This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/BtcmHuwetapblyi9s6FZkxvndTA.roa
File:                     BtcmHuwetapblyi9s6FZkxvndTA.roa (raw, json)
Hash identifier:          dnt6NY9Mo4FrwsWIa33YjdrYdhY3bDry7NAo/6vLCVQ=
Subject key identifier:   06:D7:26:1E:EC:1E:B5:AA:5B:97:28:BD:B3:A1:59:93:1B:E7:75:30
Certificate issuer:       /CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Certificate serial:       019B7911263CCA04DA9DF23A234B997747EC
Authority key identifier: 68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/BtcmHuwetapblyi9s6FZkxvndTA.roa
Signing time:             Thu 01 Jan 2026 10:18:45 +0000
ROA not before:           Thu 01 Jan 2026 10:18:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206610
IP address blocks:        46.29.176.0/21 maxlen: 24
                          185.28.204.0/22 maxlen: 24
                          2a02:2290::/29 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:11:26:3c:ca:04:da:9d:f2:3a:23:4b:99:77:47:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
        Validity
            Not Before: Jan  1 10:18:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=06d7261eec1eb5aa5b9728bdb3a159931be77530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a8:a7:2f:2f:2f:05:76:e0:dd:76:01:a1:d6:
                    68:24:c7:d6:8e:03:2c:24:ee:6b:2d:ff:67:b7:29:
                    92:89:00:b6:d4:e1:c8:eb:e6:20:cd:9f:0e:1b:4a:
                    06:99:51:d5:a5:ae:bd:76:fd:3a:65:14:4b:27:13:
                    cd:df:a5:fd:5f:69:6e:c8:84:2a:57:7c:62:2e:e5:
                    ee:48:90:29:c9:76:9f:32:de:12:73:a9:81:2c:1e:
                    c7:43:a7:80:96:65:ca:01:f1:f4:b2:12:ad:76:6a:
                    73:5c:7b:55:53:6f:8d:ab:e0:6a:63:84:2b:17:df:
                    33:77:61:0d:07:1e:8d:44:81:dc:8d:95:c1:c2:f3:
                    10:d6:d8:2c:88:b3:7e:c7:4e:e4:2e:72:03:58:06:
                    da:3e:9e:0d:91:6c:1d:8d:f4:4b:81:85:63:2b:0d:
                    77:cc:56:18:3b:60:25:b1:78:fe:15:d4:59:8d:9d:
                    f7:43:e8:e8:db:a8:da:2c:73:a2:18:65:7d:6a:7e:
                    06:b5:a4:d3:b4:50:fa:0f:56:f3:e2:e2:24:3f:3e:
                    0c:87:dc:db:a6:58:97:cc:5b:42:7e:89:0a:d2:44:
                    f7:4a:83:6a:1f:b4:4c:44:8d:2a:24:1a:39:5c:a1:
                    e8:58:52:c7:53:47:a8:c8:7f:65:88:6e:d6:8a:97:
                    ea:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D7:26:1E:EC:1E:B5:AA:5B:97:28:BD:B3:A1:59:93:1B:E7:75:30
            X509v3 Authority Key Identifier:
                keyid:68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/BtcmHuwetapblyi9s6FZkxvndTA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.29.176.0/21
                  185.28.204.0/22
                IPv6:
                  2a02:2290::/29

    Signature Algorithm: sha256WithRSAEncryption
         2f:a9:b3:b5:8b:10:b0:f3:14:b7:03:16:8b:15:c4:02:1b:87:
         bd:6d:c3:ce:85:ac:87:20:5e:b0:72:96:ce:2c:45:ff:6c:61:
         11:1d:78:21:dc:a3:04:f8:0d:06:ec:62:87:89:f6:50:05:b7:
         2c:79:4d:e9:2f:68:3a:c3:5d:c7:cb:1f:f2:4c:f3:17:4b:96:
         8d:4d:47:ce:d4:06:82:40:0a:a1:13:cf:ed:fe:d2:d9:3c:ee:
         81:ab:1c:71:8b:3e:08:80:96:e7:ee:70:88:1a:68:18:63:d8:
         26:ed:8d:78:41:fa:c5:43:44:b2:43:98:b6:b8:03:f0:f2:06:
         11:c7:00:66:8d:f9:f9:c7:94:40:97:59:3b:0c:49:a8:dc:c5:
         ad:d8:ab:a0:14:fa:54:4a:40:fa:8e:86:3c:81:9a:7e:4b:84:
         99:8a:94:78:14:d2:de:45:e8:5d:42:ae:b0:ea:0b:41:1e:2c:
         e0:22:77:b8:f1:71:fb:30:9d:9a:13:7b:00:1f:39:73:25:6f:
         82:0a:05:8a:e6:97:e5:45:94:f0:dc:c0:cd:1e:c8:03:e4:a5:
         4a:92:19:be:77:a2:d5:94:0e:cd:b9:8c:eb:c8:96:eb:9d:60:
         83:3f:7f:88:2e:90:24:d7:33:74:34:de:48:3a:be:f7:0d:89:
         e1:8d:71:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:23:29 2026 by rpki-client