This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/bsglp_YaCzq1ZbW59TrfMCZMvqQ.roa
File:                     bsglp_YaCzq1ZbW59TrfMCZMvqQ.roa (raw, json)
Hash identifier:          XgQ95AvaHQg4VEsCdEh5u3f7R7yDQIeF4yBEzRXjfaY=
Subject key identifier:   6E:C8:25:A7:F6:1A:0B:3A:B5:65:B5:B9:F5:3A:DF:30:26:4C:BE:A4
Certificate issuer:       /CN=08418e9690d0fb711abf3874e1c500a627693c0a
Certificate serial:       019BCF449ECB5D3F9C64D50251B99D8F56EA
Authority key identifier: 08:41:8E:96:90:D0:FB:71:1A:BF:38:74:E1:C5:00:A6:27:69:3C:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/bsglp_YaCzq1ZbW59TrfMCZMvqQ.roa
Signing time:             Sun 18 Jan 2026 04:02:19 +0000
ROA not before:           Sun 18 Jan 2026 04:02:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44194
IP address blocks:        81.16.180.0/24 maxlen: 24
                          81.16.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:cf:44:9e:cb:5d:3f:9c:64:d5:02:51:b9:9d:8f:56:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08418e9690d0fb711abf3874e1c500a627693c0a
        Validity
            Not Before: Jan 18 04:02:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6ec825a7f61a0b3ab565b5b9f53adf30264cbea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:5b:b8:ff:0a:1c:99:8c:28:cc:04:f7:30:
                    43:95:c8:b1:7a:86:3b:e6:23:dc:cd:05:bd:84:58:
                    2b:c5:1f:c6:6d:de:1c:db:75:68:26:cc:7a:1d:4d:
                    da:0b:44:7a:8a:20:35:2b:6f:58:04:0c:18:b0:fc:
                    7c:79:25:b5:85:1e:0e:c9:63:6f:e4:15:98:1c:b8:
                    47:9a:67:82:61:26:68:b0:78:e9:67:04:2c:b3:a9:
                    db:31:ef:33:f2:2e:33:7a:d8:21:4e:d9:b1:07:45:
                    db:e0:07:50:df:01:e1:bb:bd:e9:e2:2a:88:35:76:
                    ee:41:87:4a:68:62:d3:10:52:89:b3:32:5a:b8:6d:
                    49:1f:1f:df:e9:6b:33:53:03:0f:19:ae:7b:71:b6:
                    a9:57:90:fc:dd:d4:ac:26:fa:f3:a5:44:1e:a6:d6:
                    2a:59:ab:70:97:7f:0e:43:6c:1e:9c:3b:28:f9:fe:
                    97:31:df:ad:06:3d:d0:18:d9:2f:89:0f:cb:6c:bc:
                    fa:96:c5:42:aa:56:bd:cd:e9:03:4f:86:49:c1:f1:
                    c7:ca:b8:8b:54:0b:79:14:78:f3:8e:a8:e4:e8:a2:
                    54:af:e1:72:4b:d5:57:69:d9:f3:5e:24:f2:0e:2c:
                    50:23:09:b8:82:72:85:63:7a:1a:4b:7e:f0:6c:91:
                    df:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C8:25:A7:F6:1A:0B:3A:B5:65:B5:B9:F5:3A:DF:30:26:4C:BE:A4
            X509v3 Authority Key Identifier:
                keyid:08:41:8E:96:90:D0:FB:71:1A:BF:38:74:E1:C5:00:A6:27:69:3C:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/bsglp_YaCzq1ZbW59TrfMCZMvqQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.16.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:91:66:fe:24:2a:d2:f5:70:14:8f:b6:5b:cf:9a:30:39:fb:
         0e:ef:f4:35:9b:89:a6:f8:bf:84:70:a6:85:3a:4a:cf:7e:f0:
         b8:28:69:dc:56:1f:f1:52:cc:b9:69:54:a8:26:44:4a:89:d5:
         34:fb:3b:9e:98:5a:81:3d:72:16:94:88:03:cb:b7:12:97:35:
         18:7d:27:22:4c:84:12:22:ab:37:a6:cb:ad:92:f3:38:85:a7:
         1b:62:ed:6f:b6:dc:1f:bf:c0:7b:fb:eb:72:e0:5b:87:3b:7c:
         d0:91:f0:75:6f:d7:7c:36:04:8c:b1:76:2a:da:3c:c0:d8:85:
         27:fd:db:80:e7:77:9f:62:a2:d9:ee:cc:2b:f4:5a:56:87:23:
         24:a1:a0:68:91:97:9c:b3:07:dd:f7:4d:9f:23:5b:cd:7b:a5:
         fc:52:a3:f7:b4:c9:7b:41:66:bf:31:60:30:ea:2a:27:f7:80:
         21:7b:51:3b:d9:a2:0c:f4:d7:a6:b4:94:fa:95:c5:29:cc:00:
         da:d5:37:60:e9:b9:95:c1:d3:76:fc:ec:ca:08:57:17:eb:50:
         f9:a6:53:68:63:f3:90:7c:65:90:0d:db:02:ad:50:6b:02:d5:
         28:64:73:ec:b7:7f:e7:54:dc:cf:f9:50:6b:2d:60:e0:4f:be:
         da:95:40:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:43:12 2026 by rpki-client