This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Bv7qdIynKdZMI-P6-xF9VWllpNs.roa
File:                     Bv7qdIynKdZMI-P6-xF9VWllpNs.roa (raw, json)
Hash identifier:          bLK9TvfWN2sH1qp924dJMpWvZP4Q59J3E6kgUjRdOMk=
Subject key identifier:   06:FE:EA:74:8C:A7:29:D6:4C:23:E3:FA:FB:11:7D:55:69:65:A4:DB
Certificate issuer:       /CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Certificate serial:       019B7F14CCD8709FFC9F96E1586E4715BBEF
Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Bv7qdIynKdZMI-P6-xF9VWllpNs.roa
Signing time:             Fri 02 Jan 2026 14:20:28 +0000
ROA not before:           Fri 02 Jan 2026 14:20:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56971
IP address blocks:        193.164.155.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 18:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:cc:d8:70:9f:fc:9f:96:e1:58:6e:47:15:bb:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9
        Validity
            Not Before: Jan  2 14:20:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=06feea748ca729d64c23e3fafb117d556965a4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e1:1a:5f:49:b8:30:8d:e3:f0:1f:e7:dc:c0:
                    4f:13:d5:06:40:78:27:fc:9a:ad:80:82:fc:23:d1:
                    85:7d:bb:de:a0:65:5c:f7:17:86:0a:85:bc:13:ce:
                    7e:a5:fc:e2:6d:dc:02:6c:b5:6e:ac:b7:77:30:5e:
                    98:01:3c:ed:3f:09:41:e3:af:5b:1b:79:c4:70:d2:
                    21:f3:f3:a8:02:a2:fe:b5:65:fb:78:72:61:3d:61:
                    8f:6f:dc:33:29:a8:53:fd:ad:ac:37:42:8f:f7:b5:
                    82:3b:56:5d:f5:10:12:7e:ef:d2:a0:7b:11:43:1f:
                    89:e1:4e:02:8b:4a:3e:bb:3c:fe:18:64:e5:21:4d:
                    58:f9:38:73:d7:71:4a:16:9e:b9:eb:c2:50:76:2f:
                    4c:ac:f2:38:28:fd:df:c7:c0:18:76:03:77:f5:7b:
                    36:ec:6c:85:1c:23:69:58:73:10:25:35:73:68:64:
                    45:b3:a8:60:7e:e4:ac:ea:18:41:2b:b8:00:89:8e:
                    a3:8b:84:30:b9:61:df:4f:12:0b:ad:66:10:21:b4:
                    a1:05:55:44:4f:45:0d:b3:1f:79:d0:86:94:58:3d:
                    a3:07:1d:79:77:22:10:5c:e6:fb:c0:e2:76:ec:4f:
                    b4:0b:dc:4a:ff:57:92:e0:93:17:99:24:64:c8:78:
                    98:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FE:EA:74:8C:A7:29:D6:4C:23:E3:FA:FB:11:7D:55:69:65:A4:DB
            X509v3 Authority Key Identifier:
                keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Bv7qdIynKdZMI-P6-xF9VWllpNs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.164.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:e9:79:1a:8a:c7:7c:47:ee:f1:74:dd:bf:9b:8f:f3:31:5f:
         2e:a8:4c:77:60:12:3a:e6:fe:43:bd:ca:f6:27:6c:4c:83:bd:
         2f:36:b2:98:c9:dc:fc:a0:a7:fb:1c:61:27:bc:5b:1c:0b:72:
         9c:d0:05:60:53:9e:de:ad:97:e7:97:34:03:8f:40:dd:78:7a:
         a6:f0:a0:84:d8:b3:1f:19:68:38:6a:c3:b8:33:b1:2a:11:4a:
         4c:d8:3c:af:37:55:ab:bc:a3:17:6a:52:f1:a8:76:2e:c5:3e:
         94:c7:a1:90:bc:c3:8f:c7:f9:4f:84:c0:16:22:9e:38:85:be:
         12:1a:84:3a:92:3c:a0:e6:d6:29:fb:56:b2:a9:af:82:60:6d:
         7e:a1:74:34:10:d8:41:75:15:25:41:c6:54:25:a7:84:a8:17:
         72:56:4f:c5:d2:01:a0:03:8b:ba:81:98:09:f8:9c:b6:20:81:
         3c:59:33:b8:e2:69:0e:fc:8b:f4:07:92:0d:95:50:4d:6f:b8:
         fb:e8:b2:2f:91:22:03:53:fe:03:73:b6:fd:82:5a:94:26:6a:
         3f:7e:81:5a:e8:64:dd:04:9c:1a:99:21:15:2a:fb:e4:6a:71:
         d7:54:de:eb:c7:7f:f4:b2:4a:27:19:05:59:8d:c9:28:3d:51:
         bc:cf:aa:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/FMzYcJ/8n5bhWG5HFbvvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmY2NzcwYmE3N2UwMzJlN2U3ZDFkNzMyZDk3NTAyNDFl
MTE5ZjkwHhcNMjYwMTAyMTQyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmZlZWE3NDhjYTcyOWQ2NGMyM2UzZmFmYjExN2Q1NTY5NjVhNGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuEaX0m4MI3j8B/n3MBPE9UGQHgn
/JqtgIL8I9GFfbveoGVc9xeGCoW8E85+pfzibdwCbLVurLd3MF6YATztPwlB469b
G3nEcNIh8/OoAqL+tWX7eHJhPWGPb9wzKahT/a2sN0KP97WCO1Zd9RASfu/SoHsR
Qx+J4U4Ci0o+uzz+GGTlIU1Y+Thz13FKFp6568JQdi9MrPI4KP3fx8AYdgN39Xs2
7GyFHCNpWHMQJTVzaGRFs6hgfuSs6hhBK7gAiY6ji4QwuWHfTxILrWYQIbShBVVE
T0UNsx950IaUWD2jBx15dyIQXOb7wOJ27E+0C9xK/1eS4JMXmSRkyHiYEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAb+6nSMpynWTCPj+vsRfVVpZaTbMB8GA1UdIwQY
MBaAFBZvZ3C6d+Ay5+fR1zLZdQJB4Rn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83YmRjNDEtMTg3NS00ZTUwLWIzZDQt
MDY5YzEwZGFmYjA3LzEvQnY3cWRJeW5LZFpNSS1QNi14RjlWV2xscE5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy83YmRjNDEtMTg3NS00ZTUwLWIzZDQtMDY5YzEwZGFmYjA3
LzEvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaSbMA0G
CSqGSIb3DQEBCwUAA4IBAQCz6Xkaisd8R+7xdN2/m4/zMV8uqEx3YBI65v5Dvcr2
J2xMg70vNrKYydz8oKf7HGEnvFscC3Kc0AVgU57erZfnlzQDj0DdeHqm8KCE2LMf
GWg4asO4M7EqEUpM2DyvN1WrvKMXalLxqHYuxT6Ux6GQvMOPx/lPhMAWIp44hb4S
GoQ6kjyg5tYp+1ayqa+CYG1+oXQ0ENhBdRUlQcZUJaeEqBdyVk/F0gGgA4u6gZgJ
+Jy2IIE8WTO44mkO/Iv0B5INlVBNb7j76LIvkSIDU/4Dc7b9glqUJmo/foFa6GTd
BJwamSEVKvvkanHXVN7rx3/0skonGQVZjckoPVG8z6pE
-----END CERTIFICATE-----
Generated at Thu Feb 5 02:51:19 2026 by rpki-client