This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/BUomOwv4WwjQJTKPQKygSmfr2ek.roa
File:                     BUomOwv4WwjQJTKPQKygSmfr2ek.roa (raw, json)
Hash identifier:          mYl2LWuIUiwyhFmMAKXHS2UWI2u8cF4zPyb6rsomkaQ=
Subject key identifier:   05:4A:26:3B:0B:F8:5B:08:D0:25:32:8F:40:AC:A0:4A:67:EB:D9:E9
Certificate issuer:       /CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Certificate serial:       019B7F84B73479E4F02C211C192F4D68E267
Authority key identifier: 7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/BUomOwv4WwjQJTKPQKygSmfr2ek.roa
Signing time:             Fri 02 Jan 2026 16:22:42 +0000
ROA not before:           Fri 02 Jan 2026 16:22:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     20722
IP address blocks:        85.204.44.0/24 maxlen: 24
                          85.204.47.0/24 maxlen: 24
                          85.204.56.0/21 maxlen: 21
                          85.204.56.0/24 maxlen: 24
                          85.204.57.0/24 maxlen: 24
                          85.204.58.0/24 maxlen: 24
                          85.204.59.0/24 maxlen: 24
                          85.204.60.0/24 maxlen: 24
                          85.204.61.0/24 maxlen: 24
                          85.204.62.0/24 maxlen: 24
                          85.204.63.0/24 maxlen: 24
                          185.88.128.0/22 maxlen: 22
                          185.88.128.0/23 maxlen: 23
                          185.88.129.0/24 maxlen: 24
                          185.88.130.0/23 maxlen: 23
                          185.88.131.0/24 maxlen: 24
                          194.102.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:b7:34:79:e4:f0:2c:21:1c:19:2f:4d:68:e2:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
        Validity
            Not Before: Jan  2 16:22:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=054a263b0bf85b08d025328f40aca04a67ebd9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2a:13:2d:a9:07:a3:e9:56:78:e2:e6:ca:25:
                    05:84:3d:df:6e:66:06:67:fb:dd:58:3b:e8:41:01:
                    bb:56:a6:cf:e3:ba:b9:15:67:05:72:b6:fa:ba:67:
                    78:7e:41:87:d9:1b:81:db:79:42:2b:40:c7:4e:8f:
                    f3:8d:d1:2b:a2:43:5f:ef:8f:61:40:23:da:91:7f:
                    6b:11:42:dc:34:b0:83:58:da:4c:b6:a5:47:94:56:
                    02:76:2f:62:e9:c3:a8:64:9a:c7:4c:98:3f:a5:25:
                    43:a3:b8:43:80:17:1a:32:6d:b2:7f:e1:49:34:e9:
                    9c:c1:c1:fd:16:10:70:3b:56:7c:5a:a2:c4:d5:c2:
                    54:93:3c:77:45:48:a8:f9:d8:e1:d8:9c:0f:a1:0c:
                    03:cb:e2:43:1b:e0:39:d7:f0:18:58:69:12:95:ec:
                    5d:13:0e:58:cd:f9:7e:38:79:1b:be:0b:e8:e3:8f:
                    43:47:39:9c:37:d7:25:02:25:e6:ad:68:69:64:02:
                    a1:73:44:23:8f:07:7b:d8:f2:f0:85:fb:84:7e:8e:
                    21:39:f7:f6:a7:61:70:50:98:62:c9:39:ab:84:a9:
                    5d:2b:12:63:29:c8:dc:b6:b7:55:68:e0:d7:a7:6b:
                    94:78:24:03:e9:05:d8:e5:83:9e:aa:35:7a:94:9d:
                    70:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4A:26:3B:0B:F8:5B:08:D0:25:32:8F:40:AC:A0:4A:67:EB:D9:E9
            X509v3 Authority Key Identifier:
                keyid:7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/BUomOwv4WwjQJTKPQKygSmfr2ek.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.204.44.0/24
                  85.204.47.0/24
                  85.204.56.0/21
                  185.88.128.0/22
                  194.102.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:f6:ce:5a:23:5d:0f:73:ad:bb:09:d4:db:43:9a:cd:3a:40:
         7d:cc:dd:a7:1b:ce:6f:ca:09:4d:a4:37:23:6d:bf:0d:f3:4e:
         fe:05:86:10:61:1f:71:2a:b1:9d:c4:bf:9e:18:31:88:9a:62:
         83:75:9e:7b:d3:e2:ed:1f:a2:3b:8a:7e:2a:19:09:aa:23:13:
         d2:65:91:7f:29:6f:e0:74:6f:4d:57:d7:a9:f3:5a:51:68:22:
         54:d6:c0:a2:9b:dc:5b:98:c0:72:33:6a:da:cc:1f:71:77:06:
         f3:6e:ba:33:0b:99:74:80:0e:40:8e:7a:23:7c:0a:a2:4c:41:
         db:19:dd:90:1e:63:e1:50:a1:46:88:29:f8:2a:0d:a0:52:60:
         5e:d9:27:6d:2b:c7:9a:ca:27:c9:cc:03:8c:7a:6a:fe:4e:e2:
         34:eb:12:55:75:45:3d:ef:b2:b1:77:79:ed:31:39:af:49:35:
         2c:3b:2d:7c:ee:f6:a1:a9:8f:a5:b4:29:ff:5d:d1:9a:43:2e:
         d3:b8:a7:c3:0d:b1:f4:f7:ea:76:a4:97:6c:4e:1e:30:4e:8a:
         7f:13:a2:c9:d0:74:f6:2a:db:28:ef:51:0c:10:ff:e5:54:e4:
         06:62:e1:d2:91:f1:8e:97:1f:dc:df:f9:2f:f9:f4:7a:22:7a:
         77:86:87:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:16:27 2026 by rpki-client