This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/SmbJvKuZFpV6X2LbIBdQ3Q2unS8.roa
File:                     SmbJvKuZFpV6X2LbIBdQ3Q2unS8.roa (raw, json)
Hash identifier:          96JsC18JGLBW4IoziYCsWOr6Kg7mDOV+l3s14FX0t1Q=
Subject key identifier:   4A:66:C9:BC:AB:99:16:95:7A:5F:62:DB:20:17:50:DD:0D:AE:9D:2F
Certificate issuer:       /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial:       019B791064D32E68BE914CEF93245904DAEF
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/SmbJvKuZFpV6X2LbIBdQ3Q2unS8.roa
Signing time:             Thu 01 Jan 2026 10:17:55 +0000
ROA not before:           Thu 01 Jan 2026 10:17:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205235
IP address blocks:        2a00:fbe4:1ab::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:64:d3:2e:68:be:91:4c:ef:93:24:59:04:da:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
        Validity
            Not Before: Jan  1 10:17:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4a66c9bcab9916957a5f62db201750dd0dae9d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:70:84:3e:53:6e:c4:69:44:5c:16:4f:27:9c:
                    e5:05:92:3d:ea:3e:9f:49:91:af:f8:94:97:a7:bf:
                    f8:01:cc:f4:83:da:cd:1e:65:2d:e3:99:04:6d:14:
                    30:90:6f:49:75:1a:a6:06:5f:37:93:b1:5e:aa:ff:
                    ab:54:5f:0c:92:b3:77:43:f5:15:83:ab:3f:52:67:
                    70:6e:72:a9:d3:01:bf:93:a8:8a:66:0c:7c:d1:5b:
                    44:f8:1d:c9:08:62:47:e6:df:20:7d:5d:e6:b0:d9:
                    c9:7c:1e:66:ab:ad:43:d3:4b:f4:c1:3a:b3:22:35:
                    a1:78:8b:a1:61:af:50:8b:67:f0:84:71:35:fc:be:
                    63:1e:53:24:4c:6d:5b:04:52:7e:82:0a:ee:27:df:
                    f1:ca:a1:bd:48:19:e9:05:43:df:11:38:f0:d4:ed:
                    0e:77:bc:ce:15:d9:62:f8:9a:3c:b6:ac:6b:1b:e7:
                    82:8d:f2:55:22:60:75:d3:ed:ea:ba:7b:14:b6:44:
                    94:94:ea:0b:6b:f8:52:30:59:3c:5a:5d:3c:42:07:
                    2b:5c:6a:9a:0b:14:95:f8:4f:7a:d9:cc:8f:1f:e7:
                    a6:d1:96:9c:ed:3a:74:b5:f7:6d:b9:8b:ca:1e:53:
                    07:dc:a5:b2:f2:53:6f:e1:13:32:f9:d2:c7:5d:17:
                    f6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:66:C9:BC:AB:99:16:95:7A:5F:62:DB:20:17:50:DD:0D:AE:9D:2F
            X509v3 Authority Key Identifier:
                keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/SmbJvKuZFpV6X2LbIBdQ3Q2unS8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:fbe4:1ab::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:eb:35:4d:b4:2a:01:ab:d7:05:0a:fe:2b:93:c4:8f:c6:74:
         9e:b0:ab:4a:9a:07:99:7b:69:d7:1c:db:8a:b1:55:44:64:cd:
         01:03:6d:c7:e1:73:a7:d1:75:05:4b:4b:8e:27:90:42:6a:6f:
         f8:f9:99:61:ca:63:0d:44:26:66:80:b9:36:7d:08:85:71:b2:
         ab:14:73:de:7e:1d:46:ce:93:0d:63:fc:9c:f3:a9:2d:71:bd:
         62:31:4c:5e:56:02:9c:f9:66:4b:08:6d:89:1b:ae:47:7b:6a:
         74:e6:b2:62:49:72:29:13:c3:73:65:91:5b:9c:61:25:c7:ee:
         3a:0e:cf:ac:48:c9:29:1a:51:09:97:90:d0:cf:8a:ec:ae:b7:
         b9:50:cb:00:31:b5:fc:2f:16:5e:a3:0b:4d:2f:9f:4b:59:59:
         b3:04:44:3d:bf:f7:17:5e:62:60:a8:10:14:52:24:ea:95:59:
         3c:ef:72:72:7f:7e:1a:13:a8:c6:75:29:6b:9b:f0:bb:a2:1e:
         ae:01:20:70:86:71:27:e3:69:1f:5f:36:84:a5:d1:82:85:ef:
         6b:35:10:94:70:b5:51:2e:22:a2:0f:0f:20:61:24:93:55:3d:
         b2:86:00:a3:eb:b8:75:3b:f3:4d:98:3b:bc:99:66:0a:e8:bd:
         06:6d:42:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:33:25 2026 by rpki-client