This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/51_BbgzWUWo6DTAu3ayMEep8mII.roa
File:                     51_BbgzWUWo6DTAu3ayMEep8mII.roa (raw, json)
Hash identifier:          LlzlCU2PXzwgKPsniXuMY4kbQqRGH8YDiOPFJXAnqPI=
Subject key identifier:   E7:5F:C1:6E:0C:D6:51:6A:3A:0D:30:2E:DD:AC:8C:11:EA:7C:98:82
Certificate issuer:       /CN=b1b34e006765b154f37b6d3484588189511fb200
Certificate serial:       019B7B355ABA0A0C0A29AF8FCE0AE8A8B7B5
Authority key identifier: B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/51_BbgzWUWo6DTAu3ayMEep8mII.roa
Signing time:             Thu 01 Jan 2026 20:17:32 +0000
ROA not before:           Thu 01 Jan 2026 20:17:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     13045
IP address blocks:        2001:678:7d4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:5a:ba:0a:0c:0a:29:af:8f:ce:0a:e8:a8:b7:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1b34e006765b154f37b6d3484588189511fb200
        Validity
            Not Before: Jan  1 20:17:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e75fc16e0cd6516a3a0d302eddac8c11ea7c9882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ed:17:44:45:f0:80:13:6d:c6:1e:60:55:03:
                    e7:5d:b1:e4:6e:a5:8c:ac:80:67:77:0d:c9:05:bd:
                    40:9a:cb:5f:6a:80:c0:56:0f:66:39:f6:d9:cf:22:
                    fa:8a:6f:6f:36:57:00:ca:da:8e:04:bd:f8:3e:fb:
                    09:42:92:5b:21:74:29:45:cf:ed:21:18:1f:cc:b3:
                    68:8d:d1:6e:bb:48:f2:fd:e2:d9:f8:d7:cf:39:65:
                    8a:1b:de:fa:88:9d:e0:ec:d7:ea:27:10:39:73:02:
                    eb:fa:35:61:1d:8a:7f:2c:46:cc:e0:4b:b0:d1:b9:
                    88:52:40:e5:78:3e:e6:03:3e:ad:ff:7f:bd:aa:49:
                    20:94:94:29:80:61:ce:db:42:c8:51:5e:82:16:a2:
                    5d:85:14:96:8d:5d:da:21:dc:1d:04:55:67:1c:57:
                    4b:f0:b3:d7:60:b3:68:65:2e:85:23:e1:7f:c6:a3:
                    71:19:bc:30:f2:90:bf:87:ac:f5:30:63:7b:8a:83:
                    48:ab:92:84:a1:b0:1e:df:10:ff:03:cc:26:99:09:
                    4c:9c:40:c5:7b:00:45:ee:d5:f1:4e:3f:3d:67:97:
                    3d:e5:bd:31:24:2b:51:8a:48:9e:8f:a0:71:63:c0:
                    6e:a0:b7:1c:0f:8b:e8:15:cd:a3:8d:5e:44:1b:e3:
                    6b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5F:C1:6E:0C:D6:51:6A:3A:0D:30:2E:DD:AC:8C:11:EA:7C:98:82
            X509v3 Authority Key Identifier:
                keyid:B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/51_BbgzWUWo6DTAu3ayMEep8mII.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:7d4::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:6a:6f:10:ff:ae:dc:fc:33:64:8c:0c:ce:d0:2f:62:6c:34:
         97:1c:a7:97:ae:99:85:ab:e5:c8:df:db:c2:8b:33:6a:3f:77:
         b4:32:30:fa:10:a1:ff:ee:7b:2c:d1:60:43:81:9c:bb:7d:e4:
         1d:e2:1f:a0:53:01:44:a4:34:50:98:a9:a1:ee:ca:1a:5a:61:
         14:08:2b:3e:b9:b3:a1:12:bf:1a:52:7d:fc:6c:a4:25:7d:a3:
         60:04:d9:66:17:ab:19:3b:8c:7b:e3:25:ac:db:bd:ac:5a:32:
         fd:12:b2:1c:1e:eb:3b:d1:28:bc:03:6e:2f:b2:79:6f:cf:0c:
         6a:17:1a:41:ef:8d:64:c5:53:61:20:86:96:50:6d:f6:08:f6:
         95:18:d7:b9:da:71:ff:2b:20:db:bc:09:be:3c:96:bb:34:5c:
         d7:8c:70:d2:38:b2:60:ef:52:de:14:6a:32:66:94:a6:f7:e4:
         ea:84:25:a4:ce:ae:88:79:2f:e1:0d:72:df:c1:18:52:6c:83:
         f9:29:71:a0:f9:30:58:1c:04:bd:65:23:40:d3:3c:7f:43:f3:
         49:ab:27:4a:bb:00:7c:12:f3:40:f2:6a:b9:5e:78:b1:de:3d:
         16:78:2f:c0:97:b5:f0:c6:b5:95:fb:ba:66:f1:25:dd:0a:b0:
         ae:5f:7c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:29:17 2026 by rpki-client