This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/BV7l5ZeknRHsMCgPIWQ6h1wnnGI.roa
File:                     BV7l5ZeknRHsMCgPIWQ6h1wnnGI.roa (raw, json)
Hash identifier:          otRYXCY6RuwTPCQ0+H7ztqXwYKdmjEPumnDmi67uqBU=
Subject key identifier:   05:5E:E5:E5:97:A4:9D:11:EC:30:28:0F:21:64:3A:87:5C:27:9C:62
Certificate issuer:       /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial:       019C2793E8AE76BF3DDDA41CE5A7245908A6
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/BV7l5ZeknRHsMCgPIWQ6h1wnnGI.roa
Signing time:             Wed 04 Feb 2026 07:35:30 +0000
ROA not before:           Wed 04 Feb 2026 07:35:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61317
IP address blocks:        45.90.197.0/24 maxlen: 24
                          89.106.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Feb 2026 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:27:93:e8:ae:76:bf:3d:dd:a4:1c:e5:a7:24:59:08:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
        Validity
            Not Before: Feb  4 07:35:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=055ee5e597a49d11ec30280f21643a875c279c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:00:a6:3b:b8:45:79:b2:f6:a8:f6:90:75:1c:
                    6c:2a:46:c6:83:2a:99:a2:79:0e:54:c5:b3:e5:5d:
                    91:26:33:c1:f3:84:75:01:d1:24:d7:af:91:78:a0:
                    0d:81:1f:3b:55:e5:35:0f:b6:ad:1e:47:9c:5c:06:
                    7b:65:dd:cf:c2:a6:19:93:f3:17:32:d9:2c:5c:3b:
                    7a:c4:1e:e3:e1:7a:de:12:94:7c:fe:5f:3b:4c:0b:
                    7c:52:87:a7:b2:13:9e:9a:b3:88:c8:ca:69:f5:8c:
                    9a:72:37:db:b0:ec:5f:6d:75:1f:ba:e9:b6:3e:96:
                    45:f4:16:90:7a:5a:df:0a:fb:29:0f:93:80:bb:70:
                    00:8e:97:68:f8:53:65:0c:36:e2:c8:ab:6c:e4:54:
                    4a:16:cf:82:20:87:74:5b:0b:97:a8:f9:63:d9:fb:
                    fd:53:70:09:6a:93:89:08:6e:76:38:9c:1f:81:60:
                    a1:7f:89:ea:16:cc:d3:83:d2:1c:93:f5:4d:51:b9:
                    ea:f5:bb:9e:3a:99:22:0b:c3:c3:e6:f3:92:9b:b9:
                    ab:6b:0f:46:ab:e2:b1:a4:5a:f8:a5:a8:6c:ca:98:
                    96:3a:a9:d0:4a:fa:ca:3e:fa:28:08:d3:9b:bd:75:
                    0f:4f:a7:8c:b2:1a:bd:72:16:2e:de:5a:6a:94:cd:
                    8d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5E:E5:E5:97:A4:9D:11:EC:30:28:0F:21:64:3A:87:5C:27:9C:62
            X509v3 Authority Key Identifier:
                keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/BV7l5ZeknRHsMCgPIWQ6h1wnnGI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.197.0/24
                  89.106.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:2b:2a:88:9e:02:5c:8a:b5:b8:87:a3:31:49:30:64:f4:44:
         dc:70:f5:59:43:69:67:e0:6c:4e:3d:c1:86:47:2c:35:0b:15:
         0d:a5:80:50:ee:97:b2:9c:ff:36:64:73:05:ee:c3:71:04:73:
         f7:74:7e:85:b7:2d:7f:62:03:b0:52:f0:85:1a:43:6b:b6:2b:
         b7:31:f5:8f:3a:a7:9f:03:bc:78:71:a0:a6:4f:de:01:1d:d0:
         b8:96:5b:54:4f:8d:42:53:18:1f:ec:ef:11:6b:14:01:45:77:
         a1:8f:8d:c1:be:47:8b:11:79:bd:34:98:40:7f:9c:9f:96:ea:
         fe:74:5f:33:3f:98:3a:5b:02:d5:01:6d:5a:78:76:d3:ef:98:
         8c:ff:bc:bb:66:b6:15:54:23:b1:94:c1:1c:18:ed:fc:c2:9c:
         ec:76:35:de:cb:72:e2:9e:22:19:d5:71:cc:6e:65:20:29:7c:
         f8:20:ef:05:b5:dd:9a:0c:ca:9f:bf:f2:c5:43:ea:34:33:2b:
         aa:92:33:16:15:46:52:80:fb:dd:e1:63:d9:28:58:6e:b7:d9:
         5d:51:8e:f3:6d:bf:23:ef:54:51:d4:1e:ad:d8:e3:f3:e9:3a:
         af:15:ac:fa:2a:d4:26:84:e3:79:bd:d6:e3:c5:9a:c2:1a:f1:
         87:10:e2:d6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZwnk+iudr893aQc5ackWQimMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjYwMjA0MDczNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTVlZTVlNTk3YTQ5ZDExZWMzMDI4MGYyMTY0M2E4NzVjMjc5YzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8wCmO7hFebL2qPaQdRxsKkbGgyqZ
onkOVMWz5V2RJjPB84R1AdEk16+ReKANgR87VeU1D7atHkecXAZ7Zd3PwqYZk/MX
MtksXDt6xB7j4XreEpR8/l87TAt8UoenshOemrOIyMpp9YyacjfbsOxfbXUfuum2
PpZF9BaQelrfCvspD5OAu3AAjpdo+FNlDDbiyKts5FRKFs+CIId0WwuXqPlj2fv9
U3AJapOJCG52OJwfgWChf4nqFszTg9Ick/VNUbnq9bueOpkiC8PD5vOSm7mraw9G
q+KxpFr4pahsypiWOqnQSvrKPvooCNObvXUPT6eMshq9chYu3lpqlM2NkwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAVe5eWXpJ0R7DAoDyFkOodcJ5xiMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvQlY3bDVaZWtuUkhzTUNnUElXUTZoMXdubkdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVrFAwQA
WWrKMA0GCSqGSIb3DQEBCwUAA4IBAQAnKyqIngJcirW4h6MxSTBk9ETccPVZQ2ln
4GxOPcGGRyw1CxUNpYBQ7peynP82ZHMF7sNxBHP3dH6Fty1/YgOwUvCFGkNrtiu3
MfWPOqefA7x4caCmT94BHdC4lltUT41CUxgf7O8RaxQBRXehj43BvkeLEXm9NJhA
f5yflur+dF8zP5g6WwLVAW1aeHbT75iM/7y7ZrYVVCOxlMEcGO38wpzsdjXey3Li
niIZ1XHMbmUgKXz4IO8Ftd2aDMqfv/LFQ+o0MyuqkjMWFUZSgPvd4WPZKFhut9ld
UY7zbb8j71RR1B6t2OPz6TqvFaz6KtQmhON5vdbjxZrCGvGHEOLW
-----END CERTIFICATE-----
Generated at Fri Feb 6 22:12:54 2026 by rpki-client