This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/BkeMBpLUWgqrfQcp4liiEC-fNog.roa
File:                     BkeMBpLUWgqrfQcp4liiEC-fNog.roa (raw, json)
Hash identifier:          CNX30ei/1ARWUwhB6OtVE1WJLmIAFc4BETfwZmdj7/s=
Subject key identifier:   06:47:8C:06:92:D4:5A:0A:AB:7D:07:29:E2:58:A2:10:2F:9F:36:88
Certificate issuer:       /CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
Certificate serial:       019B7CEE30FC3B458F24EB3AEA2F0B9E97EA
Authority key identifier: E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/BkeMBpLUWgqrfQcp4liiEC-fNog.roa
Signing time:             Fri 02 Jan 2026 04:19:03 +0000
ROA not before:           Fri 02 Jan 2026 04:19:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207850
IP address blocks:        193.108.20.0/24 maxlen: 24
                          193.108.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:30:fc:3b:45:8f:24:eb:3a:ea:2f:0b:9e:97:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf
        Validity
            Not Before: Jan  2 04:19:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=06478c0692d45a0aab7d0729e258a2102f9f3688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:cf:8a:cb:f2:b2:26:bc:44:99:c7:68:b0:58:
                    ae:76:32:3d:d4:bd:09:98:2b:e5:d2:b4:84:5a:7c:
                    84:1c:8e:8f:41:d4:85:7c:ad:c7:9a:c9:1b:f3:b6:
                    6b:46:c6:21:4b:d2:49:d0:a0:8b:6a:ef:76:52:b1:
                    64:d5:b5:89:f7:85:a5:d3:ab:89:7d:71:26:d0:da:
                    18:12:14:b1:b2:85:f5:d3:23:70:6c:5f:ac:16:37:
                    88:f0:9d:db:10:99:f7:54:70:18:ce:10:62:59:25:
                    e1:f6:e1:77:0b:46:94:f7:19:16:32:1d:91:16:85:
                    75:90:64:52:b2:15:93:f3:13:19:b3:76:e7:4f:0d:
                    fb:d2:61:13:19:c2:ec:91:4a:e0:2f:8e:2e:27:84:
                    30:94:01:fb:35:1d:3b:67:13:54:24:1d:3b:af:01:
                    cf:69:64:c0:39:d3:91:8c:e6:92:2e:46:e1:92:5e:
                    7e:4e:82:81:6f:42:00:91:54:59:d1:9d:e4:58:24:
                    25:22:30:76:f7:cb:5f:16:82:76:0c:a0:c0:93:65:
                    71:0e:d4:0c:5d:7d:06:e0:f3:fb:bf:03:b8:16:9b:
                    d6:cd:ef:c6:2c:9f:e1:dd:ce:dc:b3:45:65:9f:5b:
                    3e:bb:6c:82:09:7d:15:95:3e:62:68:9f:30:b9:7b:
                    11:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:47:8C:06:92:D4:5A:0A:AB:7D:07:29:E2:58:A2:10:2F:9F:36:88
            X509v3 Authority Key Identifier:
                keyid:E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/BkeMBpLUWgqrfQcp4liiEC-fNog.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.108.20.0/24
                  193.108.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:0f:57:97:e2:c6:23:2b:50:62:d0:d4:ed:7f:65:14:5e:80:
         3b:d3:d1:3d:6a:01:6e:4d:e2:08:2a:b4:3e:7e:9d:2e:d9:ef:
         a2:74:8b:a2:b4:57:33:b8:53:ba:12:7b:2a:8b:b8:df:f3:40:
         56:17:17:63:3e:4a:50:fb:73:19:c9:ca:9c:6a:66:c0:90:73:
         32:50:cc:68:60:c9:40:8a:d7:80:32:1e:e0:16:45:af:cc:94:
         b6:4d:cb:19:a3:c1:29:89:23:2f:3f:46:77:7e:a1:d8:f8:90:
         c4:bd:86:14:a7:bb:25:a0:04:3b:da:01:49:7b:54:74:e4:32:
         7e:bc:86:32:9d:81:c7:34:17:6d:1b:88:45:b5:86:8c:c1:6d:
         92:ca:3b:15:f6:e6:63:ff:c5:62:58:4f:03:32:a8:88:7b:4e:
         ae:97:2b:23:80:03:ac:12:28:57:c9:29:dd:77:b1:b7:70:92:
         65:6b:10:1a:a9:c4:7a:cf:9f:d8:0c:a6:0c:a0:b4:68:f8:8e:
         43:1c:bf:f4:7c:c5:05:2b:57:d5:62:3f:f8:b2:69:08:cc:b9:
         95:60:f8:2a:d8:7e:db:f3:62:1c:39:c8:ba:95:16:f3:f2:c3:
         bc:85:a3:d1:ef:9e:f4:ba:46:8a:4d:7d:0c:a3:72:16:af:5e:
         67:ff:4e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:18 2026 by rpki-client