This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/buskofRkkagIXga384e3dmIbIs0.roa
File:                     buskofRkkagIXga384e3dmIbIs0.roa (raw, json)
Hash identifier:          39XnWJpZUpAmOqLMt3EdhMn4gLBLBpaM+0Q0rXQjd2w=
Subject key identifier:   6E:EB:24:A1:F4:64:91:A8:08:5E:06:B7:F3:87:B7:76:62:1B:22:CD
Certificate issuer:       /CN=191b1a99358daa58e72625c4ce9d829e918efc86
Certificate serial:       019AE3EF19FB7178308916D34BB1D5F399FE
Authority key identifier: 19:1B:1A:99:35:8D:AA:58:E7:26:25:C4:CE:9D:82:9E:91:8E:FC:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/buskofRkkagIXga384e3dmIbIs0.roa
Signing time:             Wed 03 Dec 2025 11:18:09 +0000
ROA not before:           Wed 03 Dec 2025 11:18:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212280
IP address blocks:        45.89.20.0/24 maxlen: 24
                          185.122.252.0/24 maxlen: 24
                          185.122.253.0/24 maxlen: 24
                          185.122.254.0/24 maxlen: 24
                          185.122.255.0/24 maxlen: 24
                          185.217.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e3:ef:19:fb:71:78:30:89:16:d3:4b:b1:d5:f3:99:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191b1a99358daa58e72625c4ce9d829e918efc86
        Validity
            Not Before: Dec  3 11:18:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6eeb24a1f46491a8085e06b7f387b776621b22cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:39:f4:71:2e:cd:f9:d9:a4:d9:9c:fa:7a:7a:
                    13:db:71:46:79:6c:7c:5f:a8:1a:44:46:d7:58:30:
                    a4:d1:19:c6:a3:c0:0a:a3:b6:ff:ef:6c:1f:87:46:
                    f1:6e:44:ef:2d:db:31:43:34:a5:bd:56:0f:46:47:
                    fb:1c:73:ab:b7:75:0b:44:73:b5:c4:a7:e7:ef:2d:
                    f3:ab:4d:3d:fe:d6:25:e3:b8:22:05:fb:51:6d:b7:
                    68:3a:c1:4d:96:eb:4a:3f:fe:9f:d2:9d:6c:2a:d1:
                    b1:f4:53:d0:2c:72:71:77:d3:17:e9:22:e3:8f:55:
                    4b:e5:ff:df:a3:aa:5b:31:43:23:73:02:e8:74:34:
                    eb:a7:3e:01:dd:14:96:40:2f:3b:99:a9:b7:42:1e:
                    cf:d3:4f:50:d0:99:4a:3b:74:49:f3:d1:96:21:f6:
                    34:f9:ae:b7:0f:c3:a9:21:10:fc:95:e3:19:61:31:
                    91:7b:11:5f:83:e0:ea:49:4a:cb:03:27:5d:5b:c0:
                    4d:d6:dd:5b:ff:e3:f0:e1:ef:d0:70:2d:32:13:04:
                    29:6e:b6:a6:42:cf:13:3f:23:df:4b:f2:db:0d:15:
                    30:29:2c:04:9a:0d:b8:e9:6d:26:37:ff:2e:df:05:
                    f9:7b:5c:ac:bb:5c:8c:ca:0e:de:ac:84:2d:05:10:
                    02:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EB:24:A1:F4:64:91:A8:08:5E:06:B7:F3:87:B7:76:62:1B:22:CD
            X509v3 Authority Key Identifier:
                keyid:19:1B:1A:99:35:8D:AA:58:E7:26:25:C4:CE:9D:82:9E:91:8E:FC:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/buskofRkkagIXga384e3dmIbIs0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.20.0/24
                  185.122.252.0/22
                  185.217.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:26:38:ae:81:ff:dc:4a:4d:db:12:51:be:23:d8:53:cc:99:
         ec:b9:0e:4b:72:83:63:ee:b9:4d:05:82:a1:6a:fe:21:f3:2d:
         ec:68:7e:fb:fd:2b:63:98:a0:ba:5f:71:e8:7e:c5:dc:1e:11:
         fa:e1:69:16:63:7a:01:b1:4d:79:36:b1:17:5b:11:90:a7:4f:
         46:16:70:61:49:47:85:59:4e:cc:28:2c:cd:2b:15:a2:80:12:
         73:4b:2a:be:4e:ef:bf:dc:a2:5d:ee:b8:49:9f:29:2f:5f:04:
         6b:66:f3:e6:5e:0b:e5:dc:eb:c9:5e:0a:01:a1:12:ef:22:e2:
         f1:ec:4e:09:d6:37:6f:99:fc:fc:58:4a:d3:44:23:bc:a4:32:
         4a:3c:22:43:fe:3f:4e:e8:57:80:00:38:e4:d7:07:a8:63:b6:
         44:91:79:b9:fc:6d:37:b1:6f:1a:fb:8c:f5:e3:e4:02:f2:a3:
         f3:86:b7:1a:3f:f6:16:53:9b:ff:b5:2c:ee:cb:07:00:e9:7d:
         54:4b:34:48:55:9c:f1:ca:a4:85:88:7b:7a:fb:46:29:4e:e5:
         11:4b:e6:6a:d8:98:42:c9:e5:51:5c:8e:91:db:64:74:e1:e9:
         32:7c:a7:ec:45:8e:35:63:d3:ea:04:b7:cf:95:e2:1b:0f:c3:
         24:cd:c2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:19:36 2025 by rpki-client