This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/BV0kbYMEcmAv6rpHU2pEh-w65Xo.roa
File:                     BV0kbYMEcmAv6rpHU2pEh-w65Xo.roa (raw, json)
Hash identifier:          ouC+rh/o+/bFmEFqwkxPbJmSVE32vMaY+/Xhjpux2a0=
Subject key identifier:   05:5D:24:6D:83:04:72:60:2F:EA:BA:47:53:6A:44:87:EC:3A:E5:7A
Certificate issuer:       /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial:       019B7B369E39979F9B115266A6999420116F
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/BV0kbYMEcmAv6rpHU2pEh-w65Xo.roa
Signing time:             Thu 01 Jan 2026 20:18:55 +0000
ROA not before:           Thu 01 Jan 2026 20:18:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199485
IP address blocks:        82.196.27.0/24 maxlen: 24
                          88.212.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:9e:39:97:9f:9b:11:52:66:a6:99:94:20:11:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
        Validity
            Not Before: Jan  1 20:18:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=055d246d830472602feaba47536a4487ec3ae57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:74:de:ff:fc:c6:81:83:08:91:bd:52:22:96:
                    fe:c1:c7:06:78:86:37:0a:cd:bd:dc:e2:c4:51:22:
                    66:07:ce:87:e9:3a:a3:43:ba:90:c2:25:8f:72:7a:
                    b0:58:94:69:3e:e4:a9:ff:97:08:9c:7c:0c:0d:a3:
                    bf:e2:4e:50:2e:8a:05:fe:0f:31:56:18:b8:ea:f0:
                    18:d5:05:af:b4:49:a6:7d:eb:8a:21:99:02:06:b0:
                    3e:25:04:7e:46:34:3e:0a:14:38:19:fa:9d:75:30:
                    b8:e2:e2:01:e3:2e:e9:0b:a4:a9:a2:08:db:3c:97:
                    97:6b:e7:aa:fe:f1:08:4c:fa:78:93:5e:2e:b8:a4:
                    83:8d:85:89:a2:f2:f4:c3:1c:c4:8a:ff:04:b7:5c:
                    ad:54:a6:cf:bd:8f:8a:9a:04:aa:b9:29:dd:c7:6b:
                    d0:3e:97:7d:16:6c:95:de:50:06:5a:99:41:aa:d2:
                    32:ab:a6:58:0c:f4:b9:3b:85:06:fd:31:b9:67:64:
                    35:e8:21:e3:48:22:f6:47:5c:2e:ca:b0:d9:84:24:
                    c6:58:81:2b:31:57:8d:7f:b0:e9:6e:41:b7:85:7d:
                    c1:52:89:68:55:d7:e7:7b:70:59:be:22:11:82:a0:
                    11:09:c2:e7:d8:0c:96:64:cd:cf:c1:7f:54:eb:b9:
                    cf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5D:24:6D:83:04:72:60:2F:EA:BA:47:53:6A:44:87:EC:3A:E5:7A
            X509v3 Authority Key Identifier:
                keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/BV0kbYMEcmAv6rpHU2pEh-w65Xo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.196.27.0/24
                  88.212.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:2e:fa:cb:eb:20:b4:7c:02:ed:dc:84:5b:1e:75:dd:57:79:
         dd:cf:eb:96:5c:15:b8:66:c8:a4:b9:45:04:6d:20:eb:1d:dc:
         af:19:f7:4a:6d:e8:f6:73:ac:2e:7e:77:2a:50:bc:dd:b3:87:
         43:35:1d:d1:0f:a0:db:40:58:77:5a:ba:53:a6:d5:4e:25:43:
         2b:a3:9f:5b:a6:af:b0:3f:56:a7:45:3b:bc:9c:4a:17:79:06:
         f4:49:9c:26:1a:e3:3d:3d:55:b3:e4:3a:02:55:23:27:36:43:
         35:db:28:ba:58:08:64:35:87:95:93:34:1d:b5:99:84:21:3a:
         85:7e:de:4c:95:26:8a:7b:d2:a6:1d:8d:a2:14:ad:28:fe:eb:
         a4:46:5d:92:c2:d1:6a:dd:5f:dc:62:2d:f9:2d:ea:95:d0:26:
         25:7c:06:9e:d9:69:8c:a0:62:d0:09:26:d4:1f:c0:d6:98:58:
         d9:80:07:fd:29:1a:22:6b:f0:20:bc:f3:c5:b3:b2:fc:80:fa:
         03:63:ab:7b:76:26:0a:a5:55:9a:23:a7:72:4f:31:dd:14:2a:
         f0:6f:85:b7:d2:69:74:82:19:70:48:16:e2:23:d0:d0:8a:c0:
         9e:a6:8b:c1:f6:af:69:0d:a0:33:67:ee:b0:84:17:31:5a:97:
         59:65:cf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:35:51 2026 by rpki-client