This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Swq_PK2fX8gRLCPrvD0d1E_Ybh4.roa
File:                     Swq_PK2fX8gRLCPrvD0d1E_Ybh4.roa (raw, json)
Hash identifier:          bG1+XkivMOnnvUQvY/2HiEgsjA+MzsGlWWD5KHxdUbw=
Subject key identifier:   4B:0A:BF:3C:AD:9F:5F:C8:11:2C:23:EB:BC:3D:1D:D4:4F:D8:6E:1E
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       019B7C8054A9CD07B882967FC5118EAA4CC5
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Swq_PK2fX8gRLCPrvD0d1E_Ybh4.roa
Signing time:             Fri 02 Jan 2026 02:19:03 +0000
ROA not before:           Fri 02 Jan 2026 02:19:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44893
IP address blocks:        45.135.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:54:a9:cd:07:b8:82:96:7f:c5:11:8e:aa:4c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Jan  2 02:19:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4b0abf3cad9f5fc8112c23ebbc3d1dd44fd86e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:c7:d9:af:b1:1e:0c:53:d4:ff:1a:09:1f:
                    23:49:97:3b:45:05:42:3e:f9:3c:fc:d0:be:b9:07:
                    05:c6:70:76:19:25:85:c8:d9:26:e3:58:3c:37:92:
                    1c:90:2d:c9:0d:1e:c5:c3:da:82:88:17:c5:9e:a8:
                    7b:aa:89:4b:f2:58:88:b5:66:8f:93:fe:c0:b0:c5:
                    2e:e6:13:75:33:79:04:2a:a9:84:f6:2f:2e:aa:30:
                    61:b3:51:84:86:ee:75:92:3a:ac:8b:e6:b1:a4:a9:
                    d0:83:fa:8c:99:51:1e:f9:01:c3:54:eb:4b:c7:aa:
                    e5:63:db:e0:68:81:bc:bb:7a:11:7b:a5:e6:9b:9a:
                    19:a9:1f:46:2c:30:0e:23:8f:f5:b7:09:b8:f2:8c:
                    f8:0a:39:eb:da:47:31:51:f0:35:0d:91:80:cc:5b:
                    69:39:a4:54:e6:bc:1f:c0:96:3e:83:6b:4c:79:a0:
                    62:df:5b:a4:f7:2c:df:45:eb:4e:b0:11:84:90:77:
                    f1:7e:c9:e8:ac:05:a8:18:01:61:db:d3:54:40:06:
                    56:bd:ed:c7:b3:5f:83:59:9d:fb:bd:9d:7a:07:d8:
                    6e:e1:9d:5e:24:f4:80:29:6d:40:a0:d6:87:96:f8:
                    0a:c4:64:a5:0c:55:49:c8:5a:21:1a:02:fc:cd:9d:
                    6f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0A:BF:3C:AD:9F:5F:C8:11:2C:23:EB:BC:3D:1D:D4:4F:D8:6E:1E
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Swq_PK2fX8gRLCPrvD0d1E_Ybh4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:80:2f:73:ca:f4:23:e8:0b:fc:6d:9b:2c:eb:82:fb:56:65:
         43:dd:81:c5:e3:5a:17:35:67:5b:40:3c:84:fb:fd:10:2d:f4:
         7b:ac:67:15:1a:36:37:8f:73:56:3f:51:13:28:9e:73:bc:a9:
         d6:f3:f2:f2:c4:a7:70:c3:22:81:d0:b4:6e:99:5d:1e:6c:8f:
         d8:11:e9:dd:16:e4:6a:90:82:95:d1:bd:5e:18:35:89:25:25:
         3e:be:97:b9:e1:ab:43:ae:c5:5a:5a:8e:59:6b:e7:d4:3d:f9:
         cb:c2:1f:29:1a:fd:2a:bc:6b:f1:de:7c:0d:16:a4:95:11:9d:
         60:c5:de:2b:2e:07:56:b0:aa:4b:d8:d0:2f:9b:92:c5:18:b8:
         16:69:33:87:60:d0:c5:39:8e:c6:39:e1:fb:18:db:e9:75:e6:
         d5:2c:7c:54:71:30:af:8f:33:f3:78:3b:b5:1e:dd:64:28:00:
         95:9b:fc:8d:b4:f3:f1:2c:ad:52:c3:fd:1e:82:0d:a0:5d:88:
         86:3e:f2:f5:7a:a6:aa:ca:b5:fe:7d:a2:ef:99:1f:06:9f:6b:
         e1:a8:3c:08:f5:70:49:47:c4:58:53:f1:5d:2f:92:58:cc:87:
         43:9f:b0:5d:a8:7c:9c:bc:a1:0d:91:a0:21:05:1f:43:77:4b:
         30:84:63:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 03:55:39 2026 by rpki-client