This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/BWY_6iX1eFA1wINEV3UFtZmQLVc.roa
File:                     BWY_6iX1eFA1wINEV3UFtZmQLVc.roa (raw, json)
Hash identifier:          ieExeoISyHbhbY82Esso3kgMYn1eA+NJEZI1EbJUVxo=
Subject key identifier:   05:66:3F:EA:25:F5:78:50:35:C0:83:44:57:75:05:B5:99:90:2D:57
Certificate issuer:       /CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Certificate serial:       019B175CB27D3D4219B7ED078DFAD0C61659
Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/BWY_6iX1eFA1wINEV3UFtZmQLVc.roa
Signing time:             Sat 13 Dec 2025 10:58:29 +0000
ROA not before:           Sat 13 Dec 2025 10:58:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     51852
IP address blocks:        176.65.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 10:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:17:5c:b2:7d:3d:42:19:b7:ed:07:8d:fa:d0:c6:16:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3
        Validity
            Not Before: Dec 13 10:58:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=05663fea25f5785035c08344577505b599902d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b4:e8:ae:70:fd:29:4f:26:35:ca:3a:1d:eb:
                    8e:75:47:24:50:b3:cc:ff:d0:be:3f:5b:3f:32:17:
                    b2:21:2e:33:d1:0d:04:92:76:ee:8f:88:2c:63:41:
                    9d:97:d0:e2:46:85:9b:38:2d:98:be:27:ab:29:19:
                    8f:41:86:c0:6f:3d:be:ef:75:d0:95:f4:59:18:e3:
                    fd:fe:55:7d:a6:d5:6d:1c:a6:ae:6a:17:b1:5a:58:
                    b4:75:dc:92:07:b6:5e:d0:a8:ed:9c:50:65:07:57:
                    23:6e:02:bb:33:90:a0:ef:4c:ac:4d:db:3a:e5:8c:
                    32:af:5e:c0:a0:9b:12:f5:91:e2:3a:4e:78:57:63:
                    29:90:e9:81:53:6a:3e:fe:66:c8:d3:54:11:83:1e:
                    37:01:ff:8d:2b:b2:4c:ed:74:de:f8:a3:00:64:2b:
                    86:98:6a:f6:dd:a4:a5:57:2a:90:34:61:1b:7f:95:
                    43:d3:5b:a9:59:61:0d:15:e0:aa:66:2c:97:8c:85:
                    bd:55:44:da:03:8c:13:29:41:fd:b3:05:73:c7:84:
                    3d:62:06:c3:50:df:cc:eb:ee:87:b5:8f:18:b6:29:
                    47:34:b8:4e:e1:8a:b2:ae:26:54:64:a6:75:a2:23:
                    9c:f1:74:aa:aa:c7:60:b0:e2:c1:99:a8:a4:94:7c:
                    9f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:66:3F:EA:25:F5:78:50:35:C0:83:44:57:75:05:B5:99:90:2D:57
            X509v3 Authority Key Identifier:
                keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/BWY_6iX1eFA1wINEV3UFtZmQLVc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.65.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:fa:b9:d6:b1:6d:50:45:dd:25:61:24:cb:9a:62:0c:3e:99:
         5d:e4:4f:ca:8f:29:ff:a6:ac:65:a7:03:11:8c:4d:7d:bf:14:
         c6:2e:46:33:ea:93:79:f1:bd:d0:d5:30:73:5f:1b:81:64:7c:
         f7:84:ab:28:e4:69:28:0a:46:4f:49:1a:a9:05:09:47:28:a3:
         82:e2:59:0c:47:54:11:b8:39:fd:b6:6a:76:b0:24:58:cb:d1:
         89:7d:82:66:6f:85:c4:c8:37:58:77:6d:cf:ec:be:ae:89:dc:
         6c:45:a4:94:ca:56:fd:b8:a9:cc:9f:f9:2e:a7:2d:5c:96:c7:
         c8:98:22:89:51:39:2d:92:fa:e3:cf:ad:e8:b9:97:a0:50:6c:
         a9:75:e8:53:1c:c4:1e:e1:e8:1c:36:98:f9:ba:b8:da:70:26:
         ed:2c:41:52:14:39:5f:22:31:0e:84:d1:3c:29:5a:de:45:bc:
         41:0f:f4:51:cf:fc:c2:11:82:3e:0b:57:28:72:11:14:fc:ad:
         61:44:9d:47:64:fc:85:28:38:c0:ec:ea:ee:ac:e8:ab:19:d1:
         c6:09:68:2f:ab:c0:e5:c1:04:43:fe:0c:e9:a9:1b:d4:ec:c2:
         49:7d:70:80:e0:e1:4b:9e:89:06:09:a5:4f:27:90:10:a7:4c:
         0f:bf:26:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:08:39 2025 by rpki-client