This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/53WRRatK0NS4mx0ROVNmDY8dVCs.roa
File:                     53WRRatK0NS4mx0ROVNmDY8dVCs.roa (raw, json)
Hash identifier:          Iq8zT+97YsYd5tZzS6QjvtOCLRk3ES5dJ8Nr7js/ZLk=
Subject key identifier:   E7:75:91:45:AB:4A:D0:D4:B8:9B:1D:11:39:53:66:0D:8F:1D:54:2B
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       019B1304569A859FAEF56737293D1D977263
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/53WRRatK0NS4mx0ROVNmDY8dVCs.roa
Signing time:             Fri 12 Dec 2025 14:43:29 +0000
ROA not before:           Fri 12 Dec 2025 14:43:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     3741
IP address blocks:        87.83.53.0/24 maxlen: 24
                          195.172.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 15:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:13:04:56:9a:85:9f:ae:f5:67:37:29:3d:1d:97:72:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Dec 12 14:43:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e7759145ab4ad0d4b89b1d113953660d8f1d542b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9e:67:2e:5a:e8:ba:80:3b:22:89:4b:9d:8f:
                    6f:ff:3a:b3:ab:c5:1a:c0:58:74:36:ef:e7:62:ad:
                    65:f6:bb:46:fb:9e:5e:b6:02:81:21:3a:f9:bd:ca:
                    71:bc:83:53:ee:bc:14:86:d6:98:fd:bd:c6:2f:c5:
                    c8:f4:60:70:9e:b2:dc:33:c7:a2:cc:4f:0d:90:4f:
                    79:9e:8a:84:71:a6:f2:c9:0f:96:50:5d:a2:b5:b5:
                    57:c9:2b:08:9d:fc:d1:e4:80:dc:3d:35:f7:d8:15:
                    e5:a4:9e:a8:dc:16:42:7a:ae:be:64:d3:ba:7f:a5:
                    11:16:1f:41:c1:9f:cf:3f:87:d1:aa:a9:cf:67:99:
                    71:57:32:1c:19:82:6d:bd:bd:c3:62:87:09:18:20:
                    dd:e0:2d:e8:36:e1:83:77:45:a5:6a:55:9b:c9:36:
                    3c:5c:39:51:7f:7a:cf:8c:a3:dc:d2:69:f4:d3:11:
                    81:7d:79:96:8f:af:05:6f:ea:82:8c:d1:b4:7f:e2:
                    f2:5d:ea:e2:a9:fd:92:12:cc:79:1d:4b:67:66:93:
                    5e:0c:2d:eb:c7:e0:82:94:9e:47:f0:c6:c1:95:ba:
                    9b:6e:f2:a3:45:5d:fa:99:5a:d2:82:ea:82:70:c5:
                    2f:9c:6d:a4:88:a3:b7:33:b2:8d:00:e1:cb:09:6b:
                    44:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:75:91:45:AB:4A:D0:D4:B8:9B:1D:11:39:53:66:0D:8F:1D:54:2B
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/53WRRatK0NS4mx0ROVNmDY8dVCs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.83.53.0/24
                  195.172.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:82:ab:cb:3c:43:a2:92:bd:4e:c5:bf:ff:98:62:14:51:76:
         4f:00:59:ec:2e:ae:90:9c:b1:f0:4a:cd:8b:9d:97:12:94:52:
         b4:0b:c9:35:c6:05:c6:09:d1:3f:d4:ae:df:f6:d9:48:4d:41:
         b1:cf:9c:87:5d:61:76:28:4e:95:6d:d3:bd:cf:ba:f1:dd:fe:
         c3:ae:6c:22:41:1c:0d:2e:2d:d0:14:80:41:ba:c0:57:4b:73:
         fe:fa:4a:33:05:33:e1:dc:38:81:73:09:26:0a:bd:b4:7a:75:
         f0:8f:37:a3:64:e4:3e:7c:79:b9:bb:c2:ad:79:45:3c:9f:f0:
         9e:0f:1a:6c:9e:2f:d0:b2:93:39:0a:6f:c2:61:a1:f5:47:aa:
         a5:25:3d:2e:b8:1a:34:ae:19:0c:96:e5:d6:e9:7e:3e:57:e3:
         1f:c7:43:8d:66:57:de:5f:fe:bb:0a:67:b4:11:09:9e:9f:9b:
         98:f0:fe:af:d1:ab:45:00:03:c8:98:97:f7:03:b3:73:5a:26:
         32:fc:11:08:2d:fd:0b:b1:32:35:10:f2:d0:4d:f7:bc:55:36:
         b5:00:42:be:e3:5b:7e:bf:61:4f:7c:bd:f6:5a:a3:9a:a2:2b:
         97:08:28:af:da:8a:0e:51:ae:2e:7f:29:a1:95:81:1c:48:5e:
         15:f9:23:31
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZsTBFaahZ+u9Wc3KT0dl3JjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjUxMjEyMTQ0MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzc1OTE0NWFiNGFkMGQ0Yjg5YjFkMTEzOTUzNjYwZDhmMWQ1NDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ5nLlrouoA7IolLnY9v/zqzq8Ua
wFh0Nu/nYq1l9rtG+55etgKBITr5vcpxvINT7rwUhtaY/b3GL8XI9GBwnrLcM8ei
zE8NkE95noqEcabyyQ+WUF2itbVXySsInfzR5IDcPTX32BXlpJ6o3BZCeq6+ZNO6
f6URFh9BwZ/PP4fRqqnPZ5lxVzIcGYJtvb3DYocJGCDd4C3oNuGDd0WlalWbyTY8
XDlRf3rPjKPc0mn00xGBfXmWj68Fb+qCjNG0f+LyXeriqf2SEsx5HUtnZpNeDC3r
x+CClJ5H8MbBlbqbbvKjRV36mVrSguqCcMUvnG2kiKO3M7KNAOHLCWtEBQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOd1kUWrStDUuJsdETlTZg2PHVQrMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvNTNXUlJhdEswTlM0bXgwUk9WTm1EWThkVkNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV1M1AwQA
w6yQMA0GCSqGSIb3DQEBCwUAA4IBAQDYgqvLPEOikr1Oxb//mGIUUXZPAFnsLq6Q
nLHwSs2LnZcSlFK0C8k1xgXGCdE/1K7f9tlITUGxz5yHXWF2KE6VbdO9z7rx3f7D
rmwiQRwNLi3QFIBBusBXS3P++kozBTPh3DiBcwkmCr20enXwjzejZOQ+fHm5u8Kt
eUU8n/CeDxpsni/QspM5Cm/CYaH1R6qlJT0uuBo0rhkMluXW6X4+V+Mfx0ONZlfe
X/67Cme0EQmen5uY8P6v0atFAAPImJf3A7NzWiYy/BEILf0LsTI1EPLQTfe8VTa1
AEK+41t+v2FPfL32WqOaoiuXCCiv2ooOUa4ufymhlYEcSF4V+SMx
-----END CERTIFICATE-----
Generated at Mon Dec 15 19:46:19 2025 by rpki-client