This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/BIuT5bJfKgI6fTn0dOc3oZn0Cqk.roa
File:                     BIuT5bJfKgI6fTn0dOc3oZn0Cqk.roa (raw, json)
Hash identifier:          22eUg+cF+ZiwjQk0TqdP64rLfrQEXvEkQaY+niB35NQ=
Subject key identifier:   04:8B:93:E5:B2:5F:2A:02:3A:7D:39:F4:74:E7:37:A1:99:F4:0A:A9
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       019B7C802E2BA2B83425C7011B06D7611822
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/BIuT5bJfKgI6fTn0dOc3oZn0Cqk.roa
Signing time:             Fri 02 Jan 2026 02:18:53 +0000
ROA not before:           Fri 02 Jan 2026 02:18:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214915
IP address blocks:        45.84.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 16:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:2e:2b:a2:b8:34:25:c7:01:1b:06:d7:61:18:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan  2 02:18:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=048b93e5b25f2a023a7d39f474e737a199f40aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f8:ed:ae:9c:48:a8:37:3c:98:b9:93:e0:fc:
                    c8:7a:73:20:74:de:54:19:d0:e2:c1:d6:fa:1a:5e:
                    b8:44:db:3e:9e:be:58:6e:97:6c:af:32:de:3a:6d:
                    8f:7c:19:1f:0b:47:eb:19:c5:90:b1:f6:b7:6f:44:
                    3c:4c:af:04:20:65:28:dc:15:6e:27:d2:ea:1e:d6:
                    ad:15:50:77:77:6a:e5:96:fd:a5:bd:ed:14:92:66:
                    eb:dc:1a:f4:26:49:98:87:7d:17:47:b9:a0:81:d3:
                    b7:ef:9d:8a:09:69:8e:f5:39:be:66:02:5b:f4:08:
                    d9:64:b7:ea:f6:80:45:9d:de:54:33:7c:9b:d5:51:
                    1c:b8:95:ab:e1:4e:27:f6:a3:ae:0d:be:d0:52:80:
                    54:0f:78:0f:71:4a:fa:e3:c9:49:2f:dc:15:42:7e:
                    e3:34:b8:25:0b:e6:79:80:42:6b:13:a0:ce:8c:0a:
                    52:72:bc:df:36:44:0f:d6:00:ad:3e:0b:e2:5e:41:
                    90:6d:5b:2b:65:e9:61:65:0c:c5:71:e7:bb:b0:71:
                    60:62:e2:21:5f:df:2e:61:82:d4:ca:5b:29:48:3c:
                    f7:e4:46:be:8e:12:3c:89:15:f4:11:4e:63:4a:8e:
                    80:83:d5:41:9c:93:dc:bf:e9:3b:b4:cb:55:35:aa:
                    6c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8B:93:E5:B2:5F:2A:02:3A:7D:39:F4:74:E7:37:A1:99:F4:0A:A9
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/BIuT5bJfKgI6fTn0dOc3oZn0Cqk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:ce:af:e2:19:aa:a3:f3:f8:64:52:11:8d:c5:b9:49:e9:fb:
         bb:b8:b8:c7:8b:4e:a8:1c:36:b3:25:e6:87:55:69:e4:cd:9f:
         af:ee:9a:32:2b:a1:3f:72:8c:be:d4:58:85:4c:bd:2e:e5:5e:
         1b:03:ca:5e:e8:98:77:02:d4:00:42:b2:85:da:db:4f:73:36:
         e8:6c:df:40:f8:04:97:d9:08:fa:70:b8:d0:ed:f1:17:28:3a:
         f4:5e:6b:d3:3c:d3:31:07:c1:05:c4:3d:6f:96:6a:c6:a7:a6:
         df:e9:43:2e:73:e2:bf:2e:7b:66:1a:53:4a:09:41:21:2b:c0:
         16:b9:d9:74:e2:71:3e:41:cc:9a:be:ff:6f:9b:f3:4c:c7:6b:
         5a:30:17:6b:12:b2:f9:01:f9:fd:ec:8b:10:2a:d8:9f:bb:7f:
         54:6b:24:5a:2d:12:cd:07:b8:75:31:64:82:8e:40:99:cf:b7:
         70:90:87:56:fd:38:0b:59:7b:cd:16:a7:84:49:25:98:4e:78:
         c7:86:8d:1e:aa:88:d8:0b:a8:19:d0:75:0b:f6:7c:8d:08:ac:
         c6:45:7a:ac:c2:71:8d:1f:02:e4:e3:29:c3:70:c6:bb:1b:c9:
         ec:a5:08:59:8b:79:1b:4c:9d:46:18:64:74:de:7c:c6:49:2f:
         16:0a:1f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:00:04 2026 by rpki-client