This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BYpm9i5G2Jm6uaJJtUrofSvB2cs.roa
File:                     BYpm9i5G2Jm6uaJJtUrofSvB2cs.roa (raw, json)
Hash identifier:          sIpQ2sbPEMrlplpHLKZQECZcAj2kOZVTCoUy08QJDcw=
Subject key identifier:   05:8A:66:F6:2E:46:D8:99:BA:B9:A2:49:B5:4A:E8:7D:2B:C1:D9:CB
Certificate issuer:       /CN=064983d3a4a1c26aa295034869c584f757380b2b
Certificate serial:       019B77C724F119FE18D8E06A5504FF8B470C
Authority key identifier: 06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BYpm9i5G2Jm6uaJJtUrofSvB2cs.roa
Signing time:             Thu 01 Jan 2026 04:18:18 +0000
ROA not before:           Thu 01 Jan 2026 04:18:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57246
IP address blocks:        185.26.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:24:f1:19:fe:18:d8:e0:6a:55:04:ff:8b:47:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064983d3a4a1c26aa295034869c584f757380b2b
        Validity
            Not Before: Jan  1 04:18:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=058a66f62e46d899bab9a249b54ae87d2bc1d9cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:53:1c:ad:41:57:40:60:2f:a2:c5:fd:4d:f4:
                    b2:56:f0:d7:d5:61:09:c5:16:d0:d7:c4:ec:13:de:
                    7c:b0:d0:c5:af:e4:df:a8:09:a5:8e:30:f8:1f:90:
                    25:55:ff:c2:44:5a:26:fe:71:25:b6:f6:8a:d9:16:
                    d5:26:c7:84:61:ea:ce:7d:25:d7:69:ab:e5:a0:dd:
                    f3:29:d0:37:9c:6f:0e:36:bb:86:f1:6a:74:60:82:
                    19:8d:e1:81:07:0a:80:15:11:85:d7:08:da:b4:7c:
                    1e:2d:df:a9:12:48:59:39:2c:97:29:97:f3:3e:dc:
                    62:8f:b2:92:a5:17:4d:1a:d0:18:34:70:ee:23:20:
                    2f:29:90:40:dc:f1:ed:a8:d3:5e:ae:fa:56:1d:80:
                    d2:bc:d2:91:f2:eb:31:76:68:b7:88:e0:e2:ff:2b:
                    46:77:df:f0:11:44:97:28:3b:e2:12:e4:be:63:69:
                    91:dc:b1:1b:78:bf:ed:2c:d7:4a:81:c7:4c:d1:13:
                    1b:69:13:cf:20:2d:1f:f9:2c:06:4f:f2:24:9d:13:
                    71:12:2c:9e:45:10:a8:0c:b3:bf:ba:f3:66:02:68:
                    56:f2:fc:01:93:0a:6f:23:dd:1f:f3:e4:10:8a:28:
                    47:c8:3a:d5:9a:b6:30:d4:b4:6a:70:67:9a:7a:90:
                    f4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8A:66:F6:2E:46:D8:99:BA:B9:A2:49:B5:4A:E8:7D:2B:C1:D9:CB
            X509v3 Authority Key Identifier:
                keyid:06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BYpm9i5G2Jm6uaJJtUrofSvB2cs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.26.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:30:df:19:14:8d:40:95:9f:7c:dd:29:f2:43:b1:d3:1e:be:
         98:18:73:26:01:bf:3e:81:ee:0c:15:57:ff:22:9e:87:62:ef:
         db:73:6e:e1:33:24:b0:d5:32:9e:6a:7b:45:cb:6b:7a:a7:e0:
         63:9e:06:bc:c7:42:75:17:75:8b:15:65:63:e7:76:f1:79:7f:
         be:90:4f:e9:19:21:d1:7d:61:8b:92:9f:d1:1c:b2:07:ea:bf:
         69:57:72:d1:19:ec:bf:f6:a7:0b:d1:ef:86:b5:1b:b9:89:ad:
         c6:cd:73:69:04:d1:b9:e4:f2:87:82:02:4c:06:96:34:ea:49:
         9a:dc:89:18:3f:8b:74:2d:3a:05:61:44:a7:d3:95:46:66:ff:
         b1:47:52:bb:a8:5b:ed:d0:47:c4:4c:49:85:54:df:5a:0a:d9:
         cf:6f:7e:b2:23:8a:ad:1f:6a:10:b4:6b:6f:24:52:42:07:1d:
         0c:e8:55:a9:40:53:ef:ec:a8:72:b1:89:0a:bf:02:d7:56:dd:
         98:20:93:4d:3d:d8:03:9f:a3:89:d6:4d:88:d3:f5:4b:12:4a:
         3a:33:8c:21:82:36:c9:45:17:29:bb:c5:92:54:e6:95:90:a9:
         05:6a:0f:c8:1e:ba:b9:97:c3:e8:4a:af:6d:98:2d:ee:c3:35:
         d0:ed:ce:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:41:43 2026 by rpki-client