This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/hSOTCCv3OPh53CPmi_cjVejoo_w.roa
File:                     hSOTCCv3OPh53CPmi_cjVejoo_w.roa (raw, json)
Hash identifier:          InXA8D+Y9I73AcYtLRW/V1dBGzkfawMHW0HbT3L6cWY=
Subject key identifier:   85:23:93:08:2B:F7:38:F8:79:DC:23:E6:8B:F7:23:55:E8:E8:A3:FC
Certificate issuer:       /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial:       019B23AA1D64E18B68CFF602E101C19641D8
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/hSOTCCv3OPh53CPmi_cjVejoo_w.roa
Signing time:             Mon 15 Dec 2025 20:18:29 +0000
ROA not before:           Mon 15 Dec 2025 20:18:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     42375
IP address blocks:        2a05:1e40::/29 maxlen: 29
                          2a06:4380::/29 maxlen: 29
                          2a09:2980::/32 maxlen: 32
                          2a09:2985::/32 maxlen: 32
                          2a09:9440::/32 maxlen: 32
                          2a09:a200::/32 maxlen: 32
                          2a09:a201::/32 maxlen: 32
                          2a09:a202::/32 maxlen: 32
                          2a09:a500::/32 maxlen: 32
                          2a09:a502::/32 maxlen: 32
                          2a09:a504::/32 maxlen: 32
                          2a09:a800::/29 maxlen: 29
                          2a09:af80::/32 maxlen: 32
                          2a09:af81::/32 maxlen: 32
                          2a09:af82::/32 maxlen: 32
                          2a09:bc00::/29 maxlen: 29
                          2a09:c700::/29 maxlen: 29
                          2a09:cf00::/29 maxlen: 29
                          2a09:d700::/32 maxlen: 32
                          2a09:d701::/32 maxlen: 32
                          2a09:d702::/32 maxlen: 32
                          2a09:dd00::/32 maxlen: 32
                          2a09:dd01::/32 maxlen: 32
                          2a09:dd02::/32 maxlen: 32
                          2a09:e300::/32 maxlen: 32
                          2a09:e301::/32 maxlen: 32
                          2a09:e302::/32 maxlen: 32
                          2a09:e700::/29 maxlen: 29
                          2a09:ef00::/32 maxlen: 32
                          2a0a:b380::/32 maxlen: 32
                          2a0a:c0c0::/29 maxlen: 29
                          2a0b:9000::/29 maxlen: 29
                          2a0c:72c0::/29 maxlen: 29
                          2a0c:9480::/29 maxlen: 29
                          2a0d:3c40::/32 maxlen: 32
                          2a0d:3c41::/32 maxlen: 32
                          2a0d:95c0::/32 maxlen: 32
                          2a0d:95c1::/32 maxlen: 32
                          2a0d:afc1::/32 maxlen: 32
                          2a0d:afc2::/32 maxlen: 32
                          2a0d:c100::/32 maxlen: 32
                          2a0d:c101::/32 maxlen: 32
                          2a0d:cdc3::/32 maxlen: 32
                          2a0d:f840::/29 maxlen: 29
                          2a0d:fcc0::/32 maxlen: 32
                          2a0d:fcc1::/32 maxlen: 32
                          2a0d:fcc2::/32 maxlen: 32
                          2a0e:3f40::/29 maxlen: 29
                          2a0e:5880::/29 maxlen: 29
                          2a0e:7f00::/32 maxlen: 32
                          2a0e:7f01::/32 maxlen: 32
                          2a0e:7f02::/32 maxlen: 32
                          2a0e:b200::/29 maxlen: 29
                          2a0e:c4c0::/29 maxlen: 29
                          2a0e:eec0::/32 maxlen: 32
                          2a0e:eec1::/32 maxlen: 32
                          2a0e:eec2::/32 maxlen: 32
                          2a0f:1800::/29 maxlen: 29
                          2a0f:9d01::/32 maxlen: 32
                          2a0f:9d02::/32 maxlen: 32
                          2a0f:9d03::/32 maxlen: 32
                          2a11:3c40::/32 maxlen: 32
                          2a11:3c41::/32 maxlen: 32
                          2a11:3c42::/32 maxlen: 32
                          2a11:4040::/29 maxlen: 29
                          2a11:6540::/29 maxlen: 29
                          2a11:6580::/29 maxlen: 29
                          2a11:6bc0::/32 maxlen: 32
                          2a11:6bc1::/32 maxlen: 32
                          2a11:6bc3::/32 maxlen: 32
                          2a11:6d00::/29 maxlen: 29
                          2a11:84c0::/29 maxlen: 29
                          2a11:a180::/29 maxlen: 29
                          2a12:2fc0::/32 maxlen: 32
                          2a12:2fc1::/32 maxlen: 32
                          2a12:2fc2::/32 maxlen: 32
                          2a12:3040::/29 maxlen: 29
                          2a12:38c0::/29 maxlen: 29
                          2a12:39c0::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:23:aa:1d:64:e1:8b:68:cf:f6:02:e1:01:c1:96:41:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
        Validity
            Not Before: Dec 15 20:18:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=852393082bf738f879dc23e68bf72355e8e8a3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6a:f9:63:6f:5a:a4:b9:7e:9a:f7:58:16:b6:
                    aa:47:d5:08:85:46:95:88:36:24:e2:83:a5:4a:90:
                    8a:1f:18:6e:a4:bd:73:ed:19:22:09:01:1b:e2:e5:
                    1a:9f:b4:c2:ad:ce:6f:a3:73:d1:4c:f4:6c:ed:44:
                    fa:4e:d1:d6:52:ae:52:24:3c:ba:c8:9f:96:f3:a8:
                    2e:8c:96:b7:46:a9:55:72:af:6f:c0:fe:15:6c:a2:
                    10:12:b3:e4:19:a8:2b:58:55:fd:83:64:83:e0:a6:
                    ef:f5:eb:c4:84:4e:54:e7:ca:fe:7c:cd:cd:54:00:
                    9c:f1:f3:51:86:b7:43:ab:36:bd:7f:d3:e5:4f:bf:
                    a5:bd:27:09:4a:1d:ec:16:55:bc:92:1d:9a:be:61:
                    0d:eb:98:7f:8d:6f:73:0a:ab:5d:3e:56:26:97:43:
                    b5:17:ff:12:e8:4b:6e:1b:c8:07:e5:c4:ec:da:86:
                    ef:ce:93:0e:31:9d:e4:5c:76:bb:23:ce:79:7f:ef:
                    88:c7:47:86:c1:54:6b:60:06:01:20:75:ef:1d:63:
                    9d:89:61:45:92:14:85:a2:c8:1c:2f:2c:aa:c9:11:
                    ed:c1:6f:92:c0:7a:bd:37:ca:8c:db:34:62:f3:3f:
                    ab:f7:2e:3e:05:05:21:c2:6a:ac:b2:58:c9:18:20:
                    ed:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:23:93:08:2B:F7:38:F8:79:DC:23:E6:8B:F7:23:55:E8:E8:A3:FC
            X509v3 Authority Key Identifier:
                keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/hSOTCCv3OPh53CPmi_cjVejoo_w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:1e40::/29
                  2a06:4380::/29
                  2a09:2980::/32
                  2a09:2985::/32
                  2a09:9440::/32
                  2a09:a200::-2a09:a202:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:a500::/32
                  2a09:a502::/32
                  2a09:a504::/32
                  2a09:a800::/29
                  2a09:af80::-2a09:af82:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:bc00::/29
                  2a09:c700::/29
                  2a09:cf00::/29
                  2a09:d700::-2a09:d702:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:dd00::-2a09:dd02:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:e300::-2a09:e302:ffff:ffff:ffff:ffff:ffff:ffff
                  2a09:e700::/29
                  2a09:ef00::/32
                  2a0a:b380::/32
                  2a0a:c0c0::/29
                  2a0b:9000::/29
                  2a0c:72c0::/29
                  2a0c:9480::/29
                  2a0d:3c40::/31
                  2a0d:95c0::/31
                  2a0d:afc1::-2a0d:afc2:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0d:c100::/31
                  2a0d:cdc3::/32
                  2a0d:f840::/29
                  2a0d:fcc0::-2a0d:fcc2:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0e:3f40::/29
                  2a0e:5880::/29
                  2a0e:7f00::-2a0e:7f02:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0e:b200::/29
                  2a0e:c4c0::/29
                  2a0e:eec0::-2a0e:eec2:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0f:1800::/29
                  2a0f:9d01::-2a0f:9d03:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:3c40::-2a11:3c42:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:4040::/29
                  2a11:6540::/29
                  2a11:6580::/29
                  2a11:6bc0::/31
                  2a11:6bc3::/32
                  2a11:6d00::/29
                  2a11:84c0::/29
                  2a11:a180::/29
                  2a12:2fc0::-2a12:2fc2:ffff:ffff:ffff:ffff:ffff:ffff
                  2a12:3040::/29
                  2a12:38c0::/29
                  2a12:39c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         93:24:be:1e:cb:a5:94:63:cb:b4:b0:ee:e0:d7:a9:9c:81:3a:
         39:64:70:49:1a:8c:db:07:d9:1e:57:09:15:78:27:01:b6:a6:
         29:cb:f1:c2:37:88:d6:08:4c:c5:9f:1f:28:42:b8:fa:c4:c8:
         96:59:b5:24:ef:84:53:43:a4:b4:f3:14:6d:4b:a6:74:9c:b3:
         f9:4c:f2:36:c0:a0:b6:20:d8:96:98:83:6b:c6:92:1f:ec:b4:
         ac:a4:72:ed:c4:15:86:94:9e:e0:56:bf:1b:62:11:24:50:38:
         46:02:2e:06:06:b4:67:7a:d7:fc:1e:fa:9a:c8:2e:d9:0e:f6:
         92:bd:d0:f6:0d:bf:33:ab:07:23:1c:59:b5:89:05:e2:d4:d2:
         37:19:92:07:4e:2b:b9:ed:79:80:2b:08:e6:d7:22:48:94:e2:
         e5:d9:be:49:ea:50:db:66:3a:70:b2:93:47:f5:6e:dc:b2:2f:
         9e:7c:32:51:3d:6d:ce:fc:97:94:30:fc:49:cc:25:63:11:b5:
         2e:16:6e:78:da:78:c6:01:d2:69:e3:69:91:fd:eb:65:9a:58:
         11:03:29:eb:1e:76:e4:0a:32:ab:44:07:60:91:c5:a5:44:d5:
         cc:43:91:ed:26:0b:0b:de:dc:fa:e5:9e:67:96:bf:10:f9:4a:
         82:fe:b9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 06:37:22 2025 by rpki-client