This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/Bq4526EIqoqpYSGwEOXSHnLadwc.roa
File:                     Bq4526EIqoqpYSGwEOXSHnLadwc.roa (raw, json)
Hash identifier:          0HtnJjE+xNk1fnpx9yk3mp6kCM+9p+rqJEmGAdZohrk=
Subject key identifier:   06:AE:39:DB:A1:08:AA:8A:A9:61:21:B0:10:E5:D2:1E:72:DA:77:07
Certificate issuer:       /CN=750e52de53330d5005498b0fc409e64dd98bb099
Certificate serial:       019C3233AB6F31B6AC7A00D38007BDB513DF
Authority key identifier: 75:0E:52:DE:53:33:0D:50:05:49:8B:0F:C4:09:E6:4D:D9:8B:B0:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/Bq4526EIqoqpYSGwEOXSHnLadwc.roa
Signing time:             Fri 06 Feb 2026 09:06:12 +0000
ROA not before:           Fri 06 Feb 2026 09:06:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212030
IP address blocks:        194.33.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:32:33:ab:6f:31:b6:ac:7a:00:d3:80:07:bd:b5:13:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750e52de53330d5005498b0fc409e64dd98bb099
        Validity
            Not Before: Feb  6 09:06:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=06ae39dba108aa8aa96121b010e5d21e72da7707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c1:5e:25:20:7a:2d:0c:46:d0:33:6c:20:23:
                    67:01:04:c1:57:66:b3:7e:0e:e8:25:ab:ff:e1:18:
                    a4:ac:e2:e4:2a:63:b6:57:42:5b:b3:ae:ab:a9:11:
                    a6:b3:32:a9:7f:2c:48:b4:54:79:36:de:04:af:05:
                    ba:c9:58:bf:e7:88:02:7e:07:f5:4b:e7:44:83:1f:
                    51:a0:cf:35:0c:23:a4:47:e5:68:3c:44:5f:41:fb:
                    83:29:1b:75:a9:cc:1c:cf:4f:69:33:e4:f1:d2:bb:
                    92:ec:71:6f:f1:76:a7:63:a8:c3:f1:ed:fe:83:15:
                    ef:d6:a5:db:a1:34:97:77:c9:5d:d1:97:ca:3f:a1:
                    d0:6f:77:ad:1b:b5:a3:9b:dd:f9:70:a7:d0:9e:bf:
                    10:5a:2b:61:69:9b:0e:38:bc:dc:57:5c:fd:f9:e8:
                    c3:06:2e:16:ab:25:5e:f5:c3:f0:03:b1:c2:5f:7a:
                    bb:9e:75:df:a1:8f:05:77:73:a0:69:79:37:64:e3:
                    50:d6:98:f1:39:29:cd:54:79:98:ee:94:a1:d3:62:
                    7b:fb:7f:f8:45:a6:08:56:fb:89:94:3e:6e:7c:51:
                    7e:92:1c:34:e1:ac:0a:1b:62:6f:c4:11:c3:8e:6d:
                    54:15:4e:25:f9:5f:a8:68:e3:e6:a4:f8:df:fe:ec:
                    59:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AE:39:DB:A1:08:AA:8A:A9:61:21:B0:10:E5:D2:1E:72:DA:77:07
            X509v3 Authority Key Identifier:
                keyid:75:0E:52:DE:53:33:0D:50:05:49:8B:0F:C4:09:E6:4D:D9:8B:B0:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/Bq4526EIqoqpYSGwEOXSHnLadwc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.33.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:2d:81:91:34:4f:11:b3:16:80:12:0b:93:8d:e9:32:1d:01:
         e8:9b:df:24:87:1b:7e:a6:74:98:71:0f:4b:c2:46:36:92:98:
         3f:d9:96:fc:c2:18:af:2e:15:6e:fb:c4:eb:b0:fe:f4:30:e7:
         3e:65:29:e2:ad:d6:d5:c6:84:50:b0:a2:51:5b:f8:bc:dc:22:
         cd:52:a6:40:5b:00:9f:17:c5:ec:6a:05:b1:c6:d3:ef:e5:d2:
         cd:b7:1d:42:a0:fb:41:2d:e1:13:3f:11:6e:51:c2:81:5f:cd:
         49:82:b2:81:02:b7:3c:b3:56:b6:79:ad:19:64:e3:71:c6:c1:
         45:81:ea:7d:92:d9:fc:b4:9c:b1:c3:93:06:97:90:14:48:b6:
         24:83:25:3a:7a:35:c8:26:cd:61:0e:88:77:b4:ba:47:99:53:
         3e:7e:52:85:15:99:70:cb:96:32:e9:51:e6:95:34:fb:d2:ab:
         1d:e7:94:d5:6d:a5:2c:dd:f1:82:16:fe:e5:d6:94:df:62:dd:
         1e:37:44:86:96:b9:7c:50:72:46:c0:39:dd:0c:54:f0:d8:dc:
         61:25:25:73:55:03:71:9b:4d:5a:66:bd:0a:34:2b:ef:78:d2:
         9c:3b:f6:c1:26:86:28:64:ee:69:61:b9:a0:57:ad:49:cc:56:
         c4:e0:49:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZwyM6tvMbasegDTgAe9tRPfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MGU1MmRlNTMzMzBkNTAwNTQ5OGIwZmM0MDllNjRkZDk4
YmIwOTkwHhcNMjYwMjA2MDkwNjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmFlMzlkYmExMDhhYThhYTk2MTIxYjAxMGU1ZDIxZTcyZGE3NzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsFeJSB6LQxG0DNsICNnAQTBV2az
fg7oJav/4RikrOLkKmO2V0Jbs66rqRGmszKpfyxItFR5Nt4ErwW6yVi/54gCfgf1
S+dEgx9RoM81DCOkR+VoPERfQfuDKRt1qcwcz09pM+Tx0ruS7HFv8XanY6jD8e3+
gxXv1qXboTSXd8ld0ZfKP6HQb3etG7Wjm935cKfQnr8QWithaZsOOLzcV1z9+ejD
Bi4WqyVe9cPwA7HCX3q7nnXfoY8Fd3OgaXk3ZONQ1pjxOSnNVHmY7pSh02J7+3/4
RaYIVvuJlD5ufFF+khw04awKG2JvxBHDjm1UFU4l+V+oaOPmpPjf/uxZsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAauOduhCKqKqWEhsBDl0h5y2ncHMB8GA1UdIwQY
MBaAFHUOUt5TMw1QBUmLD8QJ5k3Zi7CZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFE1UzNsTXpEVkFGU1lzUHhBbm1UZG1Mc0prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS83NjUxOWUtYzY4MC00Mjk3LThiNzkt
MjRmNmJkYmQ5NTBkLzEvQnE0NTI2RUlxb3FwWVNHd0VPWFNIbkxhZHdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS83NjUxOWUtYzY4MC00Mjk3LThiNzktMjRmNmJkYmQ5NTBk
LzEvZFE1UzNsTXpEVkFGU1lzUHhBbm1UZG1Mc0prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiEWMA0G
CSqGSIb3DQEBCwUAA4IBAQBwLYGRNE8RsxaAEguTjekyHQHom98khxt+pnSYcQ9L
wkY2kpg/2Zb8whivLhVu+8TrsP70MOc+ZSnirdbVxoRQsKJRW/i83CLNUqZAWwCf
F8XsagWxxtPv5dLNtx1CoPtBLeETPxFuUcKBX81JgrKBArc8s1a2ea0ZZONxxsFF
gep9ktn8tJyxw5MGl5AUSLYkgyU6ejXIJs1hDoh3tLpHmVM+flKFFZlwy5Yy6VHm
lTT70qsd55TVbaUs3fGCFv7l1pTfYt0eN0SGlrl8UHJGwDndDFTw2NxhJSVzVQNx
m01aZr0KNCvveNKcO/bBJoYoZO5pYbmgV61JzFbE4Em4
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:23:12 2026 by rpki-client