This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/bXB-i6Lhy6fvpdzIiTkVhyczG_U.roa
File:                     bXB-i6Lhy6fvpdzIiTkVhyczG_U.roa (raw, json)
Hash identifier:          iC3w2ATNl681c9BfAw0pn7UfTakT8tUW+v5eD5mbocQ=
Subject key identifier:   6D:70:7E:8B:A2:E1:CB:A7:EF:A5:DC:C8:89:39:15:87:27:33:1B:F5
Certificate issuer:       /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial:       019B7BA35FA45CBB05E0266AD53D0D58501E
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/bXB-i6Lhy6fvpdzIiTkVhyczG_U.roa
Signing time:             Thu 01 Jan 2026 22:17:43 +0000
ROA not before:           Thu 01 Jan 2026 22:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43342
IP address blocks:        91.135.178.0/23 maxlen: 23
                          91.135.178.0/24 maxlen: 24
                          91.135.179.0/24 maxlen: 24
                          91.135.180.0/22 maxlen: 23
                          91.135.180.0/24 maxlen: 24
                          91.135.181.0/24 maxlen: 24
                          91.135.182.0/24 maxlen: 24
                          91.135.183.0/24 maxlen: 24
                          91.135.184.0/22 maxlen: 23
                          91.135.184.0/24 maxlen: 24
                          91.135.185.0/24 maxlen: 24
                          91.135.186.0/24 maxlen: 24
                          91.135.187.0/24 maxlen: 24
                          91.135.190.0/23 maxlen: 23
                          91.135.190.0/24 maxlen: 24
                          91.135.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:5f:a4:5c:bb:05:e0:26:6a:d5:3d:0d:58:50:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
        Validity
            Not Before: Jan  1 22:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6d707e8ba2e1cba7efa5dcc88939158727331bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ac:aa:d4:57:2e:d0:93:a8:b7:d1:e9:2f:bd:
                    c7:3e:d2:e3:47:52:ad:d8:53:02:9b:20:21:78:3b:
                    1d:37:63:bb:f1:1f:78:da:a6:d0:7c:66:46:6b:fe:
                    79:77:36:45:ee:89:29:32:9f:02:e7:cf:70:71:d7:
                    a3:b0:0c:49:e2:30:aa:0b:7d:61:0e:30:c4:a2:c6:
                    4e:c1:05:c5:10:e0:e7:20:1a:a9:3e:10:4b:20:94:
                    95:15:1d:2a:40:9b:41:8f:90:94:7a:68:88:66:8d:
                    4b:eb:a2:d8:95:93:3a:bc:20:af:6e:26:ed:8f:5b:
                    ab:63:c5:ab:52:15:c6:5f:1c:c2:f5:5a:2a:ef:2a:
                    4d:6f:a6:e6:25:c6:53:02:5a:e5:15:e8:00:de:89:
                    21:19:64:bd:29:c9:af:cc:e8:9a:cb:7c:56:2b:d1:
                    36:1d:b4:ad:7c:a1:77:dc:a9:cf:98:b4:56:5a:95:
                    a9:41:be:f0:51:15:2b:27:96:9f:7a:4d:0c:84:0e:
                    9e:bd:bc:68:cd:df:ef:37:d7:77:f5:cd:e5:ea:bf:
                    48:a0:6e:e2:8d:76:e8:6a:ac:d5:e9:4f:bf:9e:d6:
                    74:57:ea:51:0a:92:e8:95:b8:d1:32:a9:27:25:95:
                    ef:6b:47:12:93:01:96:5b:f2:af:9e:57:87:8a:a9:
                    43:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:70:7E:8B:A2:E1:CB:A7:EF:A5:DC:C8:89:39:15:87:27:33:1B:F5
            X509v3 Authority Key Identifier:
                keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/bXB-i6Lhy6fvpdzIiTkVhyczG_U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.135.178.0-91.135.187.255
                  91.135.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:c0:58:94:2c:c5:9e:23:aa:32:b0:95:9c:c7:d9:e2:6c:74:
         18:97:57:78:85:10:39:df:cd:75:ac:0e:21:20:89:f6:58:36:
         9d:18:8b:a2:f3:09:90:e7:11:ca:e5:fa:44:33:a1:73:4c:c3:
         06:d9:b4:cb:c5:66:cd:e1:86:7d:31:c7:02:22:6a:2c:f6:39:
         d0:bd:b6:8f:e3:c5:17:9b:ea:1b:86:9d:01:15:2b:59:9f:f7:
         67:b4:07:4f:72:22:0d:fe:b9:e7:4d:f6:49:fd:b9:b6:cc:5c:
         38:9a:89:ff:90:07:0e:9f:d9:0d:99:52:a3:84:30:34:c2:1f:
         0e:76:dd:6b:b9:23:64:25:15:5b:b2:c5:55:56:a3:c4:e0:5a:
         35:cb:87:10:c2:fe:57:bc:65:fa:6f:dd:9c:66:4d:ed:49:22:
         13:d3:7d:13:49:e5:17:76:4f:97:16:f9:39:88:75:f3:96:21:
         60:54:ae:71:df:c8:82:e9:7b:f3:30:e7:cc:96:9b:fb:db:b6:
         53:a4:8e:68:7b:bf:69:de:c1:93:e5:01:31:5f:1c:66:b6:fe:
         40:01:dd:ba:c7:3d:84:17:c3:01:b9:f6:c9:e9:79:e4:b0:25:
         41:24:aa:46:8e:7a:48:3a:fa:70:d7:a2:e1:1c:48:a0:47:96:
         1f:ed:bc:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:37:18 2026 by rpki-client