This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/BJ7HazHaGccfvxTQc_w6SKWhZEA.roa
File:                     BJ7HazHaGccfvxTQc_w6SKWhZEA.roa (raw, json)
Hash identifier:          Pl+4ZXeFDCtsyZiimkR12UecWLcE8XYpnlEtA132eQ4=
Subject key identifier:   04:9E:C7:6B:31:DA:19:C7:1F:BF:14:D0:73:FC:3A:48:A5:A1:64:40
Certificate issuer:       /CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Certificate serial:       019B7E390D97BC7A2C9798F18BA503BFBBBF
Authority key identifier: 74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/BJ7HazHaGccfvxTQc_w6SKWhZEA.roa
Signing time:             Fri 02 Jan 2026 10:20:26 +0000
ROA not before:           Fri 02 Jan 2026 10:20:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     24940
IP address blocks:        185.112.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:39:0d:97:bc:7a:2c:97:98:f1:8b:a5:03:bf:bb:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7400d5013c12852242343093cbf5148d4eaeaaf9
        Validity
            Not Before: Jan  2 10:20:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=049ec76b31da19c71fbf14d073fc3a48a5a16440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c5:ac:61:5b:4d:5c:5e:20:2d:37:5a:69:10:
                    a1:7f:0f:27:8d:6b:ad:aa:f9:a3:67:84:49:25:df:
                    e4:ab:db:12:e8:62:a0:36:62:62:75:52:69:d5:f0:
                    82:be:d4:e2:80:8e:84:ce:6b:37:9b:88:a2:12:92:
                    08:8d:47:32:cc:3a:ab:8a:45:72:bc:75:78:f4:c8:
                    e8:da:50:5a:f5:78:49:02:7b:4c:dd:80:3a:22:a5:
                    78:63:d8:08:25:9c:b7:8d:e6:e0:bf:97:af:52:2d:
                    c6:c1:69:83:2a:1b:f9:95:a1:a1:1f:71:72:52:3e:
                    05:79:0d:63:3b:c2:c9:62:96:49:0a:d4:c8:17:3e:
                    c8:1d:c1:d7:0d:f2:8a:2d:4a:11:8e:ab:53:61:df:
                    64:eb:7b:9f:1f:4c:46:fd:4d:d7:d8:11:65:58:bb:
                    e8:65:b9:29:0b:bd:a1:64:b2:d4:75:57:bd:ac:9b:
                    2e:dc:77:b6:73:7b:ee:bd:b6:e7:95:2c:de:a9:c7:
                    83:20:3e:73:54:58:f7:ad:19:28:3f:3a:f7:b3:13:
                    91:1c:11:c1:75:1f:ee:e0:ba:21:7a:ed:72:bb:f5:
                    96:2c:d7:23:3b:6d:77:52:3c:c9:7f:96:18:6a:21:
                    19:33:0f:52:85:27:4f:c5:87:6d:6f:26:e0:33:a9:
                    0b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9E:C7:6B:31:DA:19:C7:1F:BF:14:D0:73:FC:3A:48:A5:A1:64:40
            X509v3 Authority Key Identifier:
                keyid:74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/BJ7HazHaGccfvxTQc_w6SKWhZEA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.112.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:28:e7:14:24:99:cf:25:0e:3c:6b:c3:1d:21:63:f4:0f:ca:
         00:d9:5d:27:8d:89:ba:29:78:4d:17:5c:75:fe:72:e7:33:9a:
         ca:40:59:50:05:df:77:ff:89:0a:4a:68:e4:85:6d:55:3f:60:
         9f:52:8b:09:1c:d1:af:4b:53:14:d1:74:b8:d3:df:77:e2:d0:
         18:e7:17:a8:92:97:22:5d:0d:05:9b:ad:f1:b0:01:b7:ee:9e:
         a8:d6:29:42:13:38:71:2f:5e:3a:51:2f:c3:15:d5:2e:dd:13:
         45:67:83:bb:2e:80:32:c9:af:fa:79:67:a4:ee:fa:9a:da:b5:
         65:c5:fd:1c:c9:ee:74:e1:49:1b:a5:5b:fc:b9:18:8a:5b:98:
         64:9f:17:ce:77:e8:00:8b:11:17:5e:39:a0:35:7f:76:91:6c:
         bb:1a:91:df:89:f2:a6:84:de:88:dd:90:06:69:44:2e:5b:c2:
         ae:f7:cf:7b:4b:ad:2d:3b:86:1a:c6:3a:4d:0d:60:55:b4:2e:
         4c:73:96:ef:ad:d7:9a:29:08:b5:87:e7:3f:e9:a7:2f:b1:17:
         54:92:4c:34:11:b0:80:94:b3:d6:7b:9c:07:e4:4f:5d:dd:69:
         3e:c7:61:31:b0:4a:4a:91:ea:43:83:df:bf:1f:ad:ed:8e:41:
         6e:fe:c1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 12:27:24 2026 by rpki-client