 06:18:15 +0000
ROA not before:           Fri 02 Jan 2026 06:18:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47328
IP address blocks:        83.222.124.0/22 maxlen: 24
                          185.190.188.0/24 maxlen: 24
                          185.190.189.0/24 maxlen: 24
                          212.124.96.0/22 maxlen: 24
                          212.124.100.0/22 maxlen: 24
                          212.124.104.0/22 maxlen: 24
                          212.124.108.0/22 maxlen: 24
                          212.124.112.0/21 maxlen: 24
                          212.124.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:53:1c:d9:1b:90:77:16:1f:3d:da:47:15:9b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
        Validity
            Not Before: Jan  2 06:18:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4b3c12d3903ff4ea8e0ca6f9e37d1fc2eaeb9a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7a:7e:d1:71:5f:a6:a4:c6:c9:85:2f:ca:8f:
                    42:67:0e:c8:77:7e:4a:ce:0f:62:95:ac:69:e5:74:
                    33:65:a0:e0:06:ae:d6:9c:5b:46:b3:56:eb:f5:67:
                    ed:6d:90:19:01:72:65:ee:58:2b:6d:a0:c3:05:2d:
                    95:19:88:42:8f:7f:07:c7:c1:4d:c2:07:a5:c0:6c:
                    37:eb:f9:d5:91:94:b0:c2:b2:35:90:41:88:96:47:
                    94:e5:aa:21:c4:ce:b2:cf:5d:1c:0b:0b:f8:47:8f:
                    ff:25:42:a3:88:43:c6:ad:9d:f5:a0:ad:1c:08:49:
                    de:ad:07:17:f3:84:e8:a1:64:ec:a9:bf:62:42:56:
                    1f:d6:91:cf:c7:a9:e6:a2:78:74:30:47:98:3e:f7:
                    0d:82:6c:03:e9:e7:d2:76:57:a0:9b:8a:d5:f6:54:
                    7d:16:15:3f:2a:90:26:ee:c0:70:0f:66:74:e1:d6:
                    1e:9e:9f:f6:ea:6b:c7:ef:15:54:c7:e8:20:6f:e5:
                    60:54:9d:a2:81:ca:b5:b2:db:87:7a:98:97:c7:76:
                    1f:59:f2:de:4c:9d:4b:89:ba:91:82:5b:c3:e3:3d:
                    33:31:4f:89:66:27:94:b6:14:5d:8f:d2:e4:e6:70:
                    06:18:5f:60:2e:a3:cb:57:9b:d2:39:0e:21:d6:3a:
                    7e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3C:12:D3:90:3F:F4:EA:8E:0C:A6:F9:E3:7D:1F:C2:EA:EB:9A:74
            X509v3 Authority Key Identifier:
                keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/SzwS05A_9OqODKb5430fwurrmnQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.222.124.0/22
                  185.190.188.0/23
                  212.124.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a7:f1:b9:70:e4:56:79:ad:2b:d2:0f:bb:0c:50:25:37:97:da:
         09:23:e9:fe:ee:75:94:25:d1:d2:57:68:b4:d2:6a:8b:09:fe:
         c6:6b:09:cf:41:46:7e:ba:2e:22:0c:49:51:f3:c0:39:2e:cf:
         aa:e1:cb:76:de:6e:5e:4e:8d:73:b2:b4:f5:95:1f:4f:6e:71:
         21:74:e7:9c:e8:e3:de:bd:81:47:0a:ca:c8:15:06:6d:b3:72:
         c1:97:6f:a4:8d:6b:22:01:8f:8d:d7:bc:02:fe:e6:fd:e8:e3:
         5b:2a:48:75:f1:d9:e0:d2:f5:d1:15:10:62:c4:dd:c0:53:a0:
         6d:8e:20:2d:a9:0f:90:fd:49:ad:dd:16:aa:16:45:22:31:8a:
         c5:9b:6e:c6:c1:7f:ac:d8:69:81:9f:b6:20:04:f6:59:e2:79:
         74:d1:7c:06:85:95:55:e9:be:56:44:64:92:56:b6:2c:cf:2a:
         74:1b:55:dc:4b:39:f0:f6:28:6c:ad:44:90:74:ff:3d:83:26:
         50:b0:ad:66:22:87:64:d5:6f:77:6e:65:49:1f:54:de:71:a1:
         12:5a:f5:a5:f9:81:33:26:bf:6e:45:56:3d:ce:2d:2b:29:d0:
         13:2c:5d:f3:90:72:44:4c:1d:7e:83:55:a9:9a:29:8f:6f:a7:
         d1:8f:5d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:43:36 2026 by rpki-client