This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/BSVnXWVLQnFahxWR27R2hZyRLOw.roa
File:                     BSVnXWVLQnFahxWR27R2hZyRLOw.roa (raw, json)
Hash identifier:          zWXD1zdzQR6HCoxaZdLT2hwbNb0wnUHdkVZOay9qs94=
Subject key identifier:   05:25:67:5D:65:4B:42:71:5A:87:15:91:DB:B4:76:85:9C:91:2C:EC
Certificate issuer:       /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial:       019B7B3683A45B7CDA4CA8289984F2AD63D4
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/BSVnXWVLQnFahxWR27R2hZyRLOw.roa
Signing time:             Thu 01 Jan 2026 20:18:48 +0000
ROA not before:           Thu 01 Jan 2026 20:18:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15682
IP address blocks:        212.74.233.0/24 maxlen: 24
                          212.74.237.0/24 maxlen: 24
                          212.74.240.0/21 maxlen: 21
                          2a01:5f40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:83:a4:5b:7c:da:4c:a8:28:99:84:f2:ad:63:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
        Validity
            Not Before: Jan  1 20:18:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0525675d654b42715a871591dbb476859c912cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0d:f3:a5:e2:55:98:bb:35:72:88:34:53:4e:
                    2a:74:36:92:81:7f:a7:c5:6a:be:81:f4:39:ae:10:
                    97:87:c9:7f:2d:86:dc:94:11:ea:57:e8:95:33:4a:
                    7e:63:5a:43:b5:44:ef:fa:3e:cf:19:41:2e:c9:dd:
                    19:e3:9e:74:cb:7d:c9:8e:4f:4a:df:c1:a9:09:4d:
                    6a:92:34:ed:95:62:c5:e2:50:29:cc:2a:82:94:76:
                    ad:95:f7:03:29:16:bd:4b:69:0b:21:0e:ae:f7:36:
                    81:49:18:6b:99:68:3f:cc:c2:cc:e5:5a:80:54:e7:
                    35:90:54:ab:21:e3:c6:47:37:ad:0b:b2:33:c2:f6:
                    f9:03:69:b7:b9:2c:4a:1d:57:fa:42:ec:25:79:82:
                    39:41:59:f1:76:47:4c:11:31:c4:b8:2c:b8:2c:98:
                    93:ac:c8:90:ec:98:f0:dc:7c:07:6d:62:53:7e:16:
                    69:6e:18:cd:dc:70:86:29:ae:5f:20:be:7a:dc:00:
                    0c:79:6d:f2:bb:20:b9:c8:94:ea:c3:05:73:cb:80:
                    1a:be:7e:e3:ef:18:ec:51:35:70:f6:e6:60:f8:95:
                    76:d9:89:f2:8e:e0:18:4e:03:19:1d:e2:e1:20:40:
                    b8:38:c0:86:ed:55:cb:c2:c6:15:32:bb:34:94:ec:
                    e8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:25:67:5D:65:4B:42:71:5A:87:15:91:DB:B4:76:85:9C:91:2C:EC
            X509v3 Authority Key Identifier:
                keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/BSVnXWVLQnFahxWR27R2hZyRLOw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.74.233.0/24
                  212.74.237.0/24
                  212.74.240.0/21
                IPv6:
                  2a01:5f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:41:36:47:6e:21:5d:9d:36:e9:6b:5e:22:da:50:92:6b:1d:
         25:bd:0c:a6:8a:fd:cf:36:09:c5:3f:97:f1:da:a9:4e:38:74:
         a2:94:f0:60:68:49:cf:fa:15:06:aa:9c:7f:d3:11:33:88:c9:
         81:25:11:83:d3:bb:c9:0a:10:72:6f:2a:da:50:59:49:cc:d9:
         a0:9e:34:94:be:a0:f9:7b:73:ae:b5:10:7f:ad:11:c7:f6:f8:
         87:09:74:e3:3b:26:33:e9:33:f7:ca:56:f0:01:27:b1:93:32:
         c2:5d:df:df:e4:0c:ab:9b:bb:90:b1:86:5d:1f:d5:c1:57:43:
         4b:c8:c8:b6:0e:56:b6:e7:ad:36:e8:3b:b8:8b:8c:a9:0e:ac:
         0d:d5:3d:f4:e7:29:b0:0d:35:21:2b:4e:24:5b:f6:16:31:cf:
         5f:0a:0d:b1:80:16:a7:81:45:77:b6:b0:5c:ce:b6:cd:6b:5a:
         65:b5:4d:3b:02:f2:4a:c0:cf:d7:62:12:2f:c4:e0:f9:48:4c:
         4b:d1:60:8d:f8:72:51:c0:f3:f0:51:5e:43:c2:a2:1a:71:ce:
         c9:b5:b6:04:dd:a3:0c:4e:8c:f1:cc:e0:a0:5d:29:38:5a:d6:
         a7:f0:bd:28:7b:15:4b:18:b4:4c:cb:41:3c:3f:5e:43:55:3d:
         d9:b1:fd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:54:51 2026 by rpki-client