This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/bvJT889kwtQRI_EyLLJFUKRqVAo.roa
File:                     bvJT889kwtQRI_EyLLJFUKRqVAo.roa (raw, json)
Hash identifier:          jHzzWrrncqh6D7+g/0zcqR17m3gx8mFOPKNKX2W4EsA=
Subject key identifier:   6E:F2:53:F3:CF:64:C2:D4:11:23:F1:32:2C:B2:45:50:A4:6A:54:0A
Certificate issuer:       /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial:       019B7EA66141534928593BD2A59CC7C61E40
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/bvJT889kwtQRI_EyLLJFUKRqVAo.roa
Signing time:             Fri 02 Jan 2026 12:19:51 +0000
ROA not before:           Fri 02 Jan 2026 12:19:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     24980
IP address blocks:        85.248.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 07:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:61:41:53:49:28:59:3b:d2:a5:9c:c7:c6:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
        Validity
            Not Before: Jan  2 12:19:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6ef253f3cf64c2d41123f1322cb24550a46a540a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:ef:cc:01:b7:81:75:42:e6:13:02:5a:29:
                    b0:e7:fd:a2:2c:7a:a9:7a:b5:34:80:24:90:26:4a:
                    23:dc:23:4d:02:da:4c:5e:05:3a:2c:6f:b8:94:5b:
                    46:48:41:4e:2b:03:af:e8:68:ea:a7:6d:94:e1:7d:
                    9c:c6:09:38:5d:c0:f5:cb:f5:01:81:cb:81:e6:6a:
                    1f:d1:c9:85:c3:ec:1e:bc:4b:63:ad:81:6d:7b:0f:
                    40:f7:aa:54:6f:07:82:81:78:c1:5c:d4:5c:db:c4:
                    75:17:6a:05:da:da:42:fc:cf:71:2a:ff:6d:bc:0a:
                    c3:ef:b5:68:34:9b:a5:a5:24:dd:20:d6:ae:e2:6e:
                    d6:7d:6c:b7:6a:30:64:a2:80:1c:fb:68:10:9d:4c:
                    cb:01:96:b6:9d:4c:1c:51:7a:0c:07:03:ad:42:16:
                    79:f3:16:1a:04:09:b9:4f:d3:59:54:5c:dc:2d:f8:
                    a1:7e:4d:39:3b:90:26:de:55:88:be:9d:a9:05:67:
                    21:91:4c:0e:13:de:75:20:d8:a1:87:9e:e3:f5:b5:
                    33:10:d8:04:4b:2b:31:63:ce:c8:59:42:ca:75:b4:
                    94:25:8e:9e:84:11:c3:82:8f:d1:f0:89:ed:49:2f:
                    f5:a4:50:10:21:24:11:a3:d6:c7:49:f8:f8:f8:43:
                    ed:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F2:53:F3:CF:64:C2:D4:11:23:F1:32:2C:B2:45:50:A4:6A:54:0A
            X509v3 Authority Key Identifier:
                keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/bvJT889kwtQRI_EyLLJFUKRqVAo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.248.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:6e:76:d8:f5:72:ac:c7:76:98:40:ec:3a:a5:fc:83:aa:84:
         30:d6:49:db:28:29:14:5a:74:a0:7a:c3:f2:1c:85:56:8f:4f:
         cf:14:7f:70:b8:19:82:2b:8d:34:62:93:05:46:87:90:c7:b4:
         51:35:c9:84:2d:48:2f:36:c7:1e:99:52:98:6c:33:31:bf:c1:
         df:a2:91:30:5a:3c:08:16:70:8f:e4:50:c1:47:b8:b9:d6:c8:
         79:8a:21:1e:91:d2:4c:16:fe:f8:28:b3:60:fc:05:cd:78:6b:
         35:aa:41:00:c4:2d:b7:bc:ad:d7:cb:99:55:ac:e9:50:98:b5:
         ae:db:cb:4a:12:3a:cf:d4:4a:11:79:ad:f3:0b:97:f6:32:6f:
         c2:78:36:e8:53:b3:4e:c5:c6:bb:a3:98:34:b5:c6:6b:8a:d0:
         57:01:8e:13:77:ec:70:cd:32:0b:91:55:72:a2:6a:97:b2:7e:
         62:ad:73:c9:cf:a0:2c:0b:32:d0:ca:f9:3d:34:d1:d9:37:ac:
         8d:70:d4:df:f7:97:e2:70:b3:0f:ad:29:ff:0b:64:d7:13:1e:
         72:da:a3:bc:7a:59:43:a4:74:5a:cb:f7:e8:5e:21:ab:4d:57:
         7e:66:60:b6:1f:44:dc:f9:0f:d5:c1:3b:f8:9a:01:22:7f:fe:
         33:7e:cb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:18:07 2026 by rpki-client