This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/BtURCAmIgtDu64QigBUBa6gylG4.roa
File:                     BtURCAmIgtDu64QigBUBa6gylG4.roa (raw, json)
Hash identifier:          EZlHSwaxDQsHx/M77NPKc6ECDdAHIX3bdhXQYLBYcek=
Subject key identifier:   06:D5:11:08:09:88:82:D0:EE:EB:84:22:80:15:01:6B:A8:32:94:6E
Certificate issuer:       /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial:       019B76EB299DEC2F2A469BAB846CAEACAD5F
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/BtURCAmIgtDu64QigBUBa6gylG4.roa
Signing time:             Thu 01 Jan 2026 00:18:01 +0000
ROA not before:           Thu 01 Jan 2026 00:18:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211432
IP address blocks:        185.255.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:29:9d:ec:2f:2a:46:9b:ab:84:6c:ae:ac:ad:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
        Validity
            Not Before: Jan  1 00:18:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=06d51108098882d0eeeb84228015016ba832946e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b4:e0:95:17:3c:00:c8:bf:6a:40:a1:df:bc:
                    b4:56:99:01:8e:db:cc:e5:9f:a8:bb:10:a1:8c:b8:
                    8a:1b:26:5f:69:f6:95:70:e3:6a:1e:f3:5b:69:e5:
                    69:4c:db:89:77:fe:f7:4f:5c:db:37:29:a8:22:35:
                    85:b1:8e:3d:89:74:1e:37:83:84:38:a2:7d:13:3b:
                    72:88:ef:71:56:24:f9:38:3a:bd:47:de:66:5d:0b:
                    b6:50:63:f8:0d:c5:f6:55:5b:4f:77:35:7e:b1:d9:
                    1e:ff:7d:ee:bd:fc:e9:1c:66:68:22:b4:13:63:02:
                    45:74:cb:c6:28:44:d3:29:26:db:15:7d:94:92:8d:
                    bb:85:ad:83:6f:82:6e:5b:6f:24:d9:61:ea:09:3c:
                    8f:c6:e6:18:ef:b2:5e:55:98:c3:82:21:fa:72:15:
                    d3:ec:2c:4c:61:8c:fe:2e:0d:7f:6b:7e:8b:a3:92:
                    ea:4f:1f:6b:85:13:da:ec:23:00:24:3d:8b:ff:34:
                    50:9e:7f:86:ad:97:36:c0:22:ab:b2:43:01:87:92:
                    81:2e:d4:1c:c9:da:6b:ac:a8:ed:4d:7c:e6:b1:46:
                    ef:4d:b1:09:a5:f7:a8:59:2e:41:f8:be:d8:d8:0c:
                    a9:a5:52:61:fe:c1:84:a1:58:97:53:ee:61:f1:1c:
                    12:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D5:11:08:09:88:82:D0:EE:EB:84:22:80:15:01:6B:A8:32:94:6E
            X509v3 Authority Key Identifier:
                keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/BtURCAmIgtDu64QigBUBa6gylG4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.255.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:68:c4:ce:11:f9:07:f0:41:47:0d:97:df:74:c1:1d:1b:a3:
         a9:58:0b:22:3c:2a:5b:c5:e0:78:98:75:9e:77:29:16:d0:e9:
         5e:de:b7:4e:fb:f4:e3:1b:ee:5d:81:fa:ee:df:d6:a0:b4:ae:
         21:a1:8d:25:12:59:5e:f3:f6:8a:09:c9:46:cd:46:83:b0:c6:
         b7:ca:db:77:e8:bb:35:62:3a:5f:53:e8:7e:49:f5:ab:fd:9b:
         28:00:e9:c5:db:45:f6:dc:4b:e8:1b:c0:70:2c:05:65:98:01:
         0b:3b:d4:6b:7d:a3:44:db:2a:2b:17:5b:b3:e1:5d:40:16:5f:
         52:e3:53:40:4a:6e:61:6b:7b:40:4a:12:20:5e:e0:39:68:54:
         44:93:cf:89:91:f7:78:4e:cd:4e:ed:7e:61:24:f9:2f:3e:46:
         e9:fb:ec:10:90:d7:2d:da:5b:ff:95:f1:00:87:5f:e8:a3:bc:
         d2:a6:5c:00:03:7a:e4:8c:05:1e:d0:4e:9e:93:4c:c4:9e:8e:
         42:66:04:bd:18:29:b8:2d:35:f2:a4:e3:e9:6f:c0:55:32:ab:
         2c:37:3d:f1:a6:49:ac:08:fe:14:7f:44:d8:50:13:61:af:31:
         79:08:e9:6f:79:73:07:e4:af:71:98:c1:08:f7:7e:33:d6:31:
         ca:50:54:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:03:10 2026 by rpki-client