This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bscFx-8WZDo1BLtY9Qu-MWUUme0.roa
File:                     bscFx-8WZDo1BLtY9Qu-MWUUme0.roa (raw, json)
Hash identifier:          +4tdj917MYxkU3jVhML6xKHXxs+Te1nlf+Ukm7WotRQ=
Subject key identifier:   6E:C7:05:C7:EF:16:64:3A:35:04:BB:58:F5:0B:BE:31:65:14:99:ED
Certificate issuer:       /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Certificate serial:       019B77C768A7E3C13B337D887D79CFA391D0
Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bscFx-8WZDo1BLtY9Qu-MWUUme0.roa
Signing time:             Thu 01 Jan 2026 04:18:35 +0000
ROA not before:           Thu 01 Jan 2026 04:18:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        93.191.217.0/24 maxlen: 24
                          93.191.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 10:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:68:a7:e3:c1:3b:33:7d:88:7d:79:cf:a3:91:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
        Validity
            Not Before: Jan  1 04:18:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6ec705c7ef16643a3504bb58f50bbe31651499ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:19:fb:73:b9:c0:ac:d4:1a:7e:da:57:4e:
                    12:30:0a:b6:62:c1:3e:89:d7:8c:33:4f:da:5b:47:
                    6a:5c:75:c4:3b:93:38:28:d1:3c:16:cf:58:72:54:
                    6b:27:9b:ee:45:e0:ee:4e:7d:4b:23:2f:e2:5f:bd:
                    b7:a4:87:c7:61:91:69:e8:8f:60:87:fe:41:f1:27:
                    ef:c6:2d:4d:d3:72:8a:3e:00:55:90:e6:e3:87:81:
                    c3:bd:94:6e:74:80:a1:f2:47:bf:bd:2d:0d:37:12:
                    e6:b0:98:1f:71:d8:71:59:1e:d1:98:66:cd:21:e6:
                    bd:cb:68:fb:f5:45:e3:c0:6a:5a:bf:3e:5f:1b:74:
                    97:f8:13:cc:c0:08:74:9a:1e:3f:eb:be:0d:b4:c3:
                    b8:9d:39:e3:10:1c:16:a3:91:a0:37:65:55:59:10:
                    9c:5c:56:6e:1d:1b:12:cc:6f:8a:46:13:b8:17:75:
                    42:aa:c1:ff:85:9d:b0:bc:f8:14:b8:a2:e6:93:67:
                    77:df:f5:1e:a4:82:af:ed:af:79:04:b0:f5:be:d3:
                    ad:2d:9a:5a:34:7a:ca:25:c2:4f:8f:ff:32:71:56:
                    a3:48:4b:24:f6:16:8e:07:63:02:73:c8:2d:e6:16:
                    54:17:fa:44:bb:5b:82:d4:e2:68:59:13:27:54:c7:
                    0e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C7:05:C7:EF:16:64:3A:35:04:BB:58:F5:0B:BE:31:65:14:99:ED
            X509v3 Authority Key Identifier:
                keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bscFx-8WZDo1BLtY9Qu-MWUUme0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.191.217.0/24
                  93.191.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:a7:cc:98:20:2b:e9:ec:58:d3:be:eb:87:6d:fd:ed:c2:2a:
         02:c4:24:ce:3c:7e:96:04:87:01:51:03:88:89:f1:a3:b3:95:
         83:4b:0a:c0:cd:fe:76:6b:2a:5a:79:ca:36:8a:b1:72:c7:5c:
         51:26:7e:3c:62:09:e6:3e:3a:57:92:79:5b:4b:93:53:d6:e6:
         44:ef:c8:ed:5f:0d:a7:3b:0e:52:b6:2d:94:77:5c:a2:0c:08:
         6c:3e:bd:23:d7:21:9d:37:1d:c7:26:0f:e0:7b:24:f8:a4:fc:
         c3:40:4a:84:f7:8e:b5:a5:91:5f:43:c0:76:91:ad:1f:97:e6:
         91:8a:86:e1:6b:1e:38:cf:9a:44:c5:d6:31:c1:4a:70:86:cb:
         b8:ad:0e:41:00:42:27:24:51:32:4d:b0:39:32:dd:68:9f:4a:
         d0:d0:1f:5d:91:49:f6:5a:b0:63:24:b9:81:22:65:bf:20:28:
         e7:0f:98:7b:27:61:e1:e9:e9:5f:b5:96:6b:ef:c6:c9:aa:ad:
         92:03:95:57:19:1b:1a:3a:d7:2b:cf:17:81:29:49:d8:5d:b9:
         3b:dd:d4:53:8f:dd:05:36:77:98:42:0b:dc:28:f1:9c:59:dd:
         6f:d6:32:97:79:f7:02:52:73:f5:3d:ec:58:6d:be:44:1c:06:
         7a:43:0a:e0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt3x2in48E7M32IfXnPo5HQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZjJmYjBmYTUyZGUxM2MzMzY2ODljZjNmNDgyOWQ2MzUw
Njc1MGYwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWM3MDVjN2VmMTY2NDNhMzUwNGJiNThmNTBiYmUzMTY1MTQ5OWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmgZ+3O5wKzUGn7aV04SMAq2YsE+
ideMM0/aW0dqXHXEO5M4KNE8Fs9YclRrJ5vuReDuTn1LIy/iX723pIfHYZFp6I9g
h/5B8Sfvxi1N03KKPgBVkObjh4HDvZRudICh8ke/vS0NNxLmsJgfcdhxWR7RmGbN
Iea9y2j79UXjwGpavz5fG3SX+BPMwAh0mh4/674NtMO4nTnjEBwWo5GgN2VVWRCc
XFZuHRsSzG+KRhO4F3VCqsH/hZ2wvPgUuKLmk2d33/UepIKv7a95BLD1vtOtLZpa
NHrKJcJPj/8ycVajSEsk9haOB2MCc8gt5hZUF/pEu1uC1OJoWRMnVMcOfwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG7HBcfvFmQ6NQS7WPULvjFlFJntMB8GA1UdIwQY
MBaAFGzy+w+lLeE8M2aJzz9IKdY1BnUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZjA3MTUtYjk5My00MzQ4LTk3ZTkt
NmVjOTgyOTUxY2Y3LzEvYnNjRngtOFdaRG8xQkx0WTlRdS1NV1VVbWUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jZjA3MTUtYjk5My00MzQ4LTk3ZTktNmVjOTgyOTUxY2Y3
LzEvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXb/ZAwQA
Xb/bMA0GCSqGSIb3DQEBCwUAA4IBAQCLp8yYICvp7FjTvuuHbf3twioCxCTOPH6W
BIcBUQOIifGjs5WDSwrAzf52aypaeco2irFyx1xRJn48YgnmPjpXknlbS5NT1uZE
78jtXw2nOw5Sti2Ud1yiDAhsPr0j1yGdNx3HJg/geyT4pPzDQEqE9461pZFfQ8B2
ka0fl+aRiobhax44z5pExdYxwUpwhsu4rQ5BAEInJFEyTbA5Mt1on0rQ0B9dkUn2
WrBjJLmBImW/ICjnD5h7J2Hh6elftZZr78bJqq2SA5VXGRsaOtcrzxeBKUnYXbk7
3dRTj90FNneYQgvcKPGcWd1v1jKXefcCUnP1PexYbb5EHAZ6Qwrg
-----END CERTIFICATE-----
Generated at Fri Jan 9 17:06:04 2026 by rpki-client