This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/BwQVQ_CjJfdcPm0-S87mGB0Ours.roa
File:                     BwQVQ_CjJfdcPm0-S87mGB0Ours.roa (raw, json)
Hash identifier:          Ta3LRpNzq0lEJK2G/WE3LSjK7WYr/aPEY/T1lVk/51A=
Subject key identifier:   07:04:15:43:F0:A3:25:F7:5C:3E:6D:3E:4B:CE:E6:18:1D:0E:BA:BB
Certificate issuer:       /CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Certificate serial:       019B78351E4E45065DFCF7FB5756344D089E
Authority key identifier: 14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/BwQVQ_CjJfdcPm0-S87mGB0Ours.roa
Signing time:             Thu 01 Jan 2026 06:18:25 +0000
ROA not before:           Thu 01 Jan 2026 06:18:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35704
IP address blocks:        80.245.144.0/20 maxlen: 20
                          80.245.144.0/22 maxlen: 22
                          80.245.145.0/24 maxlen: 24
                          80.245.146.0/24 maxlen: 24
                          80.245.147.0/24 maxlen: 24
                          80.245.148.0/22 maxlen: 22
                          80.245.152.0/21 maxlen: 21
                          80.245.156.0/24 maxlen: 24
                          80.245.159.0/24 maxlen: 24
                          2a09:1480::/29 maxlen: 29
                          2a09:1480::/40 maxlen: 40
                          2a09:1480:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:1e:4e:45:06:5d:fc:f7:fb:57:56:34:4d:08:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14446466c71d24658c8b6f7eae5305febd17a4ba
        Validity
            Not Before: Jan  1 06:18:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=07041543f0a325f75c3e6d3e4bcee6181d0ebabb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d3:6a:2c:98:4e:2c:d6:d5:a2:df:fe:17:ad:
                    2e:a1:da:27:cc:f7:c2:58:f0:d8:fc:e8:d5:d8:91:
                    f4:d0:2a:fe:a3:3c:7e:a9:78:6f:32:cb:28:f8:55:
                    c6:df:96:0f:70:b0:a7:39:38:ab:9f:3c:d4:ab:b6:
                    6b:86:91:84:a0:e3:bd:9c:15:08:1f:e9:4a:7d:98:
                    ec:6f:18:08:29:ee:df:7c:2d:c0:ba:23:ca:8b:c1:
                    55:46:c7:10:d8:90:59:6f:21:2f:08:cb:5a:7c:e1:
                    16:d2:e7:52:fb:49:e1:d7:7c:aa:3c:a8:e6:f6:40:
                    07:bd:58:b1:ee:a6:9c:08:44:ad:a4:b6:fa:3e:93:
                    f2:e8:76:6a:04:32:61:ae:8c:4d:dc:3a:d8:48:ca:
                    4f:97:c7:7c:91:ec:ac:ec:b4:96:36:31:f6:ac:e1:
                    dd:d6:1e:05:dd:e8:db:a2:10:93:1d:2c:25:09:15:
                    39:57:0d:fa:a9:98:a6:d0:dc:4b:4e:66:81:05:f7:
                    65:ab:fb:ea:6d:10:59:14:ca:d2:9c:67:f3:f0:76:
                    f7:4a:8b:8b:c2:1f:68:cf:33:78:c3:3b:c6:af:71:
                    bc:c6:0d:2f:bf:5a:24:84:c3:3c:9a:b3:69:57:8b:
                    d1:3e:de:6a:e4:fd:d0:22:87:b1:15:08:6c:8e:1d:
                    75:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:04:15:43:F0:A3:25:F7:5C:3E:6D:3E:4B:CE:E6:18:1D:0E:BA:BB
            X509v3 Authority Key Identifier:
                keyid:14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/BwQVQ_CjJfdcPm0-S87mGB0Ours.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.245.144.0/20
                IPv6:
                  2a09:1480::/29

    Signature Algorithm: sha256WithRSAEncryption
         18:55:39:ad:08:0e:24:f6:aa:e5:d5:6a:62:0a:bb:03:9b:e1:
         97:2b:86:10:39:08:f2:54:61:16:93:74:32:54:e6:a7:99:ae:
         47:dc:ec:32:1e:10:b4:b2:99:44:1f:3a:d7:3c:04:53:d6:f8:
         d0:09:1d:81:ca:d2:96:74:04:e8:6d:89:a4:95:61:86:09:d8:
         85:e7:01:b0:50:15:3b:6f:ca:bd:f2:c3:c0:9a:63:05:81:71:
         ab:a9:41:7d:8b:d1:6d:7b:ae:80:8b:f7:3a:a4:e8:e5:a8:29:
         67:aa:f7:eb:8f:40:b1:a5:a6:67:0b:c3:12:4e:3f:85:13:c7:
         50:5d:2e:9c:d9:90:c5:44:a0:fb:98:72:29:ae:af:c6:43:19:
         ff:98:a8:62:94:46:88:60:35:ed:5a:b1:44:92:11:72:35:b6:
         c0:35:a1:b3:ad:69:71:c2:48:92:59:7b:8f:93:50:38:c7:d3:
         f7:c0:2a:cd:80:46:fe:2b:75:f7:da:a3:cd:88:24:1e:b0:7d:
         9a:15:aa:84:1e:fe:79:ee:51:8e:ae:4c:6d:95:f5:c6:9c:16:
         a6:dd:80:3e:fb:94:e1:13:fb:91:3d:12:52:a9:17:10:91:01:
         58:e6:f4:ca:ff:ef:bd:4f:45:5c:55:33:ba:59:93:6c:96:03:
         5b:32:69:aa
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZt4NR5ORQZd/Pf7V1Y0TQieMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NDQ2NDY2YzcxZDI0NjU4YzhiNmY3ZWFlNTMwNWZlYmQx
N2E0YmEwHhcNMjYwMTAxMDYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzA0MTU0M2YwYTMyNWY3NWMzZTZkM2U0YmNlZTYxODFkMGViYWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9NqLJhOLNbVot/+F60uodonzPfC
WPDY/OjV2JH00Cr+ozx+qXhvMsso+FXG35YPcLCnOTirnzzUq7ZrhpGEoOO9nBUI
H+lKfZjsbxgIKe7ffC3AuiPKi8FVRscQ2JBZbyEvCMtafOEW0udS+0nh13yqPKjm
9kAHvVix7qacCEStpLb6PpPy6HZqBDJhroxN3DrYSMpPl8d8keys7LSWNjH2rOHd
1h4F3ejbohCTHSwlCRU5Vw36qZim0NxLTmaBBfdlq/vqbRBZFMrSnGfz8Hb3SouL
wh9ozzN4wzvGr3G8xg0vv1okhMM8mrNpV4vRPt5q5P3QIoexFQhsjh11DQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAcEFUPwoyX3XD5tPkvO5hgdDrq7MB8GA1UdIwQY
MBaAFBREZGbHHSRljItvfq5TBf69F6S6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkVSa1pzY2RKR1dNaTI5LXJsTUZfcjBYcExvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81NjZmYjMtYTY0MS00ZDE5LWE1OGUt
NjQwZTA3NWJmODdmLzEvQndRVlFfQ2pKZmRjUG0wLVM4N21HQjBPdXJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC81NjZmYjMtYTY0MS00ZDE5LWE1OGUtNjQwZTA3NWJmODdm
LzEvRkVSa1pzY2RKR1dNaTI5LXJsTUZfcjBYcExvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEUPWQMA0E
AgACMAcDBQMqCRSAMA0GCSqGSIb3DQEBCwUAA4IBAQAYVTmtCA4k9qrl1WpiCrsD
m+GXK4YQOQjyVGEWk3QyVOanma5H3OwyHhC0splEHzrXPART1vjQCR2BytKWdATo
bYmklWGGCdiF5wGwUBU7b8q98sPAmmMFgXGrqUF9i9Fte66Ai/c6pOjlqClnqvfr
j0CxpaZnC8MSTj+FE8dQXS6c2ZDFRKD7mHIprq/GQxn/mKhilEaIYDXtWrFEkhFy
NbbANaGzrWlxwkiSWXuPk1A4x9P3wCrNgEb+K3X32qPNiCQesH2aFaqEHv557lGO
rkxtlfXGnBam3YA++5ThE/uRPRJSqRcQkQFY5vTK/++9T0VcVTO6WZNslgNbMmmq
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:51:34 2026 by rpki-client