This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/_BB0ZdbUeeGFKqBB6D8keNkJhmM.roa
File:                     _BB0ZdbUeeGFKqBB6D8keNkJhmM.roa (raw, json)
Hash identifier:          T/kG9iPqWLLw7hdfMQ7fu7gcEyRzV3wIoGwtmsPPr8s=
Subject key identifier:   FC:10:74:65:D6:D4:79:E1:85:2A:A0:41:E8:3F:24:78:D9:09:86:63
Certificate issuer:       /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial:       019B77C778509D12F4E3156D77F3FCB20BA7
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/_BB0ZdbUeeGFKqBB6D8keNkJhmM.roa
Signing time:             Thu 01 Jan 2026 04:18:39 +0000
ROA not before:           Thu 01 Jan 2026 04:18:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214208
IP address blocks:        212.116.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Jan 2026 16:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:78:50:9d:12:f4:e3:15:6d:77:f3:fc:b2:0b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
        Validity
            Not Before: Jan  1 04:18:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fc107465d6d479e1852aa041e83f2478d9098663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:54:e5:cc:8d:52:3c:e3:3f:54:5c:c2:74:
                    7a:b7:ae:25:f3:8f:2e:f2:95:f3:7b:37:ff:c4:f6:
                    f2:1e:4f:40:d2:bb:4d:07:16:87:95:32:a0:9e:78:
                    5b:4f:33:45:1b:bf:ad:c8:1d:56:4f:4c:7f:06:07:
                    cc:53:f8:a5:58:62:c0:8b:4a:42:48:de:4c:33:51:
                    33:8d:55:00:2f:6b:0b:6d:00:fe:b4:8a:85:da:bf:
                    3e:ad:33:9a:bf:84:b8:38:34:d0:ff:f9:fc:f8:ab:
                    cd:45:93:a4:ed:7b:31:69:71:c0:2f:97:37:22:14:
                    d5:33:2d:68:56:f4:ec:f0:d8:9f:73:7d:82:18:b2:
                    82:50:7f:b9:65:7a:b6:74:27:e1:fd:95:51:8c:a4:
                    57:bb:8e:46:4e:0e:d5:67:d9:5b:88:e8:1e:da:fb:
                    a3:58:1f:12:1a:f1:8d:53:ed:e3:7b:73:a3:1f:8a:
                    7b:39:c5:63:52:09:bd:f0:08:cc:23:25:9a:a9:dc:
                    3a:c8:72:bf:17:8a:6a:14:6b:57:82:17:5e:2c:d7:
                    c3:1a:16:5a:36:c5:d2:99:44:34:50:6d:e8:d5:06:
                    8d:45:4b:a6:95:85:e1:b5:65:bc:cf:5b:cf:d7:70:
                    70:62:6c:35:0e:05:57:ef:bf:a3:63:cf:09:10:c6:
                    3b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:10:74:65:D6:D4:79:E1:85:2A:A0:41:E8:3F:24:78:D9:09:86:63
            X509v3 Authority Key Identifier:
                keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/_BB0ZdbUeeGFKqBB6D8keNkJhmM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.116.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:f9:d8:3d:f5:82:19:c5:13:5a:2b:2f:85:48:2d:56:b7:69:
         c6:5d:79:86:d7:6e:48:11:8d:42:09:80:61:a6:e1:70:29:96:
         12:44:5b:b5:59:12:dc:01:21:c9:46:2c:4f:71:5b:15:cb:96:
         6a:55:03:f2:2a:54:b9:97:db:a4:0a:8d:dd:f7:a1:85:7b:1a:
         8b:90:ef:9a:31:32:de:0e:48:df:05:44:d8:bd:ac:0b:7e:39:
         3b:06:38:d6:6a:bd:cd:24:d5:6a:e9:ad:c3:96:7a:b5:38:b6:
         e0:9a:25:44:89:6d:a3:58:ad:d7:fd:10:8a:91:a5:e9:d1:04:
         24:08:da:34:a3:40:18:af:76:f4:1e:97:4c:ce:27:35:1c:ba:
         e6:8a:0e:b3:99:9e:ed:9a:a5:b4:14:82:b5:0f:bf:ce:59:06:
         77:9a:39:ac:be:2b:a5:36:bc:6a:08:a6:5d:17:f8:e4:4e:e0:
         61:08:34:1b:bb:18:53:79:32:55:16:dc:a4:8c:97:62:5c:0f:
         74:c8:97:bf:1a:11:1e:a8:10:94:a0:9e:0c:9b:78:5b:46:69:
         48:bf:ef:37:02:c3:ec:cf:28:6d:4d:b5:09:4f:fb:fb:fa:15:
         b7:c8:53:48:af:2e:e9:09:25:01:24:52:7c:e3:69:53:bb:a2:
         b2:7b:79:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 00:32:40 2026 by rpki-client