The accreditation checks conducted on the source host are:
The label of the data being sent must be within the destination host's accreditation range.
The label of the data must be within the accreditation range of the emetric for the route or, if the emetric is not available, first-hop gateway's security attributes.
The label of the data must be within the accreditation range of the source host's network interface.
The DOI of an outgoing packet must match the DOI of the destination and the route's emetric (or first-hop gateway).
An outgoing packet's RIPSO label must match the RIPSO label of the destination and the route's emetric (or first-hop gateway). Alternatively, the RIPSO error can match the destination's RIPSO error, the route's emetric, or the first-hop gateway's RIPSO error.