This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/BR_BUevx2sg_8tyRkbQkeVhjNsQ.roa
File:                     BR_BUevx2sg_8tyRkbQkeVhjNsQ.roa (raw, json)
Hash identifier:          DcW4cVxJuDUK3IKLW2cbHxN+qa5e/QUPCI24FuVBujI=
Subject key identifier:   05:1F:C1:51:EB:F1:DA:C8:3F:F2:DC:91:91:B4:24:79:58:63:36:C4
Certificate issuer:       /CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Certificate serial:       019B78A32E7BDD182C85587A8CD743F1A6B2
Authority key identifier: 99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/BR_BUevx2sg_8tyRkbQkeVhjNsQ.roa
Signing time:             Thu 01 Jan 2026 08:18:38 +0000
ROA not before:           Thu 01 Jan 2026 08:18:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48175
IP address blocks:        185.254.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:2e:7b:dd:18:2c:85:58:7a:8c:d7:43:f1:a6:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
        Validity
            Not Before: Jan  1 08:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=051fc151ebf1dac83ff2dc9191b42479586336c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3e:f1:ed:bd:94:26:52:5b:63:5b:01:97:9c:
                    f6:7d:a0:af:67:0b:d2:23:b3:ca:04:26:03:cf:35:
                    50:79:17:ef:67:fd:1a:5d:6f:7c:e7:ff:0c:d8:19:
                    7d:90:81:95:84:17:c2:8d:a1:14:77:e4:ff:14:d0:
                    aa:36:c5:45:06:34:e5:b4:74:39:7b:d5:ea:ca:95:
                    01:28:a9:ae:fe:1b:c6:66:db:82:bc:0d:fa:17:0e:
                    2c:8d:92:d0:f8:07:c9:2b:ab:41:f2:ef:8a:54:c9:
                    21:67:9f:78:a3:75:86:bb:43:15:1d:22:45:79:23:
                    c1:d8:73:ea:21:42:c0:ff:27:56:23:4e:70:29:24:
                    b9:ef:03:26:9d:2d:40:ff:fd:93:5d:b4:31:5e:4b:
                    e5:71:8e:f1:ce:6f:fc:61:83:f8:e3:70:40:1b:40:
                    1e:aa:59:3e:93:0a:c1:94:8c:1c:33:7d:0e:75:da:
                    db:83:7b:8c:c7:ee:cc:3d:5a:47:98:22:52:c5:4f:
                    8a:d0:08:f7:b3:a0:e4:bc:7a:7f:d2:73:72:6e:4a:
                    9e:d8:53:f0:65:24:df:73:2d:c1:2b:ad:91:aa:20:
                    77:b1:7c:c2:e1:b2:98:1d:68:94:05:cf:f4:81:ed:
                    27:3b:16:3d:8a:34:3f:24:83:1b:d1:7b:74:66:00:
                    71:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1F:C1:51:EB:F1:DA:C8:3F:F2:DC:91:91:B4:24:79:58:63:36:C4
            X509v3 Authority Key Identifier:
                keyid:99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/BR_BUevx2sg_8tyRkbQkeVhjNsQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.254.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:35:9c:c4:83:21:82:26:08:d8:c9:db:50:8b:c5:a8:ea:a1:
         58:ca:fe:e7:3e:e4:87:b7:f9:d4:60:c0:30:5b:1c:84:51:c2:
         63:20:04:3f:59:ed:0e:ae:59:d0:86:c2:54:e0:c2:2c:b4:7c:
         b5:f2:61:bc:68:27:ef:b7:29:ac:cc:11:81:1d:f2:9f:40:f1:
         3b:57:7b:98:fa:4c:43:d6:fa:15:e3:2b:8c:3f:a2:79:8a:95:
         8a:2c:fc:4d:10:92:d2:01:65:42:bd:65:0e:93:bb:d7:37:68:
         f8:70:f4:79:05:30:53:49:dd:28:61:24:d7:6b:70:46:a8:4e:
         4d:b0:a7:ce:62:a0:77:2e:90:3f:4c:08:01:6a:97:0e:29:46:
         7d:b9:a9:a9:74:5d:23:95:1c:30:9c:2a:62:4c:db:32:06:e4:
         c8:a6:1a:e9:49:2b:cf:d4:30:5e:eb:75:a3:ce:96:20:23:96:
         a7:d9:0b:72:62:0a:44:e9:5b:95:ad:91:8e:e1:2a:d3:05:3c:
         f2:b7:d9:c8:31:69:eb:c7:8a:43:1a:1d:48:6c:21:20:8c:cd:
         b0:4d:6c:59:d1:2c:83:42:86:78:1c:a4:dd:cc:6c:47:fa:b3:
         e0:34:c7:ea:cd:62:ef:24:31:51:53:da:61:fc:86:97:78:57:
         21:67:cc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:40:17 2026 by rpki-client