This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/22npFef-j0M49cVlWvOM23fYAyU.roa
File:                     22npFef-j0M49cVlWvOM23fYAyU.roa (raw, json)
Hash identifier:          9BoQFEFFXQE63XppyCXHiu5uKpdTCmc2QeSL3Gkzz8I=
Subject key identifier:   DB:69:E9:15:E7:FE:8F:43:38:F5:C5:65:5A:F3:8C:DB:77:D8:03:25
Certificate issuer:       /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial:       019B797F4400F2B72ABC83C73D47BE86D20C
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/22npFef-j0M49cVlWvOM23fYAyU.roa
Signing time:             Thu 01 Jan 2026 12:19:02 +0000
ROA not before:           Thu 01 Jan 2026 12:19:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47894
IP address blocks:        94.103.36.0/24 maxlen: 24
                          94.103.37.0/24 maxlen: 24
                          94.103.38.0/24 maxlen: 24
                          94.103.41.0/24 maxlen: 24
                          94.103.42.0/24 maxlen: 24
                          94.103.43.0/24 maxlen: 24
                          185.35.20.0/24 maxlen: 24
                          185.35.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7f:44:00:f2:b7:2a:bc:83:c7:3d:47:be:86:d2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
        Validity
            Not Before: Jan  1 12:19:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=db69e915e7fe8f4338f5c5655af38cdb77d80325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e6:62:74:a9:f7:c2:e8:47:70:69:5e:44:ae:
                    c5:51:c0:86:c7:67:8b:85:78:a4:a4:8b:0b:62:80:
                    de:44:07:70:db:66:4c:4e:3a:b1:e9:5f:28:31:84:
                    fd:da:e8:ba:7c:f2:81:91:35:db:8b:8a:29:3f:29:
                    0f:39:ef:1b:f2:b5:18:8f:f2:98:44:08:96:c7:b7:
                    5e:49:71:55:70:b0:07:0a:79:63:52:b6:20:0e:35:
                    3a:5f:7b:09:ae:c2:c4:00:39:28:8b:1e:5d:06:a1:
                    b9:45:3c:d6:83:2b:8d:ac:5a:02:86:35:99:ae:d2:
                    75:95:91:61:1a:8b:a8:62:a4:a2:71:43:ce:f6:2f:
                    3c:de:3b:65:be:75:52:6d:2e:82:86:b8:0c:44:77:
                    e7:f6:f3:2f:b4:81:eb:78:15:5d:4b:f9:3f:e0:ea:
                    0b:f8:03:23:a3:cb:f9:c0:ce:4b:ff:33:20:45:9d:
                    e3:23:0b:6c:f2:3e:f8:7a:a2:25:f3:34:35:c1:af:
                    73:29:8c:ba:4b:87:5f:99:91:27:7c:1e:a2:f8:4f:
                    4e:05:81:fc:9d:55:cd:02:4e:15:fa:e1:1b:a9:1a:
                    54:18:f3:d7:c5:1b:5f:6d:3d:eb:8d:a2:84:d5:e7:
                    0d:39:0c:f4:6d:2e:26:f3:75:71:54:2b:c0:54:1f:
                    4b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:69:E9:15:E7:FE:8F:43:38:F5:C5:65:5A:F3:8C:DB:77:D8:03:25
            X509v3 Authority Key Identifier:
                keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/22npFef-j0M49cVlWvOM23fYAyU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.36.0-94.103.38.255
                  94.103.41.0-94.103.43.255
                  185.35.20.0/24
                  185.35.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:81:aa:82:ba:f3:82:8f:2f:82:6c:21:93:1e:26:9f:06:0b:
         df:4c:6b:b9:de:1e:27:b8:da:31:2b:0c:c5:ce:4b:66:1c:a0:
         0d:0a:b1:5f:95:6a:3c:be:a8:a1:74:12:58:84:1c:ea:1b:b3:
         0a:51:63:fc:bf:b4:85:53:43:d5:ca:65:1f:b7:12:66:a0:2d:
         63:b1:78:c8:d9:d0:99:29:d1:eb:c0:4d:f0:1a:1d:ee:9f:bb:
         f0:fd:a7:d1:f4:ec:cb:2a:33:04:8b:31:b4:85:e3:16:c4:72:
         58:04:86:03:ab:50:12:c2:44:a6:cb:8d:0a:3d:47:ed:60:3a:
         d3:9b:f2:1c:00:51:da:14:25:c7:7f:38:7c:97:1f:df:7f:c4:
         76:56:ad:33:23:83:e9:1e:d6:62:65:26:47:1f:59:6c:29:a6:
         87:80:4d:3d:8f:bd:f4:dc:02:2a:f6:1d:ae:1e:8c:5f:47:79:
         62:88:9a:f2:37:7b:fe:40:33:5b:f5:54:7a:48:81:18:c2:9c:
         78:fa:37:23:98:d1:74:68:fc:80:9b:7a:bd:d9:51:4a:9e:07:
         79:7e:fb:91:80:e4:c5:20:a7:91:74:21:25:5f:16:16:eb:1a:
         a8:20:48:59:3a:6d:ad:58:97:7a:f8:39:22:8e:91:03:64:54:
         ad:af:39:96
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZt5f0QA8rcqvIPHPUe+htIMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MDE4MTVjNmY5OGYzYTJiNjE4NGFmZWJmMThlYTM0MWJl
ODgyZWEwHhcNMjYwMTAxMTIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjY5ZTkxNWU3ZmU4ZjQzMzhmNWM1NjU1YWYzOGNkYjc3ZDgwMzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuZidKn3wuhHcGleRK7FUcCGx2eL
hXikpIsLYoDeRAdw22ZMTjqx6V8oMYT92ui6fPKBkTXbi4opPykPOe8b8rUYj/KY
RAiWx7deSXFVcLAHCnljUrYgDjU6X3sJrsLEADkoix5dBqG5RTzWgyuNrFoChjWZ
rtJ1lZFhGouoYqSicUPO9i883jtlvnVSbS6ChrgMRHfn9vMvtIHreBVdS/k/4OoL
+AMjo8v5wM5L/zMgRZ3jIwts8j74eqIl8zQ1wa9zKYy6S4dfmZEnfB6i+E9OBYH8
nVXNAk4V+uEbqRpUGPPXxRtfbT3rjaKE1ecNOQz0bS4m83VxVCvAVB9LjwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFNtp6RXn/o9DOPXFZVrzjNt32AMlMB8GA1UdIwQY
MBaAFOUBgVxvmPOithhK/r8Y6jQb6ILqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWIt
MDA1OWY3MzdlZjA1LzEvMjJucEZlZi1qME00OWNWbFd2T00yM2ZZQXlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWItMDA1OWY3MzdlZjA1
LzEvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAJeZyQD
BABeZyYwDAMEAF5nKQMEAl5nKAMEALkjFAMEALkjFzANBgkqhkiG9w0BAQsFAAOC
AQEAVIGqgrrzgo8vgmwhkx4mnwYL30xrud4eJ7jaMSsMxc5LZhygDQqxX5VqPL6o
oXQSWIQc6huzClFj/L+0hVND1cplH7cSZqAtY7F4yNnQmSnR68BN8Bod7p+78P2n
0fTsyyozBIsxtIXjFsRyWASGA6tQEsJEpsuNCj1H7WA605vyHABR2hQlx384fJcf
33/EdlatMyOD6R7WYmUmRx9ZbCmmh4BNPY+99NwCKvYdrh6MX0d5Yoia8jd7/kAz
W/VUekiBGMKcePo3I5jRdGj8gJt6vdlRSp4HeX77kYDkxSCnkXQhJV8WFusaqCBI
WTptrViXevg5Io6RA2RUra85lg==
-----END CERTIFICATE-----
Generated at Wed Jan 21 13:33:54 2026 by rpki-client