This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/BBawoDOgCNhNeB0bmgv5HWVkPvo.roa
File:                     BBawoDOgCNhNeB0bmgv5HWVkPvo.roa (raw, json)
Hash identifier:          g4VK835y6FR06hfVg0YZwZaWn/pdICbM8JaqEaTm+d8=
Subject key identifier:   04:16:B0:A0:33:A0:08:D8:4D:78:1D:1B:9A:0B:F9:1D:65:64:3E:FA
Certificate issuer:       /CN=192fc85b01f21a0d685c03001df47ac460937bf1
Certificate serial:       019B7835519E4EA5C22766287C5E596A15DC
Authority key identifier: 19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/BBawoDOgCNhNeB0bmgv5HWVkPvo.roa
Signing time:             Thu 01 Jan 2026 06:18:38 +0000
ROA not before:           Thu 01 Jan 2026 06:18:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3268
IP address blocks:        185.190.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:51:9e:4e:a5:c2:27:66:28:7c:5e:59:6a:15:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=192fc85b01f21a0d685c03001df47ac460937bf1
        Validity
            Not Before: Jan  1 06:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0416b0a033a008d84d781d1b9a0bf91d65643efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:9c:e5:c4:b0:b0:c6:f4:13:af:ec:1a:fd:
                    ce:e2:72:cf:c6:00:4f:3b:e8:6c:dd:a0:81:37:d2:
                    9e:92:5a:12:df:fb:28:41:c9:10:2b:48:69:57:42:
                    72:ec:88:c8:38:d2:c2:b0:4e:4c:3e:42:54:f2:50:
                    fc:0a:1a:ab:d8:00:0a:5a:9a:9b:71:61:ef:da:7d:
                    26:55:cd:cd:d8:e2:68:eb:fe:2c:df:52:71:3b:fb:
                    5c:70:b7:dc:01:99:08:c0:71:c3:8d:3b:8f:62:23:
                    4f:2b:5d:24:6e:fd:88:c9:26:04:e2:25:6b:4f:c4:
                    9d:86:43:ee:4d:03:53:c7:5e:93:61:27:3d:90:b8:
                    4f:f5:49:34:01:c2:54:45:f0:42:a5:8e:c5:ad:ab:
                    28:1b:57:69:b3:c3:44:d4:f5:2a:9e:0a:3e:d3:d5:
                    da:ba:05:38:e7:90:c7:c9:58:10:dc:1d:bd:e6:9c:
                    05:c9:9f:94:3e:a2:2f:5c:6b:6f:10:71:da:6c:2a:
                    70:81:45:c4:61:8a:e5:a5:a8:bc:04:0e:25:be:91:
                    2c:cd:9d:4e:63:8e:8b:b7:e8:c5:70:6c:5d:19:62:
                    e7:df:14:00:31:cf:5a:13:13:d1:6e:25:55:63:2c:
                    e7:6b:51:e8:38:bd:35:9a:0c:22:b4:14:cd:65:bc:
                    49:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:16:B0:A0:33:A0:08:D8:4D:78:1D:1B:9A:0B:F9:1D:65:64:3E:FA
            X509v3 Authority Key Identifier:
                keyid:19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/BBawoDOgCNhNeB0bmgv5HWVkPvo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:a5:ca:1a:55:da:b2:d7:29:37:b1:15:a6:b6:3c:d2:a5:15:
         1d:60:33:85:d1:01:b4:14:76:70:7c:94:5d:ee:54:ec:e6:01:
         b2:fe:89:aa:91:ce:fc:78:f0:40:b0:6e:0f:e7:67:89:eb:a2:
         da:19:88:ac:f3:0e:6d:0e:f8:b7:95:eb:90:32:38:85:22:13:
         04:fa:c8:53:5d:49:31:80:3a:7b:c2:a5:ea:53:37:84:d1:50:
         8b:d6:02:c1:c5:7b:ef:26:54:f7:32:52:3f:e4:aa:ed:5c:40:
         83:fe:e8:ed:6c:c1:cf:bc:40:94:e1:94:8a:9d:8b:d6:e7:99:
         36:87:03:6f:2f:28:79:c7:2b:8c:33:9a:c6:2a:e0:aa:4b:9e:
         30:23:68:ed:52:19:bf:9a:b4:42:47:74:e4:80:45:91:49:b4:
         35:d4:00:14:b2:9f:4d:53:45:f5:ef:a9:d2:3d:16:f4:95:69:
         3f:30:74:c4:3c:da:dd:d0:c2:0c:03:7e:f7:56:92:05:5d:19:
         c1:ff:34:4e:ba:f4:a6:1e:dd:85:35:98:e6:ca:2f:79:db:83:
         8f:83:ea:84:71:24:d9:1f:f4:b3:8a:2e:7d:dc:10:cc:8d:4d:
         04:41:1c:6a:79:f2:20:dc:a5:9d:a6:2d:9b:29:b9:5c:50:fb:
         19:87:09:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4NVGeTqXCJ2YofF5ZahXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MmZjODViMDFmMjFhMGQ2ODVjMDMwMDFkZjQ3YWM0NjA5
MzdiZjEwHhcNMjYwMTAxMDYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDE2YjBhMDMzYTAwOGQ4NGQ3ODFkMWI5YTBiZjkxZDY1NjQzZWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvGc5cSwsMb0E6/sGv3O4nLPxgBP
O+hs3aCBN9KekloS3/soQckQK0hpV0Jy7IjIONLCsE5MPkJU8lD8Chqr2AAKWpqb
cWHv2n0mVc3N2OJo6/4s31JxO/tccLfcAZkIwHHDjTuPYiNPK10kbv2IySYE4iVr
T8SdhkPuTQNTx16TYSc9kLhP9Uk0AcJURfBCpY7FrasoG1dps8NE1PUqngo+09Xa
ugU455DHyVgQ3B295pwFyZ+UPqIvXGtvEHHabCpwgUXEYYrlpai8BA4lvpEszZ1O
Y46Lt+jFcGxdGWLn3xQAMc9aExPRbiVVYyzna1HoOL01mgwitBTNZbxJyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAQWsKAzoAjYTXgdG5oL+R1lZD76MB8GA1UdIwQY
MBaAFBkvyFsB8hoNaFwDAB30esRgk3vxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1NfSVd3SHlHZzFvWEFNQUhmUjZ4R0NUZV9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8xODI5MTUtZmVlYy00MTYwLTg4YmYt
YjIxMDQ0N2MwN2ZmLzEvQkJhd29ET2dDTmhOZUIwYm1ndjVIV1ZrUHZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8xODI5MTUtZmVlYy00MTYwLTg4YmYtYjIxMDQ0N2MwN2Zm
LzEvR1NfSVd3SHlHZzFvWEFNQUhmUjZ4R0NUZV9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub4eMA0G
CSqGSIb3DQEBCwUAA4IBAQDGpcoaVdqy1yk3sRWmtjzSpRUdYDOF0QG0FHZwfJRd
7lTs5gGy/omqkc78ePBAsG4P52eJ66LaGYis8w5tDvi3leuQMjiFIhME+shTXUkx
gDp7wqXqUzeE0VCL1gLBxXvvJlT3MlI/5KrtXECD/ujtbMHPvECU4ZSKnYvW55k2
hwNvLyh5xyuMM5rGKuCqS54wI2jtUhm/mrRCR3TkgEWRSbQ11AAUsp9NU0X176nS
PRb0lWk/MHTEPNrd0MIMA373VpIFXRnB/zROuvSmHt2FNZjmyi9524OPg+qEcSTZ
H/Szii593BDMjU0EQRxqefIg3KWdpi2bKblcUPsZhwky
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:14:39 2026 by rpki-client