This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/BmeWkQ2qsdxjGzo0GXTJOh2jlRc.roa
File:                     BmeWkQ2qsdxjGzo0GXTJOh2jlRc.roa (raw, json)
Hash identifier:          BpAZQxUpOARnv01FH0kV+NBxmmSBpk1Oz9AcYOSnpdI=
Subject key identifier:   06:67:96:91:0D:AA:B1:DC:63:1B:3A:34:19:74:C9:3A:1D:A3:95:17
Certificate issuer:       /CN=4a7f7876d4c5554b772a57e7f1c4ced37fb5e19e
Certificate serial:       019B7AC8C0EAF53C6A7D6C26811FCA2EEB93
Authority key identifier: 4A:7F:78:76:D4:C5:55:4B:77:2A:57:E7:F1:C4:CE:D3:7F:B5:E1:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/BmeWkQ2qsdxjGzo0GXTJOh2jlRc.roa
Signing time:             Thu 01 Jan 2026 18:18:55 +0000
ROA not before:           Thu 01 Jan 2026 18:18:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200346
IP address blocks:        193.22.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:c0:ea:f5:3c:6a:7d:6c:26:81:1f:ca:2e:eb:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a7f7876d4c5554b772a57e7f1c4ced37fb5e19e
        Validity
            Not Before: Jan  1 18:18:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=066796910daab1dc631b3a341974c93a1da39517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:4f:d5:cb:bd:65:04:4a:3c:31:fb:17:7e:
                    9e:2d:dc:ed:87:e5:0d:ca:55:bb:66:66:93:6d:1b:
                    ff:d7:77:8b:f8:dc:9f:56:78:5f:01:12:ff:08:19:
                    f4:b8:a4:16:e9:1e:fe:6f:d0:03:c4:e2:73:b8:95:
                    2a:90:74:dc:99:8e:89:dc:d5:52:15:86:1e:2a:90:
                    77:84:1b:ea:9d:e4:aa:22:9b:0c:9c:c7:00:e8:09:
                    5b:55:ee:fe:cd:12:f4:b4:2c:2c:ba:34:db:af:34:
                    78:22:12:c7:ac:ae:d1:d0:8e:a5:00:5f:54:58:5f:
                    1d:65:61:e6:26:61:34:e1:86:8d:8e:3f:5f:20:d9:
                    80:36:d7:a3:b6:fa:93:fa:1f:77:95:cc:2a:fb:42:
                    f0:47:1a:ef:94:1c:09:41:59:58:c3:6c:29:77:67:
                    34:f0:ac:9d:e7:9d:88:69:4b:2d:b7:ea:74:aa:2b:
                    b6:de:07:7d:91:47:da:9a:eb:50:9b:d2:58:1b:65:
                    70:4d:7a:67:f5:5e:3e:44:24:63:f0:c2:e8:26:29:
                    c7:33:3c:49:77:e2:3a:f5:2b:86:2d:1c:63:0c:e0:
                    d8:25:40:be:23:a6:51:45:46:86:2c:85:9d:d6:8c:
                    89:2a:27:92:fb:00:bf:04:ad:02:ac:3b:0d:94:8d:
                    b7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:67:96:91:0D:AA:B1:DC:63:1B:3A:34:19:74:C9:3A:1D:A3:95:17
            X509v3 Authority Key Identifier:
                keyid:4A:7F:78:76:D4:C5:55:4B:77:2A:57:E7:F1:C4:CE:D3:7F:B5:E1:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/BmeWkQ2qsdxjGzo0GXTJOh2jlRc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:5f:76:37:69:32:9a:51:5a:87:49:bf:7e:75:1a:90:3e:56:
         47:86:53:ac:e9:31:65:79:5f:4d:6a:83:ae:d2:7b:a8:ed:6d:
         8f:20:5d:0c:c1:f7:8a:1f:85:bd:1c:9d:ae:80:cf:ef:ef:b0:
         69:30:b1:bd:b2:f7:58:9a:6d:08:5e:57:f3:79:db:5c:e1:76:
         ae:3f:4e:fd:81:bf:af:84:9a:de:4c:c9:ac:9b:67:33:80:41:
         ba:a5:71:67:a8:88:90:9e:06:1e:2b:b6:1d:95:76:83:8f:5a:
         e9:1a:ca:f5:28:51:7b:3f:9d:8c:a5:a6:24:69:f0:76:47:c0:
         85:ac:eb:af:f8:e9:40:f4:4f:21:79:48:57:5c:ea:55:f8:2a:
         0c:fc:73:10:18:aa:e4:1a:6f:32:0c:3f:ef:86:cb:27:7a:f4:
         fe:09:bd:48:77:32:d1:d8:55:97:97:67:94:28:82:30:0a:7d:
         c7:37:c5:d5:85:30:4c:5c:06:d7:ee:17:8f:6e:2f:30:67:74:
         00:71:9c:56:16:fb:99:8f:ed:83:69:ea:ae:99:96:b2:21:29:
         ac:8a:f1:b9:61:a0:69:b4:3b:80:99:43:5d:51:02:4b:f9:c7:
         6c:0b:34:2f:d7:b2:02:53:14:ce:71:46:98:56:54:16:c4:34:
         63:7d:fd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:16:25 2026 by rpki-client