This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Bdus_mOFARfgx4X81CZccUKeduE.roa
File:                     Bdus_mOFARfgx4X81CZccUKeduE.roa (raw, json)
Hash identifier:          vmZDBus6jrOvX3m9h7u9VzlGV4kUeYvSC/11DKvSkM8=
Subject key identifier:   05:DB:AC:FE:63:85:01:17:E0:C7:85:FC:D4:26:5C:71:42:9E:76:E1
Certificate issuer:       /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial:       019B7D5AFD866AA478908EB5F39F82E07B60
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Bdus_mOFARfgx4X81CZccUKeduE.roa
Signing time:             Fri 02 Jan 2026 06:17:53 +0000
ROA not before:           Fri 02 Jan 2026 06:17:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48948
IP address blocks:        93.114.160.0/24 maxlen: 24
                          93.114.161.0/24 maxlen: 24
                          93.114.162.0/24 maxlen: 24
                          93.114.163.0/24 maxlen: 24
                          93.114.164.0/24 maxlen: 24
                          93.114.165.0/24 maxlen: 24
                          93.114.166.0/24 maxlen: 24
                          93.114.167.0/24 maxlen: 24
                          2001:4d18:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 12:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5a:fd:86:6a:a4:78:90:8e:b5:f3:9f:82:e0:7b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
        Validity
            Not Before: Jan  2 06:17:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=05dbacfe63850117e0c785fcd4265c71429e76e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b8:2e:ee:fe:12:82:80:3d:53:4c:d6:83:28:
                    12:e5:2f:31:27:51:bf:db:dd:fc:2c:b3:b4:d1:c8:
                    2c:78:65:4c:e3:54:75:f3:de:b3:9f:8b:12:da:ab:
                    a0:32:95:74:42:fc:5a:7d:33:e2:d1:32:87:40:47:
                    b2:5f:dd:24:5f:44:c4:a8:4c:34:d7:80:e6:a4:97:
                    08:2c:4b:a3:92:2f:57:af:75:8e:0a:eb:8a:90:89:
                    b1:40:8a:6b:b7:16:90:e3:92:62:de:e0:e2:a7:0d:
                    9b:92:25:4a:d6:6e:8e:b7:cf:fa:5d:ed:44:05:f7:
                    be:f4:5b:82:8d:eb:51:b7:b1:92:b6:00:ea:b5:c7:
                    0c:57:75:da:a0:c1:45:40:5e:73:4b:ce:80:ac:fd:
                    d9:e5:37:94:7d:b3:0a:5f:a2:a2:13:5c:78:9e:41:
                    a3:68:6a:73:7e:9d:b8:76:6a:73:79:20:79:fb:b1:
                    ff:e3:a8:19:d4:85:05:fd:84:7d:bf:94:78:da:df:
                    3a:ef:f2:a9:b6:17:f3:aa:45:fe:68:99:1e:b8:1c:
                    57:e5:55:03:9e:26:bd:cd:a3:2e:ad:e9:5b:93:d8:
                    4a:0b:31:b5:48:2c:0a:41:d3:95:8b:5e:a5:7e:e9:
                    f2:db:b5:dc:75:2b:51:10:f1:ae:e3:60:56:e9:14:
                    76:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DB:AC:FE:63:85:01:17:E0:C7:85:FC:D4:26:5C:71:42:9E:76:E1
            X509v3 Authority Key Identifier:
                keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Bdus_mOFARfgx4X81CZccUKeduE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.114.160.0/21
                IPv6:
                  2001:4d18:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:54:66:2d:01:13:17:26:3e:2a:ef:49:7a:48:22:1c:8d:49:
         e6:3a:95:a9:ce:04:9a:c8:7a:3a:af:a2:a8:0d:f9:57:7f:62:
         6c:fa:1d:84:35:d2:23:c7:31:cd:d2:42:4a:43:c3:4a:30:c1:
         48:19:9d:35:4c:e5:32:a3:dc:8e:a5:8c:8f:b5:57:96:44:93:
         b3:57:cd:71:ac:8e:8d:3b:b5:88:34:36:51:15:9a:eb:13:b5:
         72:7f:cd:91:b3:6a:2e:19:20:b6:8c:0c:16:2d:0f:7b:ad:af:
         24:d2:37:e5:2a:19:a4:ad:2d:06:fa:41:0b:31:22:1d:b7:6b:
         90:18:28:f8:ed:1b:40:1a:f3:2a:d5:39:1a:b5:ec:7e:df:4b:
         eb:25:cf:94:db:28:07:44:f7:7b:0a:d8:f8:c1:16:05:99:a2:
         03:96:fb:9e:4c:20:e4:19:67:73:09:7c:d0:45:de:9e:cc:94:
         0b:a7:d1:e2:bf:43:64:55:a4:b7:5e:70:0e:63:2b:88:e5:f2:
         3d:42:b2:f7:26:94:28:59:a9:ad:cd:fd:1d:29:2d:b7:47:a0:
         7e:a8:5f:82:d7:9d:3d:30:93:03:48:83:63:0e:80:8e:2b:db:
         90:38:67:0e:90:7a:9f:2e:a2:71:7b:9c:ed:96:8b:b3:84:a5:
         3f:8a:00:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 19:57:14 2026 by rpki-client