This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bUzcyT-wwqC9HxJGQ75mv6BohNs.roa
File:                     bUzcyT-wwqC9HxJGQ75mv6BohNs.roa (raw, json)
Hash identifier:          JGlEehvoG8Qh057rD01LfjzLc2T5clDhcyVVaca3TDY=
Subject key identifier:   6D:4C:DC:C9:3F:B0:C2:A0:BD:1F:12:46:43:BE:66:BF:A0:68:84:DB
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       019B7F84B28B00ED8C750EDF59C145ADE526
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bUzcyT-wwqC9HxJGQ75mv6BohNs.roa
Signing time:             Fri 02 Jan 2026 16:22:41 +0000
ROA not before:           Fri 02 Jan 2026 16:22:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48323
IP address blocks:        93.170.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:b2:8b:00:ed:8c:75:0e:df:59:c1:45:ad:e5:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 16:22:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6d4cdcc93fb0c2a0bd1f124643be66bfa06884db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:be:5d:00:1f:99:6a:05:ad:15:19:f7:7d:99:
                    52:20:3c:f1:4f:b4:58:65:9d:62:ac:c7:78:23:f9:
                    01:cd:d6:ba:81:c1:ce:e7:50:ef:93:b8:17:ab:cd:
                    95:1c:52:d6:30:76:ff:eb:5d:d3:8b:62:a5:d9:4e:
                    30:8b:0e:e9:4c:30:23:0f:07:d8:90:90:db:51:34:
                    cb:77:84:a0:9b:6a:20:bd:f7:9f:58:21:88:ea:a0:
                    16:45:2a:91:3c:df:c7:24:69:40:d8:d9:d5:9b:eb:
                    0d:67:0e:b0:59:85:0e:f7:84:bf:87:51:0f:8e:fa:
                    25:60:1c:c0:71:f6:09:26:9d:12:c4:82:d5:57:d2:
                    cc:14:df:1f:85:38:2c:de:f1:30:27:e7:ef:e2:cc:
                    c9:fc:f7:15:b8:cb:b9:34:ed:95:90:e8:9f:e5:cc:
                    0c:cc:25:a6:67:47:3b:22:e8:fa:d2:26:f6:8e:f2:
                    ba:a1:87:f1:77:9b:bc:64:55:2f:dd:ba:33:ab:38:
                    1c:be:e7:b1:f0:13:4c:a5:3f:6e:c0:f9:ff:2c:92:
                    63:c2:8f:de:d3:a0:cd:4f:ee:4a:ad:92:09:04:1d:
                    d4:ae:60:54:2d:b6:9a:2b:4c:0f:7e:f0:fb:38:0f:
                    6e:1a:cc:14:c4:23:80:95:ae:00:a5:9e:ba:42:f3:
                    a7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4C:DC:C9:3F:B0:C2:A0:BD:1F:12:46:43:BE:66:BF:A0:68:84:DB
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bUzcyT-wwqC9HxJGQ75mv6BohNs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.170.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:41:b2:92:3d:86:77:4c:5c:ca:dd:a6:4a:08:41:6a:32:46:
         e3:db:80:fd:69:c6:05:db:4a:07:4a:75:6d:df:82:2d:c1:52:
         53:3f:71:0f:22:58:f6:65:15:9e:6f:de:3f:e6:a5:4a:a8:29:
         99:41:ca:d6:8b:47:e3:eb:4e:7a:2c:b0:a7:1d:a8:16:b4:87:
         9e:5e:6f:09:b1:6f:60:f2:ec:66:d5:11:a3:41:17:79:9e:84:
         8c:fc:75:48:b8:25:36:4e:78:13:b9:b0:fc:3f:8c:6c:4b:56:
         35:d3:61:8b:1b:71:5b:fc:16:1d:d0:ee:7d:23:25:1b:37:6a:
         3b:18:7a:ef:6d:a2:b1:4f:13:ff:70:e6:41:40:95:d3:21:86:
         0d:e4:90:ef:4c:a9:5d:4a:fb:a5:0a:e7:c2:79:03:cc:11:ac:
         d7:93:f9:7f:7b:0c:6e:72:c3:d5:47:4d:62:f3:e7:3e:a2:83:
         08:2e:69:bf:43:eb:1c:06:31:11:bf:2f:7d:71:12:2f:d8:be:
         65:16:1e:e4:43:0b:3f:d2:c0:37:4b:f8:07:25:86:35:08:89:
         47:68:7b:d6:24:e0:c5:b6:9f:0a:2a:b8:0a:00:b7:68:d7:01:
         f4:12:41:b0:b9:d6:25:f7:3f:d1:80:6b:f4:34:c6:d8:f4:3e:
         2e:a9:70:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/hLKLAO2MdQ7fWcFFreUmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjYwMTAyMTYyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDRjZGNjOTNmYjBjMmEwYmQxZjEyNDY0M2JlNjZiZmEwNjg4NGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL5dAB+ZagWtFRn3fZlSIDzxT7RY
ZZ1irMd4I/kBzda6gcHO51Dvk7gXq82VHFLWMHb/613Ti2Kl2U4wiw7pTDAjDwfY
kJDbUTTLd4Sgm2ogvfefWCGI6qAWRSqRPN/HJGlA2NnVm+sNZw6wWYUO94S/h1EP
jvolYBzAcfYJJp0SxILVV9LMFN8fhTgs3vEwJ+fv4szJ/PcVuMu5NO2VkOif5cwM
zCWmZ0c7Iuj60ib2jvK6oYfxd5u8ZFUv3bozqzgcvuex8BNMpT9uwPn/LJJjwo/e
06DNT+5KrZIJBB3UrmBULbaaK0wPfvD7OA9uGswUxCOAla4ApZ66QvOnuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG1M3Mk/sMKgvR8SRkO+Zr+gaITbMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvYlV6Y3lULXd3cUM5SHhKR1E3NW12NkJvaE5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXaqAMA0G
CSqGSIb3DQEBCwUAA4IBAQB2QbKSPYZ3TFzK3aZKCEFqMkbj24D9acYF20oHSnVt
34ItwVJTP3EPIlj2ZRWeb94/5qVKqCmZQcrWi0fj6056LLCnHagWtIeeXm8JsW9g
8uxm1RGjQRd5noSM/HVIuCU2TngTubD8P4xsS1Y102GLG3Fb/BYd0O59IyUbN2o7
GHrvbaKxTxP/cOZBQJXTIYYN5JDvTKldSvulCufCeQPMEazXk/l/ewxucsPVR01i
8+c+ooMILmm/Q+scBjERvy99cRIv2L5lFh7kQws/0sA3S/gHJYY1CIlHaHvWJODF
tp8KKrgKALdo1wH0EkGwudYl9z/RgGv0NMbY9D4uqXC9
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:27:33 2026 by rpki-client