This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/buiPavT-Zfx6W72yl4fFQx5DwDc.roa
File:                     buiPavT-Zfx6W72yl4fFQx5DwDc.roa (raw, json)
Hash identifier:          H3Kr3JFr7VDVGCn1y+EmkSg9SrmE8in6T0N0RwfWJLM=
Subject key identifier:   6E:E8:8F:6A:F4:FE:65:FC:7A:5B:BD:B2:97:87:C5:43:1E:43:C0:37
Certificate issuer:       /CN=9f96ae2770265af32e7d4be86bab07a07c2d3353
Certificate serial:       019B77C66EFB576BEE53CCCB84F87A01E19D
Authority key identifier: 9F:96:AE:27:70:26:5A:F3:2E:7D:4B:E8:6B:AB:07:A0:7C:2D:33:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5auJ3AmWvMufUvoa6sHoHwtM1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/buiPavT-Zfx6W72yl4fFQx5DwDc.roa
Signing time:             Thu 01 Jan 2026 04:17:31 +0000
ROA not before:           Thu 01 Jan 2026 04:17:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201600
IP address blocks:        46.227.220.0/24 maxlen: 24
                          93.159.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5auJ3AmWvMufUvoa6sHoHwtM1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 10:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:6e:fb:57:6b:ee:53:cc:cb:84:f8:7a:01:e1:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f96ae2770265af32e7d4be86bab07a07c2d3353
        Validity
            Not Before: Jan  1 04:17:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6ee88f6af4fe65fc7a5bbdb29787c5431e43c037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f0:dd:0f:6d:f3:72:6a:71:36:23:05:e5:29:
                    7d:49:a1:a4:22:74:72:b1:eb:59:8c:a3:2c:88:af:
                    a4:a8:88:3d:37:49:da:3c:86:60:a9:81:4b:b0:a5:
                    5f:46:f0:d1:5d:7b:43:bc:7e:f5:78:05:54:8e:86:
                    60:e9:10:4c:b4:d0:14:31:04:0e:c9:d5:10:a6:de:
                    24:ee:90:16:b2:6c:c4:d8:4a:91:43:10:ef:ea:4a:
                    11:f1:75:c8:f5:82:12:44:91:49:e3:33:0f:f3:f5:
                    fd:12:8d:c9:9d:6f:4f:20:44:d9:1f:c0:cd:1a:be:
                    f4:59:df:41:94:73:77:c5:92:04:3b:03:1a:7b:96:
                    69:e6:83:10:95:72:23:56:2b:06:38:41:cd:21:56:
                    93:bb:9e:b3:8a:bc:a9:95:d4:e7:fc:95:01:f2:e4:
                    a3:e5:41:d7:55:20:1b:0a:a5:f1:ae:b4:6e:c9:71:
                    34:8b:d7:51:9d:7a:11:68:5f:23:3c:eb:bf:6c:0a:
                    32:a1:20:08:c9:58:9a:19:39:c2:35:80:ab:89:09:
                    c5:9b:c8:00:26:69:4c:1f:a3:b6:2c:ec:7b:94:df:
                    fe:bd:b3:8c:c5:20:52:eb:b3:82:35:d7:7e:56:58:
                    9d:d2:3a:cc:46:a9:5e:2a:c0:04:e8:04:ac:fe:be:
                    e0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E8:8F:6A:F4:FE:65:FC:7A:5B:BD:B2:97:87:C5:43:1E:43:C0:37
            X509v3 Authority Key Identifier:
                keyid:9F:96:AE:27:70:26:5A:F3:2E:7D:4B:E8:6B:AB:07:A0:7C:2D:33:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5auJ3AmWvMufUvoa6sHoHwtM1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/buiPavT-Zfx6W72yl4fFQx5DwDc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.227.220.0/24
                  93.159.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:a5:39:df:f6:6c:f8:0c:11:bd:33:d5:4a:57:ee:86:c6:65:
         d0:32:cd:ea:f0:b1:de:ce:de:56:05:e2:61:70:9a:34:f4:6b:
         3f:61:15:07:12:e3:ac:0a:1f:42:64:fd:9c:fc:1c:65:9a:2b:
         7c:f5:82:89:b7:72:b1:d6:2c:ac:49:ab:64:59:98:86:00:89:
         e2:fc:11:8e:4a:5d:f4:84:14:75:aa:e8:33:9e:d7:6a:69:d8:
         af:75:8a:d5:5f:0d:a3:e4:6c:4c:a9:b3:10:a5:af:6d:0e:d0:
         f0:e8:f0:2c:58:27:93:74:c6:60:8c:07:db:1d:b2:53:10:5d:
         20:0c:f0:ea:69:d0:d1:59:54:5a:af:72:95:c5:2a:e7:0b:30:
         51:7b:0d:3a:e9:04:f1:f9:79:b5:2c:51:14:7c:f4:c5:9a:14:
         bc:88:84:e1:85:65:4e:fd:a3:4d:e1:b1:78:5d:28:53:8e:39:
         85:f0:12:33:2d:08:69:3c:c7:9e:06:ab:0f:0e:63:0f:59:6d:
         be:e3:c1:7d:03:bd:30:f7:b8:d2:79:3e:a3:e3:d2:26:fd:e1:
         ff:29:7b:0e:c6:22:ef:30:14:88:b0:0b:de:be:44:14:b2:28:
         c5:c4:09:05:cb:31:7c:82:7c:e4:b7:5e:92:19:41:0e:dd:79:
         95:44:ba:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 20:10:35 2026 by rpki-client