This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/BlOWKc5j8045KgpD8U1F9Iq5Es0.roa
File:                     BlOWKc5j8045KgpD8U1F9Iq5Es0.roa (raw, json)
Hash identifier:          omB3tGHeY8VhpaATCQuElzuZOvNWwAi3D0qIf2YFIKU=
Subject key identifier:   06:53:96:29:CE:63:F3:4E:39:2A:0A:43:F1:4D:45:F4:8A:B9:12:CD
Certificate issuer:       /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Certificate serial:       019B76EAC9C16565693892A8207E1A32B4CC
Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/BlOWKc5j8045KgpD8U1F9Iq5Es0.roa
Signing time:             Thu 01 Jan 2026 00:17:37 +0000
ROA not before:           Thu 01 Jan 2026 00:17:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206922
IP address blocks:        185.171.246.0/24 maxlen: 24
                          185.171.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:c9:c1:65:65:69:38:92:a8:20:7e:1a:32:b4:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
        Validity
            Not Before: Jan  1 00:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=06539629ce63f34e392a0a43f14d45f48ab912cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1b:af:69:86:df:fd:2f:cf:1e:47:4e:25:28:
                    d5:ee:c2:cc:82:1b:1d:f8:85:70:c2:28:f7:31:fd:
                    bf:40:32:f3:22:6c:3d:60:2a:94:e5:5f:c2:6b:8e:
                    7b:6d:9e:bf:b2:5b:76:fa:2b:6d:15:ac:ec:fb:67:
                    75:12:3c:16:2a:b4:c3:14:f9:c7:71:0c:85:40:f7:
                    a9:19:f3:4f:88:aa:d8:4d:d6:f6:26:0d:b7:ce:03:
                    96:60:c7:be:38:2f:18:d6:db:4f:d6:62:d8:5a:c1:
                    50:b4:90:92:58:6e:32:48:3b:a9:13:09:6c:6c:ac:
                    ae:cd:d8:d2:04:fd:70:c8:b7:f7:1a:19:d1:7c:ef:
                    3c:b4:c5:e0:d7:25:f5:7d:4f:16:79:a8:1a:3c:88:
                    51:ab:68:93:49:01:56:91:8a:50:f9:26:13:c9:9b:
                    96:83:3b:bf:53:66:77:f2:55:f5:0a:89:3d:99:e3:
                    55:e6:34:92:d9:3e:f4:9e:1b:da:e8:4d:e2:44:c7:
                    e1:66:c8:10:c6:d7:92:6e:fa:ee:bf:4e:aa:16:d0:
                    78:7e:92:68:ee:88:30:6f:0f:00:4c:a3:10:d3:d6:
                    1f:e9:b8:36:a8:93:2a:a5:4a:11:63:1c:28:1a:67:
                    eb:60:b8:44:54:92:b7:69:72:e0:e8:7d:30:57:2b:
                    a4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:53:96:29:CE:63:F3:4E:39:2A:0A:43:F1:4D:45:F4:8A:B9:12:CD
            X509v3 Authority Key Identifier:
                keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/BlOWKc5j8045KgpD8U1F9Iq5Es0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.171.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:67:89:b0:c5:10:50:01:3a:70:0a:77:6c:f2:2b:c9:90:7e:
         02:78:2e:bc:8e:75:ac:09:6d:a6:79:d0:17:88:89:04:3e:b4:
         28:5d:87:a0:83:91:53:a4:87:d4:ac:c0:24:be:c5:d2:dc:e3:
         95:a1:39:6c:20:28:8f:85:cf:06:05:20:05:b3:70:b9:00:a3:
         be:35:33:d4:44:f1:58:a9:f9:b3:5b:2e:54:5a:ac:61:65:8a:
         1f:9f:e3:e0:3b:76:cc:93:a3:36:1f:54:49:15:4e:d2:ff:f9:
         02:e0:84:69:ef:cd:5c:35:00:8b:13:4e:31:de:51:97:ce:9c:
         ae:e7:63:cb:83:28:b9:df:2c:c7:06:8b:b8:cc:8d:b7:44:06:
         50:67:56:3e:66:49:34:f5:c9:68:50:1e:00:e7:9c:9f:e5:f2:
         9b:75:b8:09:6e:b5:a3:ce:37:88:7f:43:6a:07:12:06:9f:06:
         f5:d8:28:4e:10:06:76:27:3c:30:cb:af:58:eb:c9:1d:23:af:
         1f:08:ce:cd:bf:0c:8c:b8:95:12:15:92:ae:ef:8e:9b:d9:ce:
         c7:ef:51:c3:1f:b5:bf:92:ca:1e:b1:37:0b:9d:ba:ff:78:4f:
         6c:00:6a:a3:5e:78:c6:a1:7f:d7:2c:25:7a:84:f8:53:3f:14:
         a5:0e:81:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:27 2026 by rpki-client