This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/quOV5m0P09K-iIGdmn7-h4F_hoA.roa
File:                     quOV5m0P09K-iIGdmn7-h4F_hoA.roa (raw, json)
Hash identifier:          p75e5qCs/dry+aWvPlwwmY4yRaty20cNB/IP7FIFZW0=
Subject key identifier:   AA:E3:95:E6:6D:0F:D3:D2:BE:88:81:9D:9A:7E:FE:87:81:7F:86:80
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       019AC6F26FA7AC4B492E6B11C9F3CEA998CA
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/quOV5m0P09K-iIGdmn7-h4F_hoA.roa
Signing time:             Thu 27 Nov 2025 20:12:48 +0000
ROA not before:           Thu 27 Nov 2025 20:12:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     3319
IP address blocks:        77.47.142.0/24 maxlen: 24
                          77.47.210.0/24 maxlen: 24
                          77.47.211.0/24 maxlen: 24
                          185.143.57.0/24 maxlen: 24
                          195.178.128.0/22 maxlen: 24
                          195.178.132.0/24 maxlen: 24
                          195.178.133.0/24 maxlen: 24
                          195.178.134.0/24 maxlen: 24
                          195.178.135.0/24 maxlen: 24
                          195.178.144.0/23 maxlen: 23
                          195.178.147.0/24 maxlen: 24
                          212.111.207.0/24 maxlen: 24
                          212.111.216.0/24 maxlen: 24
                          212.111.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Dec 2025 01:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:c6:f2:6f:a7:ac:4b:49:2e:6b:11:c9:f3:ce:a9:98:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Nov 27 20:12:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=aae395e66d0fd3d2be88819d9a7efe87817f8680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a9:0e:0f:90:b6:f4:39:85:74:23:a7:31:ca:
                    45:6d:e0:1d:a2:a3:85:33:a4:5f:bb:30:3f:37:f3:
                    09:33:ef:14:ee:e3:86:34:2b:71:3f:41:f0:92:d1:
                    2a:03:99:ba:95:35:76:d5:67:34:03:f1:26:f0:eb:
                    2b:b4:72:35:25:da:4e:81:50:53:ab:ec:ec:93:71:
                    19:d9:32:f8:c0:9e:9c:81:1f:39:56:53:03:b1:61:
                    27:c1:6b:96:fb:21:a2:40:10:cd:f1:9b:3c:10:f3:
                    c4:ac:bd:6e:b8:e2:cc:75:b8:b5:76:d7:66:89:9e:
                    39:59:da:1d:cf:c5:a2:4f:09:16:71:92:1f:00:60:
                    75:dc:f9:73:f3:fb:22:95:1b:40:c5:81:c5:2d:2e:
                    7a:cc:70:be:37:20:3d:e9:c0:47:a4:d8:d0:6d:26:
                    9e:b5:11:f3:83:68:a6:d6:a3:c7:3c:d6:0a:5a:d1:
                    e8:ba:af:03:42:bd:ee:87:05:d5:a2:29:c7:c0:7a:
                    e2:99:13:1b:c9:74:32:82:74:37:6d:db:a9:e9:ca:
                    60:aa:9a:cb:25:16:be:6e:c6:c6:01:94:eb:0d:27:
                    c5:02:e0:f0:5a:ea:77:5e:e0:21:cf:78:f0:b7:04:
                    db:40:53:a8:17:cc:ed:b4:18:c6:32:4b:6c:8c:8f:
                    c4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E3:95:E6:6D:0F:D3:D2:BE:88:81:9D:9A:7E:FE:87:81:7F:86:80
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/quOV5m0P09K-iIGdmn7-h4F_hoA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.142.0/24
                  77.47.210.0/23
                  185.143.57.0/24
                  195.178.128.0/21
                  195.178.144.0/23
                  195.178.147.0/24
                  212.111.207.0/24
                  212.111.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:ad:59:5a:60:98:97:b4:56:39:16:b1:d0:e2:6b:6e:b6:14:
         c1:61:33:c6:86:01:81:90:83:1b:c8:66:6d:b5:ed:fe:bc:a0:
         0f:41:83:ae:db:10:4c:76:fe:4d:09:90:2e:1e:2f:4f:2d:09:
         1a:84:43:4e:c3:24:f8:14:c3:d4:54:06:b0:46:c4:40:4d:0d:
         58:02:1b:79:92:60:9c:2b:a6:49:c1:b8:a6:07:a2:4e:35:48:
         ed:ca:86:9a:b5:5c:d1:d2:9a:85:55:9e:36:87:6e:ea:56:58:
         87:d0:8a:08:70:fd:fc:9f:92:2c:a9:b0:b9:0a:1f:52:9a:59:
         14:69:94:61:f5:f4:38:21:17:3f:ef:ca:19:a2:2e:b2:dd:21:
         ad:78:aa:a2:ca:70:f3:1f:c1:2a:24:10:db:2c:df:bc:d7:e6:
         2f:4d:e4:32:2f:b7:cf:53:bd:35:ee:34:39:4f:13:5c:51:7d:
         5e:26:5e:46:aa:71:e8:4d:76:af:f9:07:a7:2b:39:6d:c5:ec:
         77:c5:b4:bc:6b:47:80:03:07:04:e3:aa:71:26:ac:c8:05:94:
         5c:f8:0b:c1:d7:83:04:45:01:dc:fb:b0:71:a2:2c:81:07:ce:
         b4:4b:df:04:34:b5:43:d8:81:8e:88:c1:3f:3b:6f:d5:5f:5d:
         99:20:9e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 30 04:39:02 2025 by rpki-client