This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/bJopY1c5-JgLpNrct95adiaBkow.roa
File:                     bJopY1c5-JgLpNrct95adiaBkow.roa (raw, json)
Hash identifier:          zjNXXJO0/jW/Qu4GNSspoEBidZ/j2O8vMg+/xXuyQaA=
Subject key identifier:   6C:9A:29:63:57:39:F8:98:0B:A4:DA:DC:B7:DE:5A:76:26:81:92:8C
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       019B797ED5044DD29C77B74A8F8AA789D2F0
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/bJopY1c5-JgLpNrct95adiaBkow.roa
Signing time:             Thu 01 Jan 2026 12:18:33 +0000
ROA not before:           Thu 01 Jan 2026 12:18:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202357
IP address blocks:        78.83.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:d5:04:4d:d2:9c:77:b7:4a:8f:8a:a7:89:d2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Jan  1 12:18:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6c9a29635739f8980ba4dadcb7de5a762681928c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6f:22:b6:04:3e:4e:f6:2d:b5:5e:d7:91:c3:
                    f2:e7:d7:ac:07:ff:eb:92:54:6e:45:9d:a1:f1:f3:
                    2f:1a:4f:3c:69:da:a2:de:2b:b0:fb:13:8e:e5:ce:
                    e3:38:87:31:e3:00:f3:e3:cf:f4:76:78:68:db:86:
                    76:c1:14:7e:02:f3:d2:7f:65:3e:b1:29:0a:d3:eb:
                    ee:21:89:11:fb:d7:2f:84:62:73:ed:43:a3:b8:93:
                    14:7c:ac:ca:b2:b7:f3:d6:41:6e:20:bb:cd:ca:d9:
                    85:fe:6c:3d:88:92:ef:76:0a:28:99:af:cb:30:38:
                    50:ea:80:34:70:a1:95:50:81:c5:ec:19:b7:ab:aa:
                    5b:a2:f2:52:ee:47:24:2a:b1:c0:2c:f5:92:c6:d0:
                    35:d9:e6:61:93:23:29:09:0b:e9:f7:8a:eb:ce:0e:
                    52:99:a9:c1:d0:ac:21:56:53:de:c9:97:b0:20:37:
                    37:eb:98:be:fc:30:0a:40:fb:e9:51:7b:05:30:37:
                    e2:e9:0f:77:50:f8:e7:f2:a3:8c:6d:6d:6a:65:e1:
                    a6:7a:2e:49:d2:df:25:3f:72:76:ff:f6:0d:47:97:
                    25:c4:c0:b8:75:01:10:d2:a5:c8:ea:1d:e6:1a:a6:
                    56:54:b3:e2:8e:87:5f:22:31:7a:ea:9a:f8:f6:02:
                    83:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9A:29:63:57:39:F8:98:0B:A4:DA:DC:B7:DE:5A:76:26:81:92:8C
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/bJopY1c5-JgLpNrct95adiaBkow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.83.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:dd:18:8d:1f:99:8a:3f:0a:5d:46:fe:06:a4:38:70:db:6e:
         55:4d:e4:61:73:88:72:05:76:7e:cb:94:fc:16:37:98:b1:7c:
         b2:94:43:a6:e4:63:21:b6:32:02:28:47:45:c3:05:f1:8b:53:
         b7:77:b0:60:df:0b:81:69:cc:5f:80:12:3f:f6:72:0d:3e:35:
         73:8c:a8:30:d2:02:a2:e8:38:3f:4f:11:fc:52:41:35:85:71:
         1c:a9:db:dd:3b:1a:4f:9a:bd:a9:52:54:e2:2a:cf:6e:b3:b2:
         2b:a3:2c:a3:e2:57:5e:a6:4d:89:a1:59:59:f1:f1:e1:3a:a8:
         a0:76:17:51:b4:d4:14:6e:c3:c4:0c:cd:fd:ae:01:63:cf:8b:
         50:11:9d:69:c8:eb:f6:3a:8c:9c:ed:db:87:63:35:26:a4:18:
         35:b7:b0:38:87:63:5e:db:f5:b4:bb:03:17:ba:58:0b:b1:b8:
         6e:9c:f3:20:c2:98:72:8a:fe:8e:b4:93:18:ea:f0:b1:30:f0:
         73:fc:d3:49:7a:d2:5c:eb:a1:df:02:33:21:7d:67:ea:37:0e:
         a4:1a:07:a5:0c:e2:9a:c0:19:82:4d:cb:c2:17:34:85:cd:b6:
         5f:be:05:78:5c:ad:0b:ac:bc:2b:3b:84:56:70:92:9a:74:bd:
         18:99:d2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 17:25:21 2026 by rpki-client