This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/BvDqb9cc-WJGTsR3tIgfxMVXMzg.roa
File:                     BvDqb9cc-WJGTsR3tIgfxMVXMzg.roa (raw, json)
Hash identifier:          M3gvEkXIu3VF4OHCFfprYhRQqSznoxtSmwJpexYP1d8=
Subject key identifier:   06:F0:EA:6F:D7:1C:F9:62:46:4E:C4:77:B4:88:1F:C4:C5:57:33:38
Certificate issuer:       /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial:       019B78A333B118B32D05AE334843A87130B4
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/BvDqb9cc-WJGTsR3tIgfxMVXMzg.roa
Signing time:             Thu 01 Jan 2026 08:18:39 +0000
ROA not before:           Thu 01 Jan 2026 08:18:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214201
IP address blocks:        81.26.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:33:b1:18:b3:2d:05:ae:33:48:43:a8:71:30:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
        Validity
            Not Before: Jan  1 08:18:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=06f0ea6fd71cf962464ec477b4881fc4c5573338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:47:8e:11:a7:0d:6f:b7:da:56:9c:3a:35:06:
                    e1:d1:87:55:2a:b1:e9:d4:5c:9d:41:ca:41:96:8f:
                    75:16:56:9f:03:db:c1:eb:fc:db:9a:3b:e3:cd:ea:
                    55:d4:f7:28:c9:d9:dc:46:51:7d:8d:04:85:c4:c5:
                    b2:a3:ed:9d:65:7d:2b:0e:00:c8:b9:0c:50:4f:7d:
                    9d:ee:15:b8:97:b5:ef:ba:db:e0:99:56:01:07:f1:
                    51:f4:0e:a2:8c:31:26:bf:76:cc:79:f7:ae:99:a5:
                    f7:e9:d0:8c:89:4d:40:cd:f2:e4:19:63:71:66:29:
                    44:c2:e1:80:b9:d5:63:97:d6:a1:25:f2:58:36:57:
                    a0:9a:b4:99:c0:37:74:65:c9:14:51:42:ba:36:ad:
                    c3:de:24:7c:d4:d3:99:db:bb:09:d3:b8:ec:9c:77:
                    41:3b:c8:ad:2a:88:af:82:8d:b4:28:c2:33:18:b7:
                    9d:96:4b:62:b0:9e:aa:27:37:5c:a4:1e:76:ea:46:
                    c7:a5:c4:0c:5e:b9:d0:c0:6b:c9:8d:62:bc:3d:e4:
                    a2:34:3c:90:83:7d:e4:e1:1c:77:0b:83:88:a8:a7:
                    a8:69:3b:ac:02:e1:e9:5f:38:fc:d8:77:33:df:48:
                    c8:0c:f4:e3:f7:1c:95:47:49:ee:15:49:ce:2e:ee:
                    34:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F0:EA:6F:D7:1C:F9:62:46:4E:C4:77:B4:88:1F:C4:C5:57:33:38
            X509v3 Authority Key Identifier:
                keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/BvDqb9cc-WJGTsR3tIgfxMVXMzg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.26.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:7d:b4:2a:6f:15:51:cd:3d:40:43:40:48:4d:df:91:3b:b2:
         2e:c3:20:ad:8b:41:12:70:97:7c:dd:65:fa:12:e3:01:c8:2f:
         4b:cb:7a:2e:1c:42:51:0d:5e:49:e8:5a:66:e8:ec:00:cd:ef:
         d1:10:47:a8:e8:ae:25:79:57:3c:0a:68:a4:12:4c:ce:40:0b:
         15:3c:7e:5b:26:77:eb:07:b6:b1:ad:48:2f:f4:3b:dd:04:cf:
         72:05:25:21:c6:c5:7a:28:a3:f2:07:1d:26:d1:b5:f2:53:1b:
         1f:47:53:99:0d:b0:ff:55:f0:88:b6:b1:d4:f8:43:68:c9:47:
         09:e5:78:ee:11:52:74:a0:e0:6b:87:29:50:d3:97:93:ca:9a:
         dd:3a:f4:9e:25:0d:81:4b:77:3b:10:06:fe:da:04:6b:05:be:
         3c:12:1d:eb:cf:ea:52:79:6a:7e:88:35:e1:bf:d7:a6:64:1a:
         42:68:99:62:1a:bf:8c:bf:0d:34:6a:72:82:9d:8e:b7:42:0e:
         f1:ef:3d:03:a4:bb:b6:5a:ef:67:45:7b:71:27:b2:48:82:88:
         35:58:3b:b8:68:84:ed:ed:3a:94:c6:09:9b:b3:a7:b0:d2:6a:
         2f:3e:5f:db:82:40:16:94:78:98:db:0f:e0:b5:ec:e3:33:55:
         47:4a:e7:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4ozOxGLMtBa4zSEOocTC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy
NzAxMjMwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmYwZWE2ZmQ3MWNmOTYyNDY0ZWM0NzdiNDg4MWZjNGM1NTczMzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EeOEacNb7faVpw6NQbh0YdVKrHp
1FydQcpBlo91FlafA9vB6/zbmjvjzepV1PcoydncRlF9jQSFxMWyo+2dZX0rDgDI
uQxQT32d7hW4l7XvutvgmVYBB/FR9A6ijDEmv3bMefeumaX36dCMiU1AzfLkGWNx
ZilEwuGAudVjl9ahJfJYNlegmrSZwDd0ZckUUUK6Nq3D3iR81NOZ27sJ07jsnHdB
O8itKoivgo20KMIzGLedlktisJ6qJzdcpB526kbHpcQMXrnQwGvJjWK8PeSiNDyQ
g33k4Rx3C4OIqKeoaTusAuHpXzj82Hcz30jIDPTj9xyVR0nuFUnOLu40oQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAbw6m/XHPliRk7Ed7SIH8TFVzM4MB8GA1UdIwQY
MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt
YmZiNGJhMzBlNDVhLzEvQnZEcWI5Y2MtV0pHVHNSM3RJZ2Z4TVZYTXpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh
LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURqdMA0G
CSqGSIb3DQEBCwUAA4IBAQA6fbQqbxVRzT1AQ0BITd+RO7IuwyCti0EScJd83WX6
EuMByC9Ly3ouHEJRDV5J6Fpm6OwAze/REEeo6K4leVc8CmikEkzOQAsVPH5bJnfr
B7axrUgv9DvdBM9yBSUhxsV6KKPyBx0m0bXyUxsfR1OZDbD/VfCItrHU+ENoyUcJ
5XjuEVJ0oOBrhylQ05eTyprdOvSeJQ2BS3c7EAb+2gRrBb48Eh3rz+pSeWp+iDXh
v9emZBpCaJliGr+Mvw00anKCnY63Qg7x7z0DpLu2Wu9nRXtxJ7JIgog1WDu4aITt
7TqUxgmbs6ew0movPl/bgkAWlHiY2w/gtezjM1VHSucZ
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:47:45 2026 by rpki-client