This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/BuCCAIR_5ckodCbHgOD1MMIt-Dk.roa
File:                     BuCCAIR_5ckodCbHgOD1MMIt-Dk.roa (raw, json)
Hash identifier:          QG9xQu9PRC+aBkksrXZrhX4apZcVikxD0oV/WFqRvns=
Subject key identifier:   06:E0:82:00:84:7F:E5:C9:28:74:26:C7:80:E0:F5:30:C2:2D:F8:39
Certificate issuer:       /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial:       019B7AC7E728B688757BC7EE7CE2473221AD
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/BuCCAIR_5ckodCbHgOD1MMIt-Dk.roa
Signing time:             Thu 01 Jan 2026 18:17:59 +0000
ROA not before:           Thu 01 Jan 2026 18:17:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213777
IP address blocks:        193.42.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:e7:28:b6:88:75:7b:c7:ee:7c:e2:47:32:21:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
        Validity
            Not Before: Jan  1 18:17:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=06e08200847fe5c9287426c780e0f530c22df839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fb:fc:57:2d:51:0e:21:1d:08:e8:b4:71:e5:
                    5c:b8:fb:05:20:f0:62:f1:a3:e4:d6:b6:a1:b0:cb:
                    75:c2:ed:ab:c7:e1:0d:e9:6a:e3:06:2e:ff:46:a9:
                    f4:e5:c0:aa:f3:0f:af:19:78:ee:53:bb:47:cb:76:
                    45:10:2c:ea:0f:c2:f4:06:8d:0f:67:72:0b:c1:c2:
                    66:48:1d:67:aa:65:13:0a:0c:a1:11:65:72:24:5e:
                    48:d9:63:8e:71:bf:15:e0:75:e5:72:1a:67:c7:1e:
                    5b:13:0a:fc:8c:86:a3:c1:a4:03:99:87:37:b5:88:
                    c3:86:38:df:6c:a9:db:10:a2:c6:29:49:23:ba:20:
                    77:41:69:03:f8:66:6b:9e:68:0c:ba:8a:4f:54:c0:
                    91:a1:0e:a5:68:12:34:e2:a4:d2:cd:16:0e:6d:88:
                    84:81:6d:8e:9a:bd:99:a4:b6:8a:c9:db:fb:8f:16:
                    3e:8e:7c:49:f7:a4:f2:ed:38:53:3c:89:f2:0e:da:
                    59:fc:36:95:0d:f4:f1:4b:b7:15:09:8c:b6:06:ae:
                    fe:23:0e:04:e0:86:c1:3f:55:ef:f4:0e:44:39:a8:
                    2d:4d:34:32:b1:9e:b0:93:74:c6:2d:7e:57:6e:e0:
                    db:f6:15:c4:be:79:09:f5:de:3b:11:7a:d7:f3:c4:
                    eb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E0:82:00:84:7F:E5:C9:28:74:26:C7:80:E0:F5:30:C2:2D:F8:39
            X509v3 Authority Key Identifier:
                keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/BuCCAIR_5ckodCbHgOD1MMIt-Dk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:43:a4:19:30:17:68:3f:1b:b2:5c:9c:82:0d:42:78:75:4f:
         68:10:da:89:50:49:f2:b6:b8:1c:ce:24:87:30:8e:4c:d5:e2:
         f2:ec:af:bf:69:72:04:00:b9:65:37:6e:17:5e:83:c7:f3:47:
         d8:bb:91:0d:2d:64:3d:77:3f:fc:05:2d:56:1a:23:e9:1e:f9:
         97:f1:b3:55:bd:f7:53:2d:b9:81:a0:a9:a2:64:81:20:6a:96:
         d9:c3:08:bb:fc:f4:c7:7e:42:52:25:15:9f:b0:42:8b:28:0f:
         18:7d:32:52:08:57:1b:b6:3e:07:e2:9a:25:b3:fd:f2:23:58:
         fa:14:e4:42:cd:04:af:9d:44:20:9b:08:40:45:47:4e:31:d0:
         39:0e:ef:78:91:07:5e:98:06:b0:b6:17:66:ce:e8:a1:b6:4a:
         88:13:0f:64:bd:81:23:f8:5f:e1:70:c7:62:1b:c3:44:88:e2:
         38:e3:ce:5d:cb:a0:d6:7d:4a:4f:fc:6b:94:1d:1b:9a:94:f5:
         2f:c8:9b:7c:54:81:bc:db:71:e7:eb:6e:be:35:e3:61:02:10:
         9e:81:5d:be:bf:a9:4c:49:8e:2f:1b:97:d9:a3:2e:7c:73:82:
         a2:25:5b:a8:bc:31:cf:3b:09:33:fc:d4:68:77:cc:d3:30:55:
         f0:f3:e1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:52:43 2026 by rpki-client