This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/BJazlwxqEmJsYMjVhmIaDtQC8e8.roa
File:                     BJazlwxqEmJsYMjVhmIaDtQC8e8.roa (raw, json)
Hash identifier:          2ZK9c4vofcWeUv3b/fecvK2nc6pClocYLtMjG/t3Axs=
Subject key identifier:   04:96:B3:97:0C:6A:12:62:6C:60:C8:D5:86:62:1A:0E:D4:02:F1:EF
Certificate issuer:       /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial:       019B7F81323BCD958CEF0A93EC8E142E33C7
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/BJazlwxqEmJsYMjVhmIaDtQC8e8.roa
Signing time:             Fri 02 Jan 2026 16:18:52 +0000
ROA not before:           Fri 02 Jan 2026 16:18:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201542
IP address blocks:        94.31.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 22:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:81:32:3b:cd:95:8c:ef:0a:93:ec:8e:14:2e:33:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
        Validity
            Not Before: Jan  2 16:18:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0496b3970c6a12626c60c8d586621a0ed402f1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1b:60:44:10:0c:67:7f:fc:2e:f7:e8:df:82:
                    6f:c2:c8:87:23:e7:7a:d5:21:3b:be:34:98:1e:90:
                    68:d1:94:f2:f4:1e:2a:a3:fd:45:73:cc:87:6b:13:
                    63:94:78:38:1f:ee:a1:94:6d:a7:0b:30:61:6f:0d:
                    a5:45:46:6c:3a:69:80:cf:b4:af:b1:18:c9:05:68:
                    4d:e5:0f:86:51:71:ce:2d:76:d3:61:a7:23:21:18:
                    03:73:ab:fc:7b:f0:06:59:19:79:53:47:38:32:88:
                    95:86:f9:68:82:d2:c4:c2:66:ca:c1:c8:f8:7f:38:
                    73:34:7c:bb:b0:58:89:a5:20:6b:0a:b3:8b:f2:e5:
                    35:11:7c:83:5e:cb:1b:e3:df:13:55:74:95:4b:99:
                    a8:66:28:1d:c8:04:46:c8:f8:22:5e:f1:ef:3c:c4:
                    93:52:87:d6:f6:85:e9:f9:53:9f:c2:d8:ab:ad:3a:
                    29:3a:12:cf:3c:68:c3:d7:3b:29:ae:74:49:56:16:
                    bb:10:35:56:ad:82:73:91:98:32:ed:80:fa:ea:2a:
                    ea:73:14:eb:d2:cf:c4:0c:85:c5:55:3c:95:03:59:
                    9b:26:9c:41:bd:f0:f3:69:e4:18:2c:7d:8e:26:51:
                    e6:fa:40:b5:e4:9e:8e:c6:b5:b7:6b:43:b6:25:d9:
                    3e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:96:B3:97:0C:6A:12:62:6C:60:C8:D5:86:62:1A:0E:D4:02:F1:EF
            X509v3 Authority Key Identifier:
                keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/BJazlwxqEmJsYMjVhmIaDtQC8e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.31.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:83:b9:8d:65:ed:6b:2d:42:2d:77:80:22:75:d8:7c:e9:05:
         f3:77:e8:b5:69:d3:7b:1c:ca:9c:64:44:eb:6e:b8:72:57:86:
         88:3e:c6:29:e1:80:ee:0a:e7:3e:1d:9e:ce:41:a8:2e:42:a4:
         f2:47:3c:5e:85:9e:67:25:62:df:5b:00:90:71:70:99:f9:14:
         c8:37:6d:56:64:df:6a:dd:6b:06:5c:9c:13:f2:ae:1b:fc:0e:
         1f:b6:79:ae:0b:5d:d1:35:1c:9b:05:f9:92:8e:99:2e:f6:87:
         cd:a4:6b:53:94:ce:af:28:09:c5:8e:26:14:bd:43:2e:2a:f6:
         55:c3:3c:4f:3b:68:e3:de:c2:59:dd:6f:c9:b3:99:50:d4:5d:
         e3:b5:4b:05:56:16:0f:d8:2c:e9:d2:1d:f8:92:2e:4e:fe:92:
         65:99:aa:1c:c4:98:89:26:d7:24:f0:dc:cf:b3:24:a2:4d:b0:
         50:51:f2:93:5f:f7:d8:1c:fd:f3:0f:19:f4:74:10:80:9c:b3:
         7c:94:0a:0d:2c:4e:a0:08:f1:c0:cc:80:ad:cd:6b:18:f1:ce:
         fb:dd:be:a6:56:6e:21:fc:bc:08:b4:4c:db:4b:67:1e:87:92:
         cf:43:1d:2a:2a:ea:8d:d7:8d:00:22:af:81:3d:e5:23:a0:dd:
         05:51:67:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 03:48:29 2026 by rpki-client