This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BJBEha3KPBYaZn5Zq2NXLsgAyRY.roa
File:                     BJBEha3KPBYaZn5Zq2NXLsgAyRY.roa (raw, json)
Hash identifier:          Li/z/7Q+LM/FMsxM04uaUiL86iKcuw7y01bLpKODnBs=
Subject key identifier:   04:90:44:85:AD:CA:3C:16:1A:66:7E:59:AB:63:57:2E:C8:00:C9:16
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01880A44D96E9DC203FD4103581A7A85423C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BJBEha3KPBYaZn5Zq2NXLsgAyRY.roa
Signing time:             Thu 11 May 2023 10:04:24 +0000
ROA not before:           Thu 11 May 2023 10:04:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:188:a44:aae4/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:0a:44:d9:6e:9d:c2:03:fd:41:03:58:1a:7a:85:42:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 11 10:04:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=04904485adca3c161a667e59ab63572ec800c916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:75:c8:3a:00:98:2d:26:b9:1f:57:b1:b4:4c:
                    14:b3:fe:75:ec:db:04:f6:f7:2b:ac:71:90:b3:f1:
                    ae:03:46:82:89:e0:7e:52:7d:08:4a:d7:af:4b:86:
                    5d:8a:65:d1:c8:a3:ab:5f:f7:f4:fe:8b:06:87:03:
                    96:b3:48:d7:be:e7:1d:c5:22:41:11:bb:c6:ab:dc:
                    35:38:9c:db:63:2c:ca:c7:d6:2e:a4:57:c8:d9:8c:
                    b3:a0:7e:9d:4a:d9:59:c8:2c:e3:8d:fe:6c:83:04:
                    34:81:00:c1:59:ad:d0:d5:43:0b:7a:7b:3c:38:de:
                    0a:f2:69:dc:c6:ff:5a:51:cb:c9:ab:ec:79:89:d8:
                    3c:dc:3c:80:50:3d:e9:3e:6f:3b:ee:0d:e9:2c:6a:
                    98:cf:af:ed:f2:f4:b1:85:70:80:a9:2f:8a:fa:41:
                    98:3e:66:93:49:bd:21:14:96:86:ff:88:54:37:3f:
                    f2:17:e0:7d:70:0b:1d:fe:0a:68:23:f1:63:da:81:
                    f5:3e:62:ee:d5:56:47:f5:f2:fb:74:2f:67:57:e3:
                    1a:6a:f0:21:bc:92:e7:d1:f9:7b:f7:a0:1e:7d:7d:
                    33:34:c0:b5:4f:34:22:9c:49:60:d4:34:dd:97:ea:
                    15:b8:d3:35:bb:ff:07:b5:e9:a6:b4:e0:60:de:85:
                    1f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:90:44:85:AD:CA:3C:16:1A:66:7E:59:AB:63:57:2E:C8:00:C9:16
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BJBEha3KPBYaZn5Zq2NXLsgAyRY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:43:8e:d9:53:87:8a:8a:2c:f7:c0:bb:d1:63:0e:59:f4:9c:
         92:ad:9a:25:01:c9:6f:73:58:d3:bc:e3:54:c1:b2:db:4c:9d:
         aa:71:b6:ef:25:d3:35:65:8e:07:87:cc:e1:64:3f:8e:7b:eb:
         f9:21:86:cd:9c:2b:30:f6:4b:25:61:04:cd:d2:19:9e:16:eb:
         6f:49:93:13:0e:d7:88:3a:b5:0d:56:6e:9f:a1:73:63:0c:0b:
         96:8a:c6:94:a6:75:44:46:eb:fb:cc:cd:62:e1:d7:6f:ab:cc:
         87:c8:c8:f3:18:da:d7:ab:53:62:38:76:8c:e3:ae:78:43:9f:
         97:2a:a4:65:84:5c:8b:3d:0d:71:20:23:4b:4f:4b:00:8e:da:
         b8:6d:6e:13:62:27:79:44:ba:ed:7e:14:bf:2e:6d:49:60:92:
         7f:35:e2:64:46:d4:bc:4a:31:4f:78:fe:28:30:06:c6:02:d5:
         b8:e4:36:fc:eb:50:2a:00:a7:90:9b:c0:b2:b1:c3:6f:ef:34:
         7e:fd:65:eb:49:4c:e4:d7:b3:14:10:f7:44:0c:76:7d:54:67:
         5e:f2:ec:4e:d3:8b:9a:d9:f1:34:b4:9b:34:81:5b:4f:93:1e:
         fe:d9:34:6f:aa:c9:b8:ce:05:31:69:4e:7e:da:3c:ea:a8:2e:
         7c:c5:1c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 19:32:14 2025 by rpki-client