This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/BueJ9IY3nf_rDMa23vpFaJSkb9k.roa
File:                     BueJ9IY3nf_rDMa23vpFaJSkb9k.roa (raw, json)
Hash identifier:          t3Pa1JPMsA+MoTdIQq1Kq9QcJTG4CNbhCFMe/4riaqs=
Subject key identifier:   06:E7:89:F4:86:37:9D:FF:EB:0C:C6:B6:DE:FA:45:68:94:A4:6F:D9
Certificate issuer:       /CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Certificate serial:       019B7B3681AF9F1C211F8EFD7F69D63E2B1F
Authority key identifier: FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/BueJ9IY3nf_rDMa23vpFaJSkb9k.roa
Signing time:             Thu 01 Jan 2026 20:18:48 +0000
ROA not before:           Thu 01 Jan 2026 20:18:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8245
IP address blocks:        195.26.192.0/19 maxlen: 19
                          195.26.198.0/24 maxlen: 24
                          195.26.216.0/22 maxlen: 24
                          195.26.220.0/22 maxlen: 22
                          212.236.0.0/16 maxlen: 24
                          212.236.0.0/18 maxlen: 18
                          212.236.0.0/24 maxlen: 24
                          212.236.1.0/24 maxlen: 24
                          212.236.2.0/24 maxlen: 24
                          212.236.11.0/24 maxlen: 24
                          212.236.12.0/24 maxlen: 24
                          212.236.160.0/19 maxlen: 19
                          212.236.192.0/18 maxlen: 18
                          2a02:2750::/32 maxlen: 48
                          2a02:2750:40::/42 maxlen: 42
                          2a02:2750:80::/42 maxlen: 42
                          2a02:2750:cafe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:81:af:9f:1c:21:1f:8e:fd:7f:69:d6:3e:2b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
        Validity
            Not Before: Jan  1 20:18:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=06e789f486379dffeb0cc6b6defa456894a46fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:14:5f:ac:51:48:c6:62:e6:cc:52:8a:65:69:
                    c0:4c:2c:a4:20:07:cf:01:d0:7c:62:2a:76:65:fe:
                    f9:fc:6f:b5:30:91:b2:17:5d:f3:19:c4:69:90:26:
                    1f:92:29:48:90:d1:99:36:cd:35:8c:35:ea:e1:e8:
                    a0:d1:90:ba:ec:46:78:8e:01:50:f3:91:23:88:0e:
                    7a:bb:ca:c4:a7:c4:1c:0f:91:57:e1:d6:0a:14:7a:
                    65:ec:5d:3b:62:ff:57:e9:7d:f5:5a:e1:cd:7a:09:
                    de:d8:47:c2:e9:3b:ee:24:0b:b1:72:67:2f:9c:44:
                    6b:78:6e:36:ea:be:7e:43:c8:c1:f9:15:3b:a0:50:
                    9b:f5:96:65:9e:94:c0:77:52:8d:7e:c2:f2:6c:e2:
                    c2:d7:e6:e2:4f:74:38:74:93:ab:b2:3c:ad:5a:ee:
                    85:bb:33:62:e2:c7:0f:3b:50:39:4f:0f:df:e3:e7:
                    aa:14:cc:5f:07:ae:d5:9a:20:b5:a3:01:62:e5:9d:
                    49:e5:9f:df:3b:f0:e9:e2:7e:c5:78:df:4d:9c:39:
                    52:bd:92:82:a9:62:54:44:b0:b9:84:d4:90:c4:98:
                    51:fb:94:31:3e:ff:97:fe:d2:a2:7a:c4:65:3a:26:
                    d7:75:99:8e:04:2c:1e:18:a3:bf:1c:63:a6:46:1c:
                    ee:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E7:89:F4:86:37:9D:FF:EB:0C:C6:B6:DE:FA:45:68:94:A4:6F:D9
            X509v3 Authority Key Identifier:
                keyid:FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/BueJ9IY3nf_rDMa23vpFaJSkb9k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.26.192.0/19
                  212.236.0.0/16
                IPv6:
                  2a02:2750::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:76:91:b4:9e:a8:c8:d6:de:42:87:e6:15:ab:b3:1f:a5:69:
         c5:8b:80:fe:c2:9d:85:c9:20:2b:59:ec:91:b7:3f:32:d2:ea:
         dd:32:a2:ef:62:e6:32:c6:f9:67:0e:10:78:bd:ea:10:38:19:
         78:27:0c:90:c6:29:d9:81:2b:af:73:6d:f5:50:32:35:65:ae:
         64:7c:07:20:8e:5c:5f:d0:93:1c:2c:4c:3e:d3:82:ef:fa:f1:
         68:16:47:4e:31:98:44:b4:82:44:18:c0:56:3e:b6:7f:0b:56:
         87:85:47:06:42:24:3f:7b:29:04:54:a9:f0:23:90:ca:a7:86:
         9f:b1:31:0b:81:20:18:45:c1:d8:5d:29:4a:c9:33:68:4e:60:
         43:ac:e6:05:54:11:b9:87:d0:9b:15:68:5b:14:a6:32:47:90:
         fc:94:43:c8:38:5a:f3:5a:ec:de:a3:5d:5f:d8:ee:ae:58:48:
         30:d4:91:d6:6d:e8:29:d7:50:df:bf:89:c9:31:1e:04:2f:c0:
         ee:0b:29:84:27:83:df:9c:d4:33:f4:55:46:4a:b4:ff:df:22:
         81:4b:9f:9d:f3:51:6b:a4:52:72:21:df:7a:46:be:ab:28:38:
         9a:b6:88:9b:1a:c1:df:e7:14:5f:36:4c:00:00:9b:3e:2f:30:
         40:ec:f9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:16:23 2026 by rpki-client