This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/bC7AoRVf6EmTtF53I95QWY4pJCk.roa
File:                     bC7AoRVf6EmTtF53I95QWY4pJCk.roa (raw, json)
Hash identifier:          rFk4oIRz9stQ1GDXqzeVQKECYAuWrs07b0MroTAQv04=
Subject key identifier:   6C:2E:C0:A1:15:5F:E8:49:93:B4:5E:77:23:DE:50:59:8E:29:24:29
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       019B78A2496795E0FED5E53516DE6F2A327D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/bC7AoRVf6EmTtF53I95QWY4pJCk.roa
Signing time:             Thu 01 Jan 2026 08:17:40 +0000
ROA not before:           Thu 01 Jan 2026 08:17:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     30844
IP address blocks:        87.83.53.0/24 maxlen: 24
                          195.172.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:49:67:95:e0:fe:d5:e5:35:16:de:6f:2a:32:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Jan  1 08:17:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6c2ec0a1155fe84993b45e7723de50598e292429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a8:ed:cb:95:7c:11:d3:1a:12:b6:c3:91:36:
                    60:23:ed:12:9c:ea:94:41:0b:5c:dc:4e:9a:d4:13:
                    db:4e:76:1b:99:1c:71:ab:f8:bd:34:26:fb:c7:d6:
                    81:eb:cf:9b:4f:35:c8:cc:2f:a4:c1:ec:96:98:c6:
                    a7:8b:90:ce:08:c0:02:cd:72:7c:25:a8:38:0e:b8:
                    e9:2a:ef:5e:6a:a0:84:75:43:d2:d6:e7:a0:64:c5:
                    7f:6e:a6:dd:3d:f7:6a:2c:2a:a2:13:c8:d0:c4:df:
                    e1:54:56:98:ea:39:7a:f2:a4:80:8a:72:fb:5b:bb:
                    1e:e4:95:a6:6e:2f:74:9d:3b:da:2e:01:9f:5f:4a:
                    45:14:83:a7:af:c1:68:6e:2a:cb:50:9b:24:42:f8:
                    28:bb:d6:6a:0f:7a:0d:8d:5b:ac:f5:fe:ea:3c:6c:
                    29:07:45:25:a0:4a:d7:cd:90:05:9b:44:e2:f4:dc:
                    a3:0a:2d:7e:83:9f:c8:98:99:92:12:ed:a9:c0:6a:
                    c4:b1:de:bb:6e:b2:7f:70:5e:9e:57:0c:43:f3:03:
                    77:2d:bf:8e:58:9b:06:b9:35:53:32:b0:6a:be:de:
                    4d:d5:0d:16:9d:80:a9:62:67:fc:9f:9b:7a:da:e1:
                    24:a5:af:e2:15:9e:3c:4a:5a:bc:bf:a2:33:64:cd:
                    40:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2E:C0:A1:15:5F:E8:49:93:B4:5E:77:23:DE:50:59:8E:29:24:29
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/bC7AoRVf6EmTtF53I95QWY4pJCk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.83.53.0/24
                  195.172.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:b8:61:01:ea:39:1f:53:81:af:93:28:8b:59:4a:a3:e3:2c:
         fe:54:c5:81:76:49:90:3a:41:71:ab:58:73:e4:b5:c1:1a:fa:
         2c:05:bb:64:b5:9c:44:42:2e:b0:48:a4:c2:7f:c7:9d:19:04:
         d9:f4:a5:13:27:e1:09:1d:98:4a:4d:3f:0b:e3:bf:6e:97:f8:
         8f:18:18:71:7d:fd:59:86:2b:37:6d:39:98:95:25:e7:4a:3f:
         4b:91:43:a4:f8:36:17:4e:ab:c7:3f:42:d5:ba:4a:05:57:d4:
         1c:ab:d0:c3:e6:f1:f3:94:31:9d:04:81:a4:e5:86:61:0d:8f:
         49:34:ba:57:1d:31:cd:c9:2f:b6:43:04:97:5d:47:4d:23:db:
         b3:30:39:6a:10:35:bd:4e:11:95:9b:09:08:cc:08:bf:d6:a0:
         c8:9d:6f:52:03:ce:ad:72:c4:dd:14:f0:02:75:6d:6f:99:ab:
         13:87:e7:58:4f:ac:90:0e:4d:73:0f:fd:40:de:29:81:73:d9:
         8a:ad:fd:ed:06:46:e5:7b:ca:d8:7b:99:d5:53:63:c9:83:49:
         e4:1e:ff:40:8f:0c:1f:3c:d9:02:d2:ae:30:62:60:7d:75:f0:
         52:c0:91:12:e0:d8:44:06:99:cc:b2:62:cb:3d:d8:a2:96:49:
         b8:cc:82:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 08:15:14 2026 by rpki-client