This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/buvY-1Dnlbk4Qrc7RIFRlKa70YI.roa
File:                     buvY-1Dnlbk4Qrc7RIFRlKa70YI.roa (raw, json)
Hash identifier:          VCY5nxJnOHaqQQtvXIxTn62canJnkKWgYXuAmGOhKJ0=
Subject key identifier:   6E:EB:D8:FB:50:E7:95:B9:38:42:B7:3B:44:81:51:94:A6:BB:D1:82
Certificate issuer:       /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial:       019B77C77B5FB68FD4F9E6C92AAEA7CCAA55
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/buvY-1Dnlbk4Qrc7RIFRlKa70YI.roa
Signing time:             Thu 01 Jan 2026 04:18:40 +0000
ROA not before:           Thu 01 Jan 2026 04:18:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211885
IP address blocks:        176.103.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:7b:5f:b6:8f:d4:f9:e6:c9:2a:ae:a7:cc:aa:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
        Validity
            Not Before: Jan  1 04:18:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6eebd8fb50e795b93842b73b44815194a6bbd182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e2:8b:88:a8:d8:16:ea:b9:e7:09:61:0e:2c:
                    96:3d:41:aa:7b:22:9c:f3:90:66:90:e9:dc:70:06:
                    25:64:65:e2:3a:a0:e6:48:32:84:89:e4:7c:04:38:
                    3e:42:9a:c6:df:93:7b:95:3c:3d:b2:c1:3d:39:00:
                    18:fb:43:97:d6:9f:6d:9e:ee:53:10:22:45:49:6e:
                    28:bb:0a:ae:83:be:ac:9b:bc:19:6b:b8:1d:bf:ef:
                    41:34:85:aa:02:c4:03:3f:be:2f:9f:42:72:fb:46:
                    15:66:9c:41:7a:d3:90:d8:0d:f4:f0:d1:66:37:10:
                    e3:b1:b5:e2:5f:ee:8d:41:50:5d:bf:35:f6:73:d1:
                    61:a5:c7:85:1d:72:35:be:e9:a2:4c:92:c6:1d:0a:
                    ed:49:61:9f:87:55:fb:c7:7d:c5:80:71:32:5c:ba:
                    72:d7:d2:ee:fe:d7:83:83:c9:27:67:79:c2:a7:4c:
                    04:86:26:d8:0c:b0:08:42:df:bf:f8:99:09:4a:da:
                    31:aa:11:24:5c:ea:6a:e0:c1:75:17:f1:00:23:67:
                    1c:c5:af:f1:29:9d:99:c3:14:e5:3e:9f:88:d4:72:
                    66:28:bb:87:0b:a9:91:b5:e7:9f:c7:30:28:da:7a:
                    cd:fa:9b:2b:c7:0c:7a:ac:f8:3c:38:44:c7:f7:cc:
                    ca:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EB:D8:FB:50:E7:95:B9:38:42:B7:3B:44:81:51:94:A6:BB:D1:82
            X509v3 Authority Key Identifier:
                keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/buvY-1Dnlbk4Qrc7RIFRlKa70YI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.103.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:9b:0e:fe:68:a0:05:c9:c3:56:f5:a9:8e:bd:46:8c:0f:00:
         0a:3b:71:e6:18:91:be:93:c9:7a:01:67:69:3b:06:5c:ac:30:
         0d:d6:39:fa:8e:f8:60:be:7c:9b:71:63:e3:d9:e9:79:a7:64:
         4f:fa:b5:7b:80:79:27:b1:50:d0:08:2e:59:9c:47:cf:45:39:
         ad:ed:de:ec:1b:60:dd:3f:61:7b:82:e6:49:47:54:a4:88:e9:
         c5:eb:05:49:f3:0a:92:e8:a4:9c:9c:81:ea:25:32:80:3b:8b:
         5d:bc:af:96:a8:41:6e:b6:a9:a3:b6:9f:8c:49:43:95:0c:08:
         5e:7f:ae:17:10:23:9c:5d:2d:d2:10:d2:d0:de:8d:42:e6:86:
         91:f4:da:1a:d3:ba:eb:2f:28:48:0c:50:97:8a:c8:4d:eb:09:
         bf:bd:e2:5a:33:0f:1d:66:40:32:68:4f:36:17:67:68:a7:e5:
         45:e0:54:11:76:4b:c0:2e:8f:43:d5:bb:ab:b2:68:50:11:b0:
         00:44:7a:d2:73:09:39:21:0c:c3:52:71:af:2c:03:30:61:0a:
         03:53:54:06:ac:6c:50:82:d7:f1:af:34:1c:64:ec:4f:98:26:
         58:40:a1:a2:93:fe:cb:d8:30:87:7b:05:2b:87:6e:4c:35:b1:
         78:f9:fd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:31:13 2026 by rpki-client