This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/J-vxkqVlMbRDT8b5oTyV10wqk9c.roa
File:                     J-vxkqVlMbRDT8b5oTyV10wqk9c.roa (raw, json)
Hash identifier:          hwGlMVqWOEk3sg39v14bIdu9rIL0O67wVHeY+xkcOlE=
Subject key identifier:   27:EB:F1:92:A5:65:31:B4:43:4F:C6:F9:A1:3C:95:D7:4C:2A:93:D7
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       019B78A241B191AACC7DFDDA362041E338F8
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/J-vxkqVlMbRDT8b5oTyV10wqk9c.roa
Signing time:             Thu 01 Jan 2026 08:17:37 +0000
ROA not before:           Thu 01 Jan 2026 08:17:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9009
IP address blocks:        79.121.188.0/23 maxlen: 24
                          79.121.194.0/23 maxlen: 24
                          79.121.208.0/23 maxlen: 24
                          79.121.222.0/23 maxlen: 24
                          79.121.226.0/23 maxlen: 24
                          79.121.238.0/23 maxlen: 24
                          92.244.162.0/23 maxlen: 24
                          92.244.164.0/23 maxlen: 24
                          92.244.166.0/23 maxlen: 24
                          92.244.168.0/23 maxlen: 24
                          92.244.170.0/23 maxlen: 24
                          92.244.172.0/23 maxlen: 24
                          93.152.0.0/23 maxlen: 24
                          93.152.10.0/23 maxlen: 24
                          93.152.12.0/22 maxlen: 24
                          93.152.18.0/24 maxlen: 24
                          93.152.21.0/24 maxlen: 24
                          93.152.48.0/22 maxlen: 24
                          93.152.64.0/22 maxlen: 24
                          93.152.92.0/24 maxlen: 24
                          93.152.116.0/22 maxlen: 24
                          94.185.130.0/23 maxlen: 24
                          94.185.132.0/23 maxlen: 24
                          94.185.136.0/23 maxlen: 24
                          94.185.142.0/23 maxlen: 24
                          94.185.148.0/23 maxlen: 24
                          94.185.152.0/22 maxlen: 24
                          94.185.152.0/23 maxlen: 24
                          94.185.154.0/23 maxlen: 24
                          94.185.168.0/22 maxlen: 24
                          94.185.168.0/23 maxlen: 24
                          94.185.170.0/23 maxlen: 24
                          94.185.172.0/23 maxlen: 24
                          94.185.180.0/23 maxlen: 24
                          94.185.186.0/23 maxlen: 24
                          94.185.192.0/22 maxlen: 24
                          94.185.192.0/23 maxlen: 24
                          94.185.194.0/23 maxlen: 24
                          94.185.196.0/23 maxlen: 24
                          94.185.200.0/22 maxlen: 24
                          94.185.200.0/23 maxlen: 24
                          94.185.202.0/23 maxlen: 24
                          94.185.204.0/23 maxlen: 24
                          94.185.214.0/23 maxlen: 24
                          94.185.216.0/23 maxlen: 24
                          94.185.220.0/22 maxlen: 24
                          94.185.220.0/23 maxlen: 24
                          94.185.222.0/23 maxlen: 24
                          94.185.230.0/23 maxlen: 24
                          94.185.232.0/23 maxlen: 24
                          95.177.3.0/24 maxlen: 24
                          95.177.5.0/24 maxlen: 24
                          95.177.8.0/23 maxlen: 24
                          95.177.13.0/24 maxlen: 24
                          95.177.54.0/23 maxlen: 24
                          95.177.72.0/23 maxlen: 24
                          109.174.128.0/22 maxlen: 24
                          109.174.128.0/23 maxlen: 24
                          109.174.130.0/23 maxlen: 24
                          109.174.134.0/23 maxlen: 24
                          109.174.136.0/23 maxlen: 24
                          109.174.140.0/22 maxlen: 24
                          109.174.140.0/23 maxlen: 24
                          109.174.142.0/23 maxlen: 24
                          109.174.152.0/23 maxlen: 24
                          109.174.160.0/22 maxlen: 24
                          109.174.160.0/23 maxlen: 24
                          109.174.162.0/23 maxlen: 24
                          109.174.168.0/23 maxlen: 24
                          109.174.172.0/23 maxlen: 24
                          109.174.250.0/23 maxlen: 24
                          109.174.252.0/23 maxlen: 24
                          109.174.254.0/23 maxlen: 24
                          109.204.0.0/22 maxlen: 24
                          109.204.16.0/22 maxlen: 24
                          109.204.21.0/24 maxlen: 24
                          109.204.24.0/22 maxlen: 24
                          109.204.29.0/24 maxlen: 24
                          109.204.41.0/24 maxlen: 24
                          109.204.45.0/24 maxlen: 24
                          109.204.51.0/24 maxlen: 24
                          109.204.54.0/24 maxlen: 24
                          109.204.58.0/24 maxlen: 24
                          109.204.96.0/22 maxlen: 24
                          109.204.112.0/24 maxlen: 24
                          109.204.117.0/24 maxlen: 24
                          109.204.118.0/24 maxlen: 24
                          109.204.121.0/24 maxlen: 24
                          109.204.124.0/23 maxlen: 24
                          195.40.18.0/23 maxlen: 24
                          195.40.28.0/23 maxlen: 24
                          195.40.96.0/23 maxlen: 24
                          195.40.108.0/23 maxlen: 24
                          195.40.162.0/23 maxlen: 24
                          195.172.96.0/23 maxlen: 24
                          195.172.100.0/23 maxlen: 24
                          195.172.104.0/23 maxlen: 24
                          195.172.192.0/23 maxlen: 24
                          195.172.198.0/23 maxlen: 24
                          195.172.202.0/23 maxlen: 24
                          212.134.11.0/24 maxlen: 24
                          212.135.0.0/24 maxlen: 24
                          212.135.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 01:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:41:b1:91:aa:cc:7d:fd:da:36:20:41:e3:38:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Jan  1 08:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=27ebf192a56531b4434fc6f9a13c95d74c2a93d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:17:c2:7d:b7:8f:19:ad:d2:3e:7e:71:61:db:
                    92:bb:63:0b:e5:01:ef:b6:54:02:bb:05:00:9c:7c:
                    1c:19:77:fc:11:26:28:0f:2f:b3:66:1e:3e:20:18:
                    5d:18:12:c7:08:eb:8f:55:1b:b9:67:f6:d2:20:0f:
                    7a:22:e0:77:2b:29:bb:79:2f:ed:ac:39:b3:d1:e7:
                    53:da:3e:cf:75:f1:53:30:96:4a:e0:de:81:c8:51:
                    4a:ea:81:56:07:cf:00:9e:81:33:de:c9:55:6f:a9:
                    ef:ba:4b:49:fd:81:87:c0:e8:b0:21:01:8a:22:f6:
                    d9:bf:99:01:5b:f8:d0:04:02:15:78:bf:2b:62:4c:
                    18:59:06:39:1e:05:77:10:e9:ea:8f:13:13:cd:23:
                    ff:72:a4:12:c3:68:33:9b:ba:0b:cb:29:b9:65:fe:
                    5c:75:1f:f7:75:ba:ad:c5:f0:bd:48:19:ae:ad:44:
                    39:fb:ba:0a:ce:e1:16:1e:d9:64:c5:e8:9b:a9:39:
                    73:7d:eb:45:9a:ec:9a:f4:d7:ec:83:ef:ce:70:b2:
                    49:bd:98:24:99:e2:93:cb:77:16:ec:38:f7:54:6f:
                    4a:40:0a:f3:b6:6a:9c:74:05:3b:8c:5f:c5:2c:4f:
                    35:8c:51:97:57:a0:2a:79:56:40:d2:b0:32:1a:5a:
                    be:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EB:F1:92:A5:65:31:B4:43:4F:C6:F9:A1:3C:95:D7:4C:2A:93:D7
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/J-vxkqVlMbRDT8b5oTyV10wqk9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.121.188.0/23
                  79.121.194.0/23
                  79.121.208.0/23
                  79.121.222.0/23
                  79.121.226.0/23
                  79.121.238.0/23
                  92.244.162.0-92.244.173.255
                  93.152.0.0/23
                  93.152.10.0-93.152.15.255
                  93.152.18.0/24
                  93.152.21.0/24
                  93.152.48.0/22
                  93.152.64.0/22
                  93.152.92.0/24
                  93.152.116.0/22
                  94.185.130.0-94.185.133.255
                  94.185.136.0/23
                  94.185.142.0/23
                  94.185.148.0/23
                  94.185.152.0/22
                  94.185.168.0-94.185.173.255
                  94.185.180.0/23
                  94.185.186.0/23
                  94.185.192.0-94.185.197.255
                  94.185.200.0-94.185.205.255
                  94.185.214.0-94.185.217.255
                  94.185.220.0/22
                  94.185.230.0-94.185.233.255
                  95.177.3.0/24
                  95.177.5.0/24
                  95.177.8.0/23
                  95.177.13.0/24
                  95.177.54.0/23
                  95.177.72.0/23
                  109.174.128.0/22
                  109.174.134.0-109.174.137.255
                  109.174.140.0/22
                  109.174.152.0/23
                  109.174.160.0/22
                  109.174.168.0/23
                  109.174.172.0/23
                  109.174.250.0-109.174.255.255
                  109.204.0.0/22
                  109.204.16.0/22
                  109.204.21.0/24
                  109.204.24.0/22
                  109.204.29.0/24
                  109.204.41.0/24
                  109.204.45.0/24
                  109.204.51.0/24
                  109.204.54.0/24
                  109.204.58.0/24
                  109.204.96.0/22
                  109.204.112.0/24
                  109.204.117.0-109.204.118.255
                  109.204.121.0/24
                  109.204.124.0/23
                  195.40.18.0/23
                  195.40.28.0/23
                  195.40.96.0/23
                  195.40.108.0/23
                  195.40.162.0/23
                  195.172.96.0/23
                  195.172.100.0/23
                  195.172.104.0/23
                  195.172.192.0/23
                  195.172.198.0/23
                  195.172.202.0/23
                  212.134.11.0/24
                  212.135.0.0/24
                  212.135.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:0a:d1:f5:ff:cf:94:89:bb:73:a6:ac:2a:f0:fc:9d:8f:e4:
         8b:c0:10:08:76:30:06:f5:da:66:71:b7:29:ac:31:d8:d4:bf:
         2b:8e:ef:aa:97:88:ad:9b:e2:1b:18:9b:9c:1c:f7:a5:b3:5b:
         42:51:7a:08:ea:8d:a3:4e:cb:42:0b:d2:12:4b:5d:cc:c7:57:
         64:04:a9:d1:4b:c1:66:a0:b4:ba:cf:35:a0:53:81:b1:e2:41:
         e2:2a:f6:71:1f:6e:88:b3:c2:5d:e1:e1:7f:5d:32:43:7e:ad:
         f3:6c:94:d0:aa:c3:38:9d:bd:4a:0f:b4:eb:a9:d2:07:ba:cb:
         52:02:d8:d0:d4:03:0c:6f:a4:ef:4f:28:7c:0e:ab:4d:d5:15:
         49:e7:54:33:02:e3:18:81:8b:b9:ab:ab:c8:31:73:85:53:15:
         75:67:82:44:de:8d:b8:32:21:81:6e:90:43:ea:3c:6d:c7:15:
         35:5b:e9:24:b2:1b:6b:4d:f8:27:3c:4b:c0:45:a5:23:37:85:
         1d:2b:79:48:37:16:9a:33:ab:f2:e8:1f:db:e6:8b:a4:9c:1d:
         61:df:18:61:20:14:4c:74:53:de:30:e4:07:f7:f6:20:2c:05:
         61:bf:ea:78:e1:22:48:c2:62:b6:7a:37:a5:b4:b3:57:e5:67:
         25:66:06:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:54:55 2026 by rpki-client