This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/kj9ql8RD4BaCDh5-_M73OwgTWbs.roa
File:                     kj9ql8RD4BaCDh5-_M73OwgTWbs.roa (raw, json)
Hash identifier:          jzhcUtv+MxlXKawfYrhFAm0TnRIuov89FILEyM8GEDQ=
Subject key identifier:   92:3F:6A:97:C4:43:E0:16:82:0E:1E:7E:FC:CE:F7:3B:08:13:59:BB
Certificate issuer:       /CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Certificate serial:       019B06F0986A38A590C40216C47FCD4ABC8D
Authority key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/kj9ql8RD4BaCDh5-_M73OwgTWbs.roa
Signing time:             Wed 10 Dec 2025 06:26:29 +0000
ROA not before:           Wed 10 Dec 2025 06:26:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     197453
IP address blocks:        46.183.176.0/21 maxlen: 21
                          91.200.86.0/23 maxlen: 23
                          178.57.80.0/21 maxlen: 21
                          178.57.88.0/22 maxlen: 22
                          178.57.93.0/24 maxlen: 24
                          178.57.95.0/24 maxlen: 24
                          185.9.84.0/22 maxlen: 22
                          185.162.232.0/24 maxlen: 24
                          185.195.243.0/24 maxlen: 24
                          185.196.116.0/24 maxlen: 24
                          185.218.182.0/23 maxlen: 23
                          185.218.182.1/32 maxlen: 32
                          185.218.182.2/32 maxlen: 32
                          185.218.183.1/32 maxlen: 32
                          193.47.154.0/24 maxlen: 24
                          212.74.228.0/24 maxlen: 24
                          212.74.229.0/24 maxlen: 24
                          212.74.230.0/24 maxlen: 24
                          213.5.224.0/23 maxlen: 23
                          217.72.0.0/23 maxlen: 23
                          2a01:bc40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:06:f0:98:6a:38:a5:90:c4:02:16:c4:7f:cd:4a:bc:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
        Validity
            Not Before: Dec 10 06:26:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=923f6a97c443e016820e1e7efccef73b081359bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c3:cb:4d:99:38:83:92:99:f8:9f:98:0a:76:
                    87:e4:38:bb:7c:88:af:8a:58:75:f2:a1:34:b6:93:
                    cf:17:fa:ea:b0:57:27:08:ef:e5:f2:9f:68:6f:fc:
                    2e:1f:6b:94:45:d2:bf:d9:53:44:2d:e9:63:95:27:
                    31:33:44:7e:9a:9c:a4:8b:76:17:81:f9:a7:89:94:
                    dd:2c:61:ce:fd:39:5a:48:a3:cd:1b:87:fb:8e:90:
                    ef:75:5d:46:0f:83:26:e3:7b:be:09:73:c1:24:1b:
                    12:cd:97:05:e0:b7:e0:02:2f:f4:6a:e1:af:1c:45:
                    a3:2f:4e:7a:2f:65:37:9b:6e:4c:14:22:b4:2a:b0:
                    4a:29:3f:45:12:b7:28:60:fa:c4:c7:55:fa:0c:84:
                    9e:2d:b5:d6:39:fd:f5:34:30:89:3c:63:a9:9f:ed:
                    28:b4:e7:4a:4e:32:46:42:5a:d3:21:4f:2e:f4:aa:
                    08:ae:4c:a6:e6:a6:a4:8e:63:e4:92:2c:bd:bd:5e:
                    2e:df:05:af:54:bf:5d:7e:aa:5d:cd:7d:cf:99:95:
                    09:a2:b6:6e:d7:88:f4:8a:09:e4:1c:2b:a0:25:c5:
                    c4:fc:14:c3:3c:8b:a7:7c:3e:c5:db:0a:cf:49:1c:
                    05:0c:83:1c:68:68:85:5b:34:bc:a2:66:a6:f0:ea:
                    4b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3F:6A:97:C4:43:E0:16:82:0E:1E:7E:FC:CE:F7:3B:08:13:59:BB
            X509v3 Authority Key Identifier:
                keyid:C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/kj9ql8RD4BaCDh5-_M73OwgTWbs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.183.176.0/21
                  91.200.86.0/23
                  178.57.80.0-178.57.91.255
                  178.57.93.0/24
                  178.57.95.0/24
                  185.9.84.0/22
                  185.162.232.0/24
                  185.195.243.0/24
                  185.196.116.0/24
                  185.218.182.0/23
                  193.47.154.0/24
                  212.74.228.0-212.74.230.255
                  213.5.224.0/23
                  217.72.0.0/23
                IPv6:
                  2a01:bc40::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:e2:36:6a:d8:56:c3:33:39:8e:4b:3d:84:88:3a:7f:b4:fd:
         eb:52:3e:05:55:9b:bc:f2:20:ce:de:57:ca:ff:12:f2:c7:11:
         bc:16:41:82:59:76:65:c6:5b:2c:47:ed:31:1c:51:a3:0c:26:
         da:a9:a8:ed:9c:31:ad:fc:8e:8c:95:ee:68:84:69:61:96:5f:
         f6:06:17:e1:bc:ff:68:4e:23:8d:f0:53:33:14:9a:5f:ef:82:
         a8:90:6d:d3:96:9c:58:b6:68:d7:d9:57:3f:70:36:ee:6c:a6:
         1b:d7:04:51:54:0c:6f:fb:da:5a:85:f7:b6:cc:48:33:38:33:
         41:e0:d0:40:39:c2:a3:fc:97:74:32:b3:18:18:ab:6b:e3:71:
         93:40:5e:3e:c7:e6:69:1f:f2:1a:47:bf:24:7a:33:b8:74:38:
         b4:f9:72:d7:ed:0d:f4:3b:1e:75:ce:4b:ce:82:eb:20:53:bb:
         74:e4:1b:fb:4d:e4:46:dc:94:53:2c:b2:9c:ff:7e:97:44:c5:
         8f:94:c4:c1:87:ef:02:23:8b:84:28:02:67:f6:02:b9:f5:67:
         f0:a4:46:12:44:92:7e:72:a1:53:83:05:e8:72:55:c9:ff:6e:
         ea:7d:6f:90:c2:f6:45:16:91:b4:7b:6c:af:18:18:08:30:3f:
         0c:f9:5d:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Dec 19 11:50:29 2025 by rpki-client