This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/B1mlic3MBKdWlyRVytiTsaiFEpo.roa
File:                     B1mlic3MBKdWlyRVytiTsaiFEpo.roa (raw, json)
Hash identifier:          9Ke9dxoY8TVa8fbx0FgxVlR01PX31ijJ+fbU+/+2oMs=
Subject key identifier:   07:59:A5:89:CD:CC:04:A7:56:97:24:55:CA:D8:93:B1:A8:85:12:9A
Certificate issuer:       /CN=206f1c32bc0a9006081d552fede67d6842921ec3
Certificate serial:       019B7B365222D63767F82217C32DAB8049B2
Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/B1mlic3MBKdWlyRVytiTsaiFEpo.roa
Signing time:             Thu 01 Jan 2026 20:18:36 +0000
ROA not before:           Thu 01 Jan 2026 20:18:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208914
IP address blocks:        2a10:4741:32::/48 maxlen: 48
                          2a10:4741:33::/48 maxlen: 48
                          2a10:4741:34::/48 maxlen: 48
                          2a10:4741:35::/48 maxlen: 48
                          2a10:4741:36::/48 maxlen: 48
                          2a10:4741:37::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:52:22:d6:37:67:f8:22:17:c3:2d:ab:80:49:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3
        Validity
            Not Before: Jan  1 20:18:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0759a589cdcc04a756972455cad893b1a885129a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:ab:f8:fb:f7:a5:56:b1:7d:88:34:df:da:
                    3a:a7:cb:71:40:bc:51:27:41:e1:59:7a:c1:f5:91:
                    fa:8a:f8:02:42:42:c8:2b:ea:dc:77:9c:ba:c0:85:
                    00:49:25:a8:a4:18:7d:f8:d3:e4:c9:e2:81:78:ec:
                    00:c0:92:17:07:56:00:42:e4:c2:48:ca:07:92:f1:
                    ef:0a:e7:3d:a5:e1:40:bf:7a:49:c9:5f:ea:4a:1c:
                    ae:d5:dd:d0:b1:0c:36:4a:a5:38:44:4a:0d:e8:a8:
                    d0:63:2e:b0:0d:e8:14:3d:27:1c:bb:b6:e9:7d:10:
                    3b:6d:09:ea:6e:7f:bb:52:1b:90:81:69:9e:de:a4:
                    f1:b9:44:16:94:e4:90:25:66:ae:e0:83:ef:38:d4:
                    9c:3f:c3:0b:80:6a:46:42:44:7e:65:2d:c3:36:ca:
                    15:3c:3f:08:2e:ac:ca:a6:23:ed:32:9c:bd:25:dc:
                    01:42:95:27:10:db:04:a4:0b:2f:1a:2f:ce:4d:5b:
                    c8:e2:48:69:d1:47:7a:e4:10:bf:60:f8:18:94:96:
                    a2:c5:41:e0:67:63:e5:ab:67:8b:06:38:f3:7a:c0:
                    9c:d5:bc:45:f4:3b:ce:a9:91:62:0b:59:ed:74:4e:
                    00:db:59:ee:71:2a:d6:bf:32:c6:0f:b1:6b:86:3e:
                    d6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:59:A5:89:CD:CC:04:A7:56:97:24:55:CA:D8:93:B1:A8:85:12:9A
            X509v3 Authority Key Identifier:
                keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/B1mlic3MBKdWlyRVytiTsaiFEpo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4741:32::-2a10:4741:37:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         14:ea:37:71:16:b5:e3:19:20:a7:5e:be:01:3e:a8:10:1e:02:
         72:22:6e:df:85:0c:30:25:ea:83:13:8d:55:5c:60:ad:79:61:
         ee:50:6e:66:6f:9d:de:d2:73:40:c5:b6:15:ba:f5:46:4c:7c:
         5b:23:1f:86:ce:ac:2e:8f:75:b4:a4:a1:60:4e:a0:6a:e6:13:
         c9:ab:d2:97:37:ba:48:f2:0f:0b:6e:c0:f8:c7:8f:7c:98:73:
         94:19:cf:ec:35:89:d4:75:0b:75:d1:bd:7c:28:91:d0:af:8a:
         36:14:bf:0e:50:ef:80:38:0d:50:f4:ee:ab:02:19:13:9c:f7:
         80:de:e8:db:c5:55:8c:4e:4a:3b:f5:e0:46:8d:1e:28:93:9f:
         3d:c2:43:89:f2:63:ee:e5:5d:06:e3:95:12:19:36:aa:8d:0e:
         53:cf:29:18:ef:1b:89:3b:78:d8:e0:04:44:b9:20:09:e3:dc:
         a3:30:7c:82:08:c1:4d:c1:75:a3:33:0f:56:6c:4d:25:bf:94:
         08:4f:33:bd:8c:eb:d7:8c:e6:a1:b9:4d:6f:32:59:15:49:99:
         b8:6a:21:33:c3:a1:28:fe:40:c6:32:94:db:a2:b5:37:32:65:
         01:8f:a5:ac:64:be:b9:e5:24:e4:58:2d:75:14:87:51:94:b8:
         7b:0f:7f:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:48:34 2026 by rpki-client