This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/BoiSOiReGPVFpaCDNopU0mejeCQ.roa
File:                     BoiSOiReGPVFpaCDNopU0mejeCQ.roa (raw, json)
Hash identifier:          0tmjyfqR/wWKsdfVfBknQh+f8N7AXW4sMVDk/ZH0HQw=
Subject key identifier:   06:88:92:3A:24:5E:18:F5:45:A5:A0:83:36:8A:54:D2:67:A3:78:24
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       019B7CEDE945F40BE410B52B8627D3BF9C2A
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/BoiSOiReGPVFpaCDNopU0mejeCQ.roa
Signing time:             Fri 02 Jan 2026 04:18:45 +0000
ROA not before:           Fri 02 Jan 2026 04:18:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     36832
IP address blocks:        2a05:1084::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:e9:45:f4:0b:e4:10:b5:2b:86:27:d3:bf:9c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  2 04:18:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0688923a245e18f545a5a083368a54d267a37824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e6:1a:c7:c8:64:f6:9b:00:8b:c2:37:1d:fa:
                    8a:82:99:24:0f:19:86:8a:ab:aa:d5:d0:b7:4f:e6:
                    a9:f3:a2:cd:00:94:00:1f:49:e3:fc:d8:30:14:23:
                    b0:4e:d2:6e:9e:d2:bc:d9:a3:9f:a9:de:c4:c7:20:
                    af:b0:32:a8:e7:d6:76:bb:1c:92:66:95:49:6e:2d:
                    ab:ba:fa:04:c8:94:3f:9e:8d:c3:3e:81:0a:f8:af:
                    61:6a:cc:dd:f4:c9:17:b6:41:d2:51:04:46:8b:35:
                    36:3f:28:04:2c:17:22:66:49:21:0d:e8:b4:8a:d1:
                    ac:4c:34:ff:fd:8f:45:ac:7f:eb:9f:e0:4d:4f:74:
                    64:70:e9:30:ed:9c:6e:fb:7e:97:89:f1:52:48:2e:
                    dc:40:ba:c5:c6:8f:81:58:92:72:98:86:38:9a:c4:
                    ab:ed:e8:b3:81:b6:c5:d3:6a:48:0f:eb:30:95:73:
                    f9:e2:2b:c6:f6:67:ac:30:e3:39:8b:65:11:25:5e:
                    9a:f4:14:bc:55:8a:41:6e:c2:25:99:9d:c2:3a:a9:
                    50:37:35:d5:c4:65:48:9f:0f:b4:87:3f:54:90:27:
                    98:3e:ad:51:82:30:88:49:42:cc:f9:f3:ec:3c:a4:
                    81:b2:84:44:b8:0e:b6:38:d6:01:ce:9c:81:d9:fd:
                    98:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:88:92:3A:24:5E:18:F5:45:A5:A0:83:36:8A:54:D2:67:A3:78:24
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/BoiSOiReGPVFpaCDNopU0mejeCQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:1084::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:e6:e5:7c:30:ee:f3:65:7e:bf:e3:17:ea:96:f8:7e:fb:83:
         ca:be:5f:ee:83:44:d4:db:d9:a2:2e:ad:cd:7d:e4:7a:52:c5:
         2d:cb:1d:79:ed:6a:c7:e8:f3:33:e8:ee:57:55:7a:e8:8e:03:
         ee:55:6e:4d:4e:87:9f:95:be:c8:74:38:9c:ae:8b:a5:c6:55:
         c2:dc:8a:21:d3:c4:b1:6f:43:3b:f8:d9:7d:01:54:52:e8:e7:
         7f:0c:90:aa:73:70:04:c4:94:99:4f:a7:94:d0:21:89:f5:c8:
         a7:5a:91:ef:23:41:96:1e:e7:e8:09:7d:88:ac:f5:ef:1b:49:
         4e:1e:5c:ef:20:02:70:67:ea:d9:dc:43:68:8f:d4:06:0f:aa:
         de:3a:98:e6:9c:34:bc:c2:ff:50:38:11:a0:53:f2:3a:aa:1e:
         be:57:91:69:e5:a1:40:d6:06:ce:fd:b7:bb:72:08:b2:95:a3:
         d9:6e:cb:93:78:ee:8d:40:b4:2b:ce:48:de:d5:77:6d:f6:5c:
         67:85:7c:92:94:98:8e:15:e1:1a:16:42:de:8d:2e:7a:3c:52:
         df:44:53:b3:65:59:76:e7:75:1b:e4:7d:91:2e:20:03:61:24:
         d7:be:39:eb:6a:e6:2b:5a:e1:f1:65:ea:97:94:ef:96:49:3c:
         3f:15:5c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:17:41 2026 by rpki-client