This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/BtxvHCilSqt_99RwN54PMNqlIS8.roa
File:                     BtxvHCilSqt_99RwN54PMNqlIS8.roa (raw, json)
Hash identifier:          FhEZYVel7CDKvGsL+NRAOlWLOkmBn5nDe2CgOk2RwyA=
Subject key identifier:   06:DC:6F:1C:28:A5:4A:AB:7F:F7:D4:70:37:9E:0F:30:DA:A5:21:2F
Certificate issuer:       /CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Certificate serial:       019B7F1484ED6C6A57735FBAC847A568E3D3
Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/BtxvHCilSqt_99RwN54PMNqlIS8.roa
Signing time:             Fri 02 Jan 2026 14:20:09 +0000
ROA not before:           Fri 02 Jan 2026 14:20:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201948
IP address blocks:        212.46.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:84:ed:6c:6a:57:73:5f:ba:c8:47:a5:68:e3:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2
        Validity
            Not Before: Jan  2 14:20:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=06dc6f1c28a54aab7ff7d470379e0f30daa5212f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:7a:39:1e:83:81:5b:c7:05:81:3c:a2:05:
                    2d:97:22:b0:64:af:e7:9e:98:41:75:dd:17:75:78:
                    91:e5:05:25:c9:32:4c:9d:f4:00:51:d0:46:a2:c4:
                    27:e0:33:79:99:cd:dc:68:ba:48:b1:e1:bf:5a:24:
                    02:2d:d2:34:04:3c:a1:07:54:9c:46:4c:44:4a:e4:
                    d4:e9:c6:8b:00:00:b5:54:e0:66:00:b7:6b:6b:25:
                    82:7b:49:99:2d:55:15:1d:c2:83:98:01:74:cc:34:
                    84:88:8c:62:cc:73:d8:4f:c8:e9:7e:f5:62:84:44:
                    5e:0f:33:37:08:e2:02:16:00:ab:57:04:2a:95:8d:
                    4e:f3:d7:48:97:5c:7d:82:8e:a5:5b:c1:07:52:98:
                    19:58:66:31:06:c3:ff:b7:21:f5:28:82:1a:90:5f:
                    03:ba:19:81:98:56:44:44:6c:fe:b1:7d:08:ed:e8:
                    d5:e9:4f:c4:28:41:71:f4:f8:9b:fd:3b:ad:22:66:
                    cb:35:7a:6f:11:90:b0:8b:b7:f3:b4:a0:8f:13:81:
                    cd:8f:c6:80:cb:1c:d3:0c:b9:1c:90:c3:87:17:c8:
                    4f:63:0a:11:c8:57:65:2d:ef:83:94:c6:fb:e3:47:
                    57:43:a1:b5:15:49:37:79:d1:22:a5:aa:a8:0b:3f:
                    09:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DC:6F:1C:28:A5:4A:AB:7F:F7:D4:70:37:9E:0F:30:DA:A5:21:2F
            X509v3 Authority Key Identifier:
                keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/BtxvHCilSqt_99RwN54PMNqlIS8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.46.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:47:84:f3:dd:6c:c0:79:ce:20:c3:33:f2:70:2d:74:13:08:
         01:0b:02:c3:05:88:33:6a:37:fb:b9:e0:52:7f:3e:d1:04:b0:
         9a:e9:e6:16:79:00:92:6b:0e:36:79:9e:14:78:95:0b:45:70:
         2b:ff:7e:35:b3:f7:7f:85:b1:f3:e3:2c:cb:05:b4:10:42:70:
         55:b3:46:b6:4d:ed:c0:a4:d3:aa:fd:94:71:41:94:3a:2e:ac:
         b3:3f:23:b3:0b:65:77:a3:dd:b1:b6:10:a9:e6:42:1f:82:5e:
         4d:7d:78:eb:68:d2:31:98:2b:3c:8d:22:bd:4a:9b:d5:11:5b:
         e1:44:8d:b1:da:d7:fb:33:ce:c5:5e:b5:64:ec:40:56:ea:29:
         e2:db:bf:ab:c5:39:8e:2c:36:8b:f3:6f:f1:24:d1:3e:e6:76:
         8c:c8:49:76:2f:b4:05:45:7e:6a:46:96:15:d4:fe:d2:e1:c9:
         51:86:15:9d:7d:94:9e:b1:84:20:62:a4:db:fe:45:aa:45:16:
         14:59:d0:6a:f0:89:9d:53:8b:99:a4:a3:13:6c:f4:a1:73:37:
         06:8b:3a:6e:89:12:f1:af:80:69:fb:11:1d:73:a4:32:c4:1d:
         14:83:b9:de:ca:d2:37:1e:b4:e2:96:aa:0a:f2:87:e1:e7:89:
         be:f3:7c:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/FITtbGpXc1+6yEelaOPTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZGIwM2VmMjdjZGFjZTc3ODNhMGVhMzgzNGQ5NzBhZjM4
YWNiZTIwHhcNMjYwMTAyMTQyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmRjNmYxYzI4YTU0YWFiN2ZmN2Q0NzAzNzllMGYzMGRhYTUyMTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyZ6OR6DgVvHBYE8ogUtlyKwZK/n
nphBdd0XdXiR5QUlyTJMnfQAUdBGosQn4DN5mc3caLpIseG/WiQCLdI0BDyhB1Sc
RkxESuTU6caLAAC1VOBmALdrayWCe0mZLVUVHcKDmAF0zDSEiIxizHPYT8jpfvVi
hEReDzM3COICFgCrVwQqlY1O89dIl1x9go6lW8EHUpgZWGYxBsP/tyH1KIIakF8D
uhmBmFZERGz+sX0I7ejV6U/EKEFx9Pib/TutImbLNXpvEZCwi7fztKCPE4HNj8aA
yxzTDLkckMOHF8hPYwoRyFdlLe+DlMb740dXQ6G1FUk3edEipaqoCz8JpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAbcbxwopUqrf/fUcDeeDzDapSEvMB8GA1UdIwQY
MBaAFDnbA+8nzazneDoOo4NNlwrzisviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hNTRmOTAtYzhkOC00MmZhLWIwZGYt
OTUwZjA5MGU1MjJmLzEvQnR4dkhDaWxTcXRfOTlSd041NFBNTnFsSVM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hNTRmOTAtYzhkOC00MmZhLWIwZGYtOTUwZjA5MGU1MjJm
LzEvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1C4pMA0G
CSqGSIb3DQEBCwUAA4IBAQB7R4Tz3WzAec4gwzPycC10EwgBCwLDBYgzajf7ueBS
fz7RBLCa6eYWeQCSaw42eZ4UeJULRXAr/341s/d/hbHz4yzLBbQQQnBVs0a2Te3A
pNOq/ZRxQZQ6LqyzPyOzC2V3o92xthCp5kIfgl5NfXjraNIxmCs8jSK9SpvVEVvh
RI2x2tf7M87FXrVk7EBW6ini27+rxTmOLDaL82/xJNE+5naMyEl2L7QFRX5qRpYV
1P7S4clRhhWdfZSesYQgYqTb/kWqRRYUWdBq8ImdU4uZpKMTbPShczcGizpuiRLx
r4Bp+xEdc6QyxB0Ug7neytI3HrTilqoK8ofh54m+83xG
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:45 2026 by rpki-client