This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/b_y_rOE1QQam257CWGtkHOr-6Kw.roa
File:                     b_y_rOE1QQam257CWGtkHOr-6Kw.roa (raw, json)
Hash identifier:          YvhDiuELqEgFsL9eKGZyie6pLZWySNNGa/49rD66WcU=
Subject key identifier:   6F:FC:BF:AC:E1:35:41:06:A6:DB:9E:C2:58:6B:64:1C:EA:FE:E8:AC
Certificate issuer:       /CN=bfe3971a32c0692c4e342e911790662470cf31b2
Certificate serial:       019B7BA38200B7198F1437EC989A3AC3A5CA
Authority key identifier: BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/b_y_rOE1QQam257CWGtkHOr-6Kw.roa
Signing time:             Thu 01 Jan 2026 22:17:51 +0000
ROA not before:           Thu 01 Jan 2026 22:17:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213794
IP address blocks:        5.181.189.0/24 maxlen: 24
                          193.34.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:82:00:b7:19:8f:14:37:ec:98:9a:3a:c3:a5:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe3971a32c0692c4e342e911790662470cf31b2
        Validity
            Not Before: Jan  1 22:17:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6ffcbface1354106a6db9ec2586b641ceafee8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5e:ac:af:34:96:cc:72:4a:e0:f8:79:5b:6e:
                    49:19:66:32:6c:9d:8b:65:25:65:e5:b3:e1:23:85:
                    44:da:f4:c6:40:95:d2:3f:65:2e:16:18:97:73:57:
                    e3:b0:98:41:c1:57:34:6b:5a:59:b5:81:25:8a:47:
                    75:d7:81:a1:42:c1:61:ec:da:76:bf:13:f8:94:66:
                    0d:84:75:76:38:3e:b6:24:e2:79:16:44:9e:b9:2c:
                    5c:e3:e1:86:0f:08:b2:f7:a7:04:14:7a:2c:e4:bf:
                    db:21:a1:a7:bf:fa:cc:7f:cc:40:70:16:6a:d2:42:
                    26:7f:94:f9:ba:e0:d0:83:a0:49:ce:21:d2:e3:53:
                    ff:1d:9c:13:91:82:0e:36:b9:64:70:50:61:93:1d:
                    5b:bf:dd:bf:4a:38:73:06:00:d4:f7:55:d6:36:46:
                    d7:00:9b:81:b3:fe:7e:38:77:96:3f:ba:08:c2:67:
                    5a:c8:c6:50:64:25:1f:dd:cb:30:07:73:80:57:4e:
                    ed:c5:e8:a2:b6:e1:07:a8:08:b4:a8:a7:ad:9f:ae:
                    fd:1e:ca:d4:7c:7c:91:e6:d4:36:85:a0:9c:66:9f:
                    e4:7c:e9:3c:ab:8e:6b:77:f5:9e:55:94:7d:4f:3d:
                    80:ed:85:7b:74:e6:52:eb:f7:1c:41:c8:ee:13:af:
                    30:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FC:BF:AC:E1:35:41:06:A6:DB:9E:C2:58:6B:64:1C:EA:FE:E8:AC
            X509v3 Authority Key Identifier:
                keyid:BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/b_y_rOE1QQam257CWGtkHOr-6Kw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.189.0/24
                  193.34.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:d8:5a:35:b6:c1:de:53:08:a2:fb:a0:e1:e5:32:8a:2c:ee:
         96:7d:69:0b:90:4a:97:a4:ed:8c:99:8a:b3:de:9c:fd:82:c5:
         78:5d:c2:2a:8f:ec:fc:cb:87:b3:a7:63:df:f2:d9:4e:2a:42:
         e9:59:ce:05:af:ef:af:c9:38:52:6a:d1:72:6e:dc:d0:a6:85:
         dc:2e:24:3e:54:8c:51:b9:21:48:c5:a1:ba:0a:1e:2f:de:a0:
         32:46:55:16:25:b7:01:dd:2e:00:b3:ac:c9:46:30:91:84:38:
         63:ce:88:54:c8:8f:5b:fb:cb:48:18:ae:9c:0c:58:45:b9:e2:
         11:02:15:fb:d8:8e:bb:e7:f6:05:8d:6d:cb:e4:ef:21:e6:40:
         7d:86:b7:47:36:ad:c7:82:a3:be:19:41:70:f2:bf:a3:2b:d2:
         26:b9:24:70:3b:00:10:0c:9a:76:8f:0b:10:bc:be:cd:b1:4e:
         ec:9d:8a:e1:1b:9f:af:db:8c:ab:3d:20:97:5a:87:d5:c3:38:
         c6:44:3d:29:c2:4b:16:a4:15:9e:c4:4a:32:8c:f4:ab:40:4b:
         e1:ef:9a:b8:44:7c:ac:b5:19:66:2a:fe:85:6e:4f:2c:90:b9:
         e2:4e:b7:66:b5:a7:66:b0:b2:68:f3:dc:71:98:a8:8f:e1:e4:
         3a:7f:f5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:31:36 2026 by rpki-client