This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/BeeQIAu6NMmjbyOm_zRckXrCzjQ.roa
File:                     BeeQIAu6NMmjbyOm_zRckXrCzjQ.roa (raw, json)
Hash identifier:          Ca+da+tqS9qy4+b+qYuDpbM1Gp5JRavJKwLfRW2e9sg=
Subject key identifier:   05:E7:90:20:0B:BA:34:C9:A3:6F:23:A6:FF:34:5C:91:7A:C2:CE:34
Certificate issuer:       /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial:       019B7910B767C6C2D6168B834E2F7067698D
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/BeeQIAu6NMmjbyOm_zRckXrCzjQ.roa
Signing time:             Thu 01 Jan 2026 10:18:17 +0000
ROA not before:           Thu 01 Jan 2026 10:18:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209437
IP address blocks:        2a0a:56c4:3::/48 maxlen: 48
                          2a0a:56c4:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:b7:67:c6:c2:d6:16:8b:83:4e:2f:70:67:69:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
        Validity
            Not Before: Jan  1 10:18:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=05e790200bba34c9a36f23a6ff345c917ac2ce34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0b:71:ec:da:83:e8:38:b0:1a:8d:d5:29:3e:
                    2f:b5:da:48:a4:73:7a:a0:75:98:98:fe:ba:77:d2:
                    22:dd:c6:80:26:b4:ae:cc:50:52:dc:f3:87:5e:0e:
                    5d:e1:39:67:ae:f0:00:34:6b:50:ee:b9:0e:b4:12:
                    c6:99:01:ea:82:02:58:69:f9:ab:29:0b:16:4b:2e:
                    e1:a7:55:53:51:6a:40:17:e1:bd:ed:48:08:14:47:
                    7a:a2:c9:7a:a8:45:18:53:40:24:63:04:da:98:64:
                    79:bb:8b:fa:5e:82:ba:e8:10:e9:a7:ee:ce:e8:50:
                    8f:84:5d:7d:90:a1:9d:d7:d3:e3:a1:44:83:d5:32:
                    54:4c:48:cf:e1:87:53:6d:e4:be:8a:30:8d:4a:2a:
                    16:02:57:b5:8c:87:9d:e4:46:72:b7:32:fb:60:38:
                    5e:62:74:24:6e:e7:d2:f4:e8:f0:25:1b:d6:06:39:
                    7f:35:d5:a0:cb:e9:1e:e3:a3:12:84:13:75:b8:7b:
                    87:c8:06:ed:5e:bf:f4:38:ec:54:5b:b0:ff:46:52:
                    27:76:77:e0:76:90:c1:84:77:1f:51:fe:9f:57:2f:
                    01:f8:c4:01:96:31:53:e2:d1:05:c1:01:ec:27:c6:
                    c0:5d:4a:a2:08:a5:1b:c1:4e:77:40:16:eb:d0:08:
                    53:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E7:90:20:0B:BA:34:C9:A3:6F:23:A6:FF:34:5C:91:7A:C2:CE:34
            X509v3 Authority Key Identifier:
                keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/BeeQIAu6NMmjbyOm_zRckXrCzjQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:56c4:3::/48
                  2a0a:56c4:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:17:a4:19:53:d7:13:95:c0:3d:a0:c6:a5:0c:c9:43:8d:d9:
         7c:dd:ca:b5:f5:e6:ae:16:14:96:52:64:6c:90:d3:a5:f1:8b:
         36:f7:0f:ca:72:0f:e5:a9:8e:ab:82:55:e2:37:08:95:78:61:
         bd:38:63:df:e9:38:b8:b6:88:9e:34:00:33:d3:cf:4e:85:98:
         a0:dd:36:04:db:01:7b:7a:65:13:e1:ac:da:37:63:48:ef:3c:
         6a:0f:48:99:01:fc:59:51:76:18:78:66:1e:e5:3a:fa:73:eb:
         15:5d:94:21:cd:e1:c9:b5:98:ef:dc:7c:34:7c:84:63:07:36:
         f6:d1:9f:13:aa:8f:ff:91:1c:a4:00:63:a1:75:5e:59:70:05:
         c9:3b:36:24:cd:40:04:56:d0:02:05:3b:84:a4:ef:02:ce:b7:
         ca:08:c8:6e:f3:04:c6:07:8c:06:5f:e8:ed:75:c2:c6:b9:0b:
         3b:48:6c:26:0b:73:db:6c:3a:ca:b9:06:18:6f:75:61:9f:f4:
         b0:86:1a:6e:ef:4e:47:c9:11:5e:7f:ae:c1:d1:3e:ee:4b:6f:
         3c:0f:19:0e:99:6b:1a:6b:02:1f:14:3c:47:fe:65:e1:d6:6a:
         a8:73:91:e4:4b:ce:81:f9:ca:40:f6:8e:97:36:ab:cf:23:7a:
         d9:a6:7b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:05:44 2026 by rpki-client