This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/bwTWMTGlp3PAxUq-8Oa3B8x8GyU.roa
File:                     bwTWMTGlp3PAxUq-8Oa3B8x8GyU.roa (raw, json)
Hash identifier:          aTZ6UiSLkIspKvCJio7i5SmhPXj5+KI+3Y+Vu1e4DAU=
Subject key identifier:   6F:04:D6:31:31:A5:A7:73:C0:C5:4A:BE:F0:E6:B7:07:CC:7C:1B:25
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       019B7759030756E252BC710B426839A50122
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/bwTWMTGlp3PAxUq-8Oa3B8x8GyU.roa
Signing time:             Thu 01 Jan 2026 02:18:00 +0000
ROA not before:           Thu 01 Jan 2026 02:18:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201373
IP address blocks:        193.192.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:03:07:56:e2:52:bc:71:0b:42:68:39:a5:01:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 02:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6f04d63131a5a773c0c54abef0e6b707cc7c1b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b6:3a:ee:2f:64:3d:df:db:85:2e:13:9a:de:
                    e8:60:8f:62:d9:07:33:f8:95:ad:be:b6:ad:27:8b:
                    89:bd:25:04:00:76:60:a6:36:40:f0:7c:bc:ec:1f:
                    d6:0d:fd:39:d6:e2:8d:2d:f8:31:57:ba:7d:2c:fd:
                    bd:56:68:a0:db:32:f5:d5:a7:f7:2b:a5:46:5c:5c:
                    12:ac:71:c8:44:89:a6:75:b1:7c:f7:8b:27:cb:ad:
                    bd:d1:d8:e0:8e:b7:4e:6f:a4:11:dd:50:ea:2e:e2:
                    14:a3:8a:a3:d9:da:9a:cf:d4:b6:76:d1:01:3f:3b:
                    5a:c8:59:69:0f:92:81:5b:4b:0b:84:c5:7d:ff:c3:
                    63:22:3f:16:a8:3b:73:22:e1:08:94:02:e2:82:37:
                    12:f7:bb:20:65:65:10:76:b4:c2:be:45:34:8b:94:
                    c4:38:0f:3e:f8:3c:f3:19:bc:66:6c:9c:55:f8:36:
                    fc:44:03:1e:8f:c7:6d:fb:3e:76:61:73:bf:70:bb:
                    9f:52:dc:46:ed:ec:4f:84:db:bb:60:b9:9d:3a:ac:
                    fd:b2:fd:b3:9a:5a:8e:d9:28:66:cb:19:b3:43:22:
                    03:c2:00:24:04:cf:93:fa:60:38:c6:ec:29:62:ec:
                    6c:7e:66:6e:6c:ff:8e:2f:48:8d:c6:89:9a:4a:b2:
                    75:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:04:D6:31:31:A5:A7:73:C0:C5:4A:BE:F0:E6:B7:07:CC:7C:1B:25
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/bwTWMTGlp3PAxUq-8Oa3B8x8GyU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.192.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:9c:9d:47:5d:76:7d:66:ed:b4:98:df:f7:77:7a:11:fe:9e:
         fc:64:48:fc:dc:72:71:6f:1d:3a:88:ef:4c:71:c4:74:e5:69:
         79:7d:16:87:cd:f9:f4:08:75:a4:c3:40:13:7a:4a:35:8e:e3:
         65:2e:f7:16:3e:d4:1d:c6:08:5e:84:75:88:78:fe:00:8f:5c:
         3b:06:1d:d1:72:d0:d4:f0:8a:84:fc:ae:55:f2:e0:4f:49:76:
         50:1b:c0:6f:73:6f:77:7d:bc:29:ee:56:2d:2b:77:1f:48:79:
         1c:e4:28:1d:71:80:ea:26:78:b2:88:a1:17:2e:da:d2:bd:8a:
         1e:74:e5:46:8d:a4:e3:32:a1:b5:8e:6f:c5:db:d2:2d:ec:18:
         96:95:71:77:0e:4f:fe:d1:de:3a:be:ea:1f:6b:35:16:6f:3f:
         d3:55:a7:bb:4f:67:a9:c9:a0:d8:3c:1b:40:df:83:ac:03:04:
         71:b1:56:82:dd:12:29:2c:3b:ca:3b:f4:61:04:42:cd:df:a7:
         e6:d4:b4:3d:55:74:c6:c0:77:d6:9f:fd:33:0a:69:79:4c:fd:
         36:a8:18:c5:b7:93:fe:63:41:3d:98:f6:6f:6c:5d:4b:3a:9c:
         9d:87:37:16:9d:7e:c6:66:ec:55:ba:6d:07:56:fb:17:be:ee:
         43:16:b7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:31:40 2026 by rpki-client