This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/t76vUkxnTyB0mdkK33aiYE36KdM.roa
File:                     t76vUkxnTyB0mdkK33aiYE36KdM.roa (raw, json)
Hash identifier:          o3rv2n3beg9k6cYokwM82dkugQ4adErtxUWGMAX6m7w=
Subject key identifier:   B7:BE:AF:52:4C:67:4F:20:74:99:D9:0A:DF:76:A2:60:4D:FA:29:D3
Certificate issuer:       /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial:       019B7F140A49F524501789F85218DBB56211
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/t76vUkxnTyB0mdkK33aiYE36KdM.roa
Signing time:             Fri 02 Jan 2026 14:19:38 +0000
ROA not before:           Fri 02 Jan 2026 14:19:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3257
IP address blocks:        62.217.8.0/21 maxlen: 24
                          212.11.0.0/24 maxlen: 24
                          212.11.6.0/24 maxlen: 24
                          212.11.9.0/24 maxlen: 24
                          212.11.10.0/24 maxlen: 24
                          212.11.13.0/24 maxlen: 24
                          212.11.44.0/24 maxlen: 24
                          212.11.48.0/24 maxlen: 24
                          212.11.49.0/24 maxlen: 24
                          212.11.52.0/24 maxlen: 24
                          212.11.55.0/24 maxlen: 24
                          212.11.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Jan 2026 18:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:0a:49:f5:24:50:17:89:f8:52:18:db:b5:62:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
        Validity
            Not Before: Jan  2 14:19:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b7beaf524c674f207499d90adf76a2604dfa29d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:53:b3:f0:f0:c1:ae:55:3e:21:6d:f9:48:4a:
                    72:83:8d:6b:07:25:91:89:73:8c:61:10:ac:cb:1d:
                    19:a8:b8:0b:b1:ac:7d:d9:94:15:a1:cc:ff:36:72:
                    33:b6:54:54:e8:20:02:96:e0:b7:05:61:cf:b3:54:
                    9f:1d:52:ad:b6:e5:5e:ae:9b:91:1e:43:20:76:07:
                    57:62:1d:e0:13:ea:7a:d8:6f:a2:41:7b:88:35:1f:
                    b0:c9:b2:00:89:ea:bb:f6:38:47:20:8b:d0:39:c7:
                    64:8d:76:65:cf:64:83:8b:48:4e:9f:ea:d0:a8:80:
                    24:49:78:7d:52:fa:12:f3:4f:5e:fa:54:6c:28:f0:
                    a1:26:8a:1e:9b:a5:58:39:90:2f:a5:85:8a:fe:29:
                    34:b4:23:1f:54:61:e4:3a:c2:0f:3e:9f:f7:ba:1d:
                    30:08:2b:fd:5e:d6:35:f9:4e:c8:cb:1a:1d:7d:ac:
                    1c:b2:c6:eb:3f:7c:ab:9b:0b:ff:15:b7:f4:50:ff:
                    19:1d:01:0f:1b:7c:c2:69:42:bf:62:22:68:35:55:
                    56:6f:5e:ca:cb:d3:77:63:48:e4:73:e5:63:ff:bb:
                    cb:51:bb:ef:24:01:3a:a2:bd:b6:83:0c:71:2e:41:
                    e1:7b:14:25:30:4a:bf:67:0c:cc:b7:f8:3e:48:e7:
                    3a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BE:AF:52:4C:67:4F:20:74:99:D9:0A:DF:76:A2:60:4D:FA:29:D3
            X509v3 Authority Key Identifier:
                keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/t76vUkxnTyB0mdkK33aiYE36KdM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.217.8.0/21
                  212.11.0.0/24
                  212.11.6.0/24
                  212.11.9.0-212.11.10.255
                  212.11.13.0/24
                  212.11.44.0/24
                  212.11.48.0/23
                  212.11.52.0/24
                  212.11.55.0-212.11.56.255

    Signature Algorithm: sha256WithRSAEncryption
         05:45:9b:d2:75:74:b9:8f:ff:64:84:9e:61:3d:50:2a:ce:fd:
         de:1e:6a:a8:9c:6b:a2:9f:dc:b3:20:44:de:e9:4b:aa:25:e1:
         15:8e:43:b2:2f:aa:2a:66:69:8b:e4:28:03:0f:a3:9b:d2:c5:
         b1:e0:25:7b:e6:97:a2:87:a1:74:b6:02:12:bb:f9:e0:cd:dd:
         3b:f1:4d:d1:3f:9a:b2:c4:87:ed:95:d1:0b:2b:eb:1d:79:d4:
         fa:71:80:26:38:bf:f5:11:1e:f7:7e:fa:9f:7d:03:5e:61:ab:
         9f:02:48:05:6e:fb:b4:bc:d0:f2:7a:69:d1:73:7c:77:55:f2:
         82:5b:a5:60:04:bd:cd:9c:39:ab:f7:7a:9a:71:a7:fa:eb:3d:
         40:a1:f0:21:86:c6:14:b7:7a:fd:fd:33:fb:c9:0a:0a:a6:c8:
         0b:a6:0d:f3:fc:2e:b4:81:ff:d5:e9:2c:5c:73:b8:52:f4:6b:
         a3:52:74:b8:45:58:ca:5b:ec:b3:3f:79:c0:09:5e:8d:7f:4c:
         fc:ac:39:76:b5:39:2d:6d:aa:b5:38:a8:91:35:31:a2:cc:8b:
         98:a6:6d:0b:c1:a0:9d:9b:62:90:f5:81:3d:46:57:54:e0:a3:
         3a:19:fb:80:70:f0:4c:8d:6a:d8:8e:98:b0:d0:98:2f:75:2e:
         f7:ba:ff:36
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAZt/FApJ9SRQF4n4UhjbtWIRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky
YWUzYjcwHhcNMjYwMTAyMTQxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2JlYWY1MjRjNjc0ZjIwNzQ5OWQ5MGFkZjc2YTI2MDRkZmEyOWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlOz8PDBrlU+IW35SEpyg41rByWR
iXOMYRCsyx0ZqLgLsax92ZQVocz/NnIztlRU6CACluC3BWHPs1SfHVKttuVerpuR
HkMgdgdXYh3gE+p62G+iQXuINR+wybIAieq79jhHIIvQOcdkjXZlz2SDi0hOn+rQ
qIAkSXh9UvoS809e+lRsKPChJooem6VYOZAvpYWK/ik0tCMfVGHkOsIPPp/3uh0w
CCv9XtY1+U7IyxodfawcssbrP3yrmwv/Fbf0UP8ZHQEPG3zCaUK/YiJoNVVWb17K
y9N3Y0jkc+Vj/7vLUbvvJAE6or22gwxxLkHhexQlMEq/ZwzMt/g+SOc6GwIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFLe+r1JMZ08gdJnZCt92omBN+inTMB8GA1UdIwQY
MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt
ZDJhZGVlZDc1NWQ4LzEvdDc2dlVreG5UeUIwbWRrSzMzYWlZRTM2S2RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4
LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQDPtkIAwQA
1AsAAwQA1AsGMAwDBADUCwkDBADUCwoDBADUCw0DBADUCywDBAHUCzADBADUCzQw
DAMEANQLNwMEANQLODANBgkqhkiG9w0BAQsFAAOCAQEABUWb0nV0uY//ZISeYT1Q
Ks793h5qqJxrop/csyBE3ulLqiXhFY5Dsi+qKmZpi+QoAw+jm9LFseAle+aXooeh
dLYCErv54M3dO/FN0T+assSH7ZXRCyvrHXnU+nGAJji/9REe9376n30DXmGrnwJI
BW77tLzQ8npp0XN8d1XyglulYAS9zZw5q/d6mnGn+us9QKHwIYbGFLd6/f0z+8kK
CqbIC6YN8/wutIH/1eksXHO4UvRro1J0uEVYylvssz95wAlejX9M/Kw5drU5LW2q
tTiokTUxosyLmKZtC8GgnZtikPWBPUZXVOCjOhn7gHDwTI1q2I6YsNCYL3Uu97r/
Ng==
-----END CERTIFICATE-----
Generated at Sat Jan 17 02:50:10 2026 by rpki-client