This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/BerANeusZYuUv5h1O8bjEQcko68.roa
File:                     BerANeusZYuUv5h1O8bjEQcko68.roa (raw, json)
Hash identifier:          YSh58W/wodSbxUdvNx3hzcm1gIq/y+oIFpaq31oMDOs=
Subject key identifier:   05:EA:C0:35:EB:AC:65:8B:94:BF:98:75:3B:C6:E3:11:07:24:A3:AF
Certificate issuer:       /CN=e0e53bb30d07520f857ae656f7ad813f22efd152
Certificate serial:       019B0CBA1937D7CF12C46F69178ADB6D9D90
Authority key identifier: E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/BerANeusZYuUv5h1O8bjEQcko68.roa
Signing time:             Thu 11 Dec 2025 09:24:41 +0000
ROA not before:           Thu 11 Dec 2025 09:24:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     203914
IP address blocks:        158.94.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0c:ba:19:37:d7:cf:12:c4:6f:69:17:8a:db:6d:9d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e53bb30d07520f857ae656f7ad813f22efd152
        Validity
            Not Before: Dec 11 09:24:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=05eac035ebac658b94bf98753bc6e3110724a3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:79:5b:42:e1:24:b4:34:24:47:6d:be:dc:b2:
                    4a:6a:56:ff:61:a4:0c:61:38:ca:7a:3d:1a:27:56:
                    0a:62:89:11:e5:e6:e9:2f:62:09:33:6d:7c:78:4b:
                    58:ca:6a:87:06:ef:4a:82:17:dd:38:da:bf:86:74:
                    be:51:70:03:6b:f7:5d:bb:eb:61:29:2c:99:9e:24:
                    6f:31:4b:5e:d4:0a:6f:b6:9d:89:a3:d5:65:b3:f0:
                    c3:21:9e:3f:5d:cf:17:40:1a:d2:74:fc:9a:7c:8c:
                    2b:a8:c0:b8:ca:13:6e:48:ac:32:56:ae:b3:d7:7f:
                    f9:0b:06:f2:a6:29:f8:83:c0:1b:71:c4:80:8d:63:
                    8e:17:b9:d5:a7:23:10:e2:ce:8f:bd:70:83:01:5c:
                    54:28:9c:c3:f7:59:9b:20:8b:d9:a9:c3:7a:af:0b:
                    c2:35:de:78:b4:2a:41:89:35:c4:c9:37:0a:5a:ec:
                    42:f7:d4:60:80:4e:cc:72:2a:ad:8b:2a:6a:7c:9a:
                    79:ae:65:98:3d:a2:00:85:a3:84:7f:dc:ea:63:2a:
                    b9:3d:bf:81:cc:93:23:8c:63:c0:e0:50:2b:b7:d3:
                    b8:a1:c8:31:3c:f3:a5:7f:a9:2b:12:b7:96:4c:7d:
                    2a:82:85:09:a6:d8:e7:d6:d5:24:c9:70:dc:e9:fc:
                    12:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:EA:C0:35:EB:AC:65:8B:94:BF:98:75:3B:C6:E3:11:07:24:A3:AF
            X509v3 Authority Key Identifier:
                keyid:E0:E5:3B:B3:0D:07:52:0F:85:7A:E6:56:F7:AD:81:3F:22:EF:D1:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OU7sw0HUg-FeuZW962BPyLv0VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/BerANeusZYuUv5h1O8bjEQcko68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bc2f53-8e75-4e0e-bfd4-29b9bf53a57f/1/4OU7sw0HUg-FeuZW962BPyLv0VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.94.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:60:46:4d:d9:25:0b:91:f7:de:30:06:fa:75:ae:41:4b:67:
         3a:eb:1d:ee:54:37:d8:de:64:7b:36:dc:50:51:ab:1a:e3:34:
         94:cd:a0:8d:56:16:0f:8e:65:b7:b7:03:57:2b:65:ec:74:a9:
         e7:f4:c0:21:8f:87:67:f7:ef:e6:f0:79:24:17:05:ec:12:ac:
         f1:46:1a:2b:2d:b4:36:46:fa:dc:dd:c0:7f:65:d6:e5:90:3a:
         5e:c6:f5:3d:11:f3:83:25:91:2d:e4:33:97:b5:ba:f9:73:de:
         30:6f:68:98:7d:61:07:c3:40:80:07:83:57:87:14:01:e0:93:
         c9:0e:f9:7f:8a:e4:61:c7:d9:81:4a:81:72:5f:4f:57:1b:ae:
         94:19:32:8c:6a:1f:13:74:fa:8a:13:83:8c:05:9a:8b:95:de:
         ca:81:76:91:f0:37:3a:36:c7:eb:74:75:c6:ee:42:4c:26:23:
         de:c6:6a:02:ef:b8:4f:41:ce:a1:e8:bd:ad:f8:08:33:7c:b5:
         f9:47:b2:41:1a:86:e1:c8:68:75:b4:59:c1:f9:ef:24:40:11:
         0e:17:56:e8:0e:72:36:d5:17:bc:17:81:6b:89:b5:6a:9b:a8:
         05:e6:0c:4f:3b:d7:62:ca:2e:13:4f:f6:ac:5f:1c:26:8f:51:
         7f:a7:d3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:36:00 2025 by rpki-client