This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Bv4QNF6SQGLHDCa4pPGSOKoN5Zw.roa
File:                     Bv4QNF6SQGLHDCa4pPGSOKoN5Zw.roa (raw, json)
Hash identifier:          PBmXt/J9jzevWMbYxCgym3c4aXWjbalEFu2SESEuNB0=
Subject key identifier:   06:FE:10:34:5E:92:40:62:C7:0C:26:B8:A4:F1:92:38:AA:0D:E5:9C
Certificate issuer:       /CN=665c39bfbc52e9693a4ddf2d56e1ca99f4537e45
Certificate serial:       019B7C80CB32FA585478DEC3DD7382BFC304
Authority key identifier: 66:5C:39:BF:BC:52:E9:69:3A:4D:DF:2D:56:E1:CA:99:F4:53:7E:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Bv4QNF6SQGLHDCa4pPGSOKoN5Zw.roa
Signing time:             Fri 02 Jan 2026 02:19:33 +0000
ROA not before:           Fri 02 Jan 2026 02:19:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211651
IP address blocks:        185.251.69.0/24 maxlen: 24
                          2a13:1700::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:cb:32:fa:58:54:78:de:c3:dd:73:82:bf:c3:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665c39bfbc52e9693a4ddf2d56e1ca99f4537e45
        Validity
            Not Before: Jan  2 02:19:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=06fe10345e924062c70c26b8a4f19238aa0de59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:90:50:d5:c8:39:00:94:27:8a:6e:fc:af:19:
                    cd:7f:de:ed:5a:1b:6a:28:37:e8:85:6a:55:1e:11:
                    a0:1f:68:c1:b8:18:02:28:6c:53:24:c8:59:a2:ba:
                    fc:7f:7d:d3:2e:7e:51:b1:a5:d9:8e:7b:ad:ad:2f:
                    c6:75:57:93:fc:b0:2d:08:e8:72:e7:03:61:36:d0:
                    e2:0e:4a:23:e3:11:de:15:76:7a:81:50:cc:9b:ed:
                    34:0c:a8:8c:8e:a6:32:b8:0a:45:39:8f:12:46:a9:
                    f2:b0:c7:a3:80:ff:e6:d6:a1:af:5c:73:ae:c5:d1:
                    a8:fa:a7:f7:44:ba:12:28:48:4e:b9:92:cf:5b:49:
                    bb:ad:b4:a2:c5:87:52:6c:61:5a:89:8a:9e:0b:4b:
                    1c:de:7d:91:6e:d0:d2:46:e6:4a:9e:be:a9:6f:7e:
                    12:e2:ea:66:8c:44:f8:19:6b:1a:1f:26:e8:59:f6:
                    7b:59:3f:d9:28:55:0c:e9:cf:87:ee:08:d7:30:7e:
                    a7:71:6e:71:a4:47:6d:ed:d9:dc:42:bf:d1:45:0f:
                    f4:9d:bd:55:6b:fa:3c:b8:4e:cb:4e:d1:2e:d5:b7:
                    af:f3:15:f4:19:6b:4a:4d:b8:88:c7:59:70:2e:77:
                    09:80:d7:be:68:fd:08:ac:85:6d:8b:14:3b:b7:c3:
                    d9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FE:10:34:5E:92:40:62:C7:0C:26:B8:A4:F1:92:38:AA:0D:E5:9C
            X509v3 Authority Key Identifier:
                keyid:66:5C:39:BF:BC:52:E9:69:3A:4D:DF:2D:56:E1:CA:99:F4:53:7E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Bv4QNF6SQGLHDCa4pPGSOKoN5Zw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.251.69.0/24
                IPv6:
                  2a13:1700::/29

    Signature Algorithm: sha256WithRSAEncryption
         9c:6a:57:92:7d:c3:f3:f0:6b:ba:34:69:1e:db:5e:4b:77:e0:
         48:7f:c6:65:42:a0:5d:fb:6c:d5:c9:44:80:1c:ea:76:51:5a:
         c9:e7:dc:16:ab:14:33:6b:d3:37:eb:86:95:76:b9:e6:e3:c5:
         e0:ee:bd:c5:8e:13:d6:de:c3:6f:d9:06:26:61:a8:11:bd:f4:
         c4:de:b1:72:4b:ac:62:66:8e:bb:83:57:b8:5c:7a:1c:e0:ee:
         28:a4:c1:08:f0:0c:69:e1:1b:ed:bc:3a:5f:61:d0:dc:66:29:
         64:0f:d0:fd:01:8b:66:fe:d7:2c:6c:18:9e:07:cb:b4:a8:05:
         be:ef:79:a9:fb:15:54:95:3b:3f:2b:5a:e8:35:eb:91:96:d3:
         76:79:00:c6:62:62:df:8d:c1:fe:fb:98:1e:55:25:7d:49:36:
         01:dd:a6:0b:89:ee:d9:92:3c:46:c7:99:67:0e:8e:b3:34:3b:
         f9:6c:90:48:0f:02:1e:70:65:5d:92:f3:f1:15:6d:80:d3:74:
         2d:17:d4:5c:67:0a:40:d0:fb:fd:f8:ff:2c:b7:98:83:c0:2c:
         86:02:3b:1a:ee:f2:0d:49:4b:e4:fa:0c:d2:44:52:e4:60:78:
         95:8e:f1:e9:99:07:50:3d:d0:2c:3e:12:7d:ad:78:bf:70:25:
         86:7e:94:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:08:24 2026 by rpki-client