This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/BIBBESAfvhS__nK2V_IBADBPIgA.roa
File:                     BIBBESAfvhS__nK2V_IBADBPIgA.roa (raw, json)
Hash identifier:          IouodV4YUT1fC2GZK60Jrj29KOVuqC9CRb5HSmjXqPw=
Subject key identifier:   04:80:41:11:20:1F:BE:14:BF:FE:72:B6:57:F2:01:00:30:4F:22:00
Certificate issuer:       /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial:       019B7DCA8313097A6B465AEC12C9B16C663D
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/BIBBESAfvhS__nK2V_IBADBPIgA.roa
Signing time:             Fri 02 Jan 2026 08:19:42 +0000
ROA not before:           Fri 02 Jan 2026 08:19:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     53356
IP address blocks:        194.59.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:83:13:09:7a:6b:46:5a:ec:12:c9:b1:6c:66:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
        Validity
            Not Before: Jan  2 08:19:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=04804111201fbe14bffe72b657f20100304f2200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b9:2e:d8:3c:8b:fc:9b:8b:b1:e4:3c:da:3a:
                    31:85:5e:60:5f:da:aa:08:3d:4f:d9:4a:d2:80:3f:
                    cc:e9:4c:60:de:3c:49:10:dd:ee:56:a1:fc:10:69:
                    4c:56:54:aa:e8:69:43:7d:dd:5b:25:f4:99:54:9d:
                    b1:37:92:4e:bb:70:20:7d:e0:95:0e:80:b0:fd:5c:
                    aa:56:e5:f3:ad:b0:c6:b9:df:58:a3:83:11:aa:5f:
                    f5:63:10:e9:96:d7:0f:d7:e5:5c:82:25:f8:34:21:
                    7e:aa:ba:37:91:33:96:fb:4d:e8:34:fc:1a:e2:9f:
                    60:67:99:fd:0f:d5:51:26:6b:91:53:e6:c2:95:25:
                    7d:6a:a6:d3:bd:92:b4:4a:ca:1c:d9:8d:15:a7:2e:
                    39:c6:0b:55:ab:09:80:a6:09:af:df:ff:d8:2b:1b:
                    9e:e8:3e:3a:e8:65:0d:4d:f9:c3:04:37:c9:bd:11:
                    f7:36:b1:87:2a:c9:e8:03:07:80:62:55:f4:fd:4f:
                    80:89:56:d3:3d:67:5f:07:71:15:2f:39:45:01:d5:
                    b0:d0:3a:16:8b:7d:8c:6f:4b:12:cc:97:0e:1e:b2:
                    44:07:8b:5c:02:d4:9a:41:f3:6b:df:cb:49:a2:94:
                    36:0f:22:41:35:a7:47:ae:46:2f:96:39:59:26:a6:
                    7e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:80:41:11:20:1F:BE:14:BF:FE:72:B6:57:F2:01:00:30:4F:22:00
            X509v3 Authority Key Identifier:
                keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/BIBBESAfvhS__nK2V_IBADBPIgA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.59.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:ab:34:b1:fc:0c:f1:64:fb:b9:4d:03:5d:d5:ec:86:a3:09:
         e6:6c:4f:80:37:42:06:85:f0:fe:9e:22:65:16:ac:17:ad:c9:
         cd:9b:f6:c0:e1:43:ec:80:d6:f8:87:e0:5c:92:a0:ef:84:27:
         6b:9e:60:79:e1:8d:a0:be:e2:cc:aa:33:49:1a:3d:35:2e:98:
         4d:7c:b2:45:95:cf:33:8c:a0:69:de:c1:29:ac:ad:97:1d:ae:
         d0:63:17:92:58:d0:4f:6c:8b:0b:b1:f3:26:c3:9c:3f:d9:13:
         01:17:69:8f:63:1d:d1:ee:48:68:b6:3a:33:3e:0b:9a:53:d0:
         88:b9:81:ba:f7:ed:28:16:ef:02:18:ea:b7:ab:21:6e:37:14:
         25:cc:91:6b:8f:30:3a:1a:e7:34:55:7e:a3:a8:66:e4:6d:d9:
         c6:47:bb:5c:c0:48:6c:17:1b:81:91:5a:2b:32:f6:6a:bf:05:
         e2:8c:3d:84:ff:5d:0f:bc:03:ae:78:52:a8:cc:07:8e:f1:05:
         3e:25:6d:44:17:bc:c0:dd:44:f1:12:49:91:28:df:de:59:a2:
         4d:0b:99:ab:69:a3:e4:2e:3d:cb:c6:ef:7c:38:8e:5d:bf:8c:
         cd:4b:6d:b3:c7:a4:48:c7:07:32:19:34:31:17:13:7e:0b:c5:
         f1:f1:f4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:21:45 2026 by rpki-client