This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/6wN-em11oZHr27KVfU33gTiuaUQ.roa
File:                     6wN-em11oZHr27KVfU33gTiuaUQ.roa (raw, json)
Hash identifier:          vBVhkgeECPWyPvngYGoew50J3+wGWqoGU+JqY47xbAk=
Subject key identifier:   EB:03:7E:7A:6D:75:A1:91:EB:DB:B2:95:7D:4D:F7:81:38:AE:69:44
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       019BAF25E3C1CD1720633FEB7267A60B00DE
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/6wN-em11oZHr27KVfU33gTiuaUQ.roa
Signing time:             Sun 11 Jan 2026 22:20:54 +0000
ROA not before:           Sun 11 Jan 2026 22:20:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59504
IP address blocks:        45.142.208.0/24 maxlen: 24
                          45.142.209.0/24 maxlen: 24
                          45.142.211.0/24 maxlen: 24
                          45.151.136.0/22 maxlen: 22
                          45.151.136.0/24 maxlen: 24
                          45.151.137.0/24 maxlen: 24
                          80.76.40.0/24 maxlen: 24
                          81.22.193.0/24 maxlen: 24
                          83.171.240.0/24 maxlen: 24
                          84.54.37.0/24 maxlen: 24
                          84.54.39.0/24 maxlen: 24
                          95.215.108.0/23 maxlen: 23
                          95.215.110.0/23 maxlen: 23
                          130.49.180.0/24 maxlen: 24
                          185.42.26.0/24 maxlen: 24
                          185.118.64.0/22 maxlen: 22
                          185.118.64.0/24 maxlen: 24
                          185.118.65.0/24 maxlen: 24
                          185.118.66.0/23 maxlen: 23
                          185.118.66.0/24 maxlen: 24
                          185.118.67.0/24 maxlen: 24
                          185.156.176.0/22 maxlen: 22
                          185.156.176.0/24 maxlen: 24
                          185.156.177.0/24 maxlen: 24
                          185.156.178.0/23 maxlen: 23
                          185.156.178.0/24 maxlen: 24
                          185.156.179.0/24 maxlen: 24
                          185.177.113.0/24 maxlen: 24
                          185.177.115.0/24 maxlen: 24
                          185.197.72.0/24 maxlen: 24
                          185.197.73.0/24 maxlen: 24
                          185.220.32.0/24 maxlen: 24
                          185.220.33.0/24 maxlen: 24
                          185.220.34.0/24 maxlen: 24
                          185.220.35.0/24 maxlen: 24
                          185.230.140.0/23 maxlen: 23
                          185.230.142.0/24 maxlen: 24
                          185.246.116.0/24 maxlen: 24
                          185.246.117.0/24 maxlen: 24
                          185.246.119.0/24 maxlen: 24
                          185.254.188.0/24 maxlen: 24
                          185.254.189.0/24 maxlen: 24
                          185.254.190.0/24 maxlen: 24
                          193.38.232.0/23 maxlen: 23
                          193.38.234.0/24 maxlen: 24
                          193.150.70.0/24 maxlen: 24
                          194.26.210.0/24 maxlen: 24
                          194.113.104.0/24 maxlen: 24
                          194.113.104.114/32 maxlen: 32
                          194.113.107.0/24 maxlen: 24
                          2a05:fb41::/32 maxlen: 32
                          2a05:fb42::/32 maxlen: 32
                          2a05:fb44::/32 maxlen: 32
                          2a05:fb45::/32 maxlen: 32
                          2a07:14c0::/48 maxlen: 48
                          2a07:14c0:1::/48 maxlen: 48
                          2a07:14c0:1000::/36 maxlen: 36
                          2a07:14c0:3000::/36 maxlen: 36
                          2a07:14c0:4000::/36 maxlen: 36
                          2a07:14c0:5000::/36 maxlen: 36
                          2a07:14c0:6000::/36 maxlen: 36
                          2a07:14c0:d000::/36 maxlen: 36
                          2a07:14c1::/32 maxlen: 32
                          2a07:14c2::/32 maxlen: 32
                          2a07:14c6::/32 maxlen: 32
                          2a07:14c7::/32 maxlen: 32
                          2a0a:4780::/32 maxlen: 32
                          2a0a:4781::/32 maxlen: 32
                          2a0a:4782::/32 maxlen: 32
                          2a0a:4783::/32 maxlen: 32
                          2a0a:4784::/32 maxlen: 32
                          2a0a:4785::/32 maxlen: 32
                          2a0c:2103::/32 maxlen: 32
                          2a0c:5241::/32 maxlen: 32
                          2a0c:5245::/32 maxlen: 32
                          2a0c:5247:7000::/36 maxlen: 36
                          2a0c:5247:c000::/36 maxlen: 36
                          2a0c:5247:d000::/36 maxlen: 36
                          2a0c:5247:e000::/36 maxlen: 36
                          2a0c:5247:f000::/36 maxlen: 36
                          2a0d:60c0::/32 maxlen: 32
                          2a0d:60c1::/32 maxlen: 32
                          2a0d:60c3::/32 maxlen: 32
                          2a0d:7740::/32 maxlen: 32
                          2a0d:7747::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 13:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:af:25:e3:c1:cd:17:20:63:3f:eb:72:67:a6:0b:00:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: Jan 11 22:20:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eb037e7a6d75a191ebdbb2957d4df78138ae6944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:08:f3:43:dc:14:95:45:70:14:48:75:a1:0f:
                    c8:a5:c4:c6:84:c6:04:f0:a6:f4:dd:3f:a7:93:cc:
                    c0:28:c1:5e:57:7c:65:1e:0e:59:18:10:ba:c5:e9:
                    0d:ca:43:cf:85:b9:97:a5:8e:83:a0:cc:8f:ee:0e:
                    68:48:4d:23:1a:0b:7f:e8:3e:77:14:66:bc:51:9a:
                    2d:cd:97:a2:e1:99:32:90:40:a6:32:16:d8:71:fc:
                    a5:2d:50:1c:6b:cf:4d:fe:7b:f2:b2:0c:19:5a:1d:
                    43:d3:2f:92:c7:8c:19:06:f5:1f:33:6c:e6:4d:0d:
                    0a:01:49:f6:08:bc:68:ea:7a:08:9f:de:f7:35:c6:
                    f1:ff:01:24:13:87:ac:ec:78:6f:69:cf:c8:4a:cc:
                    91:cb:95:23:0f:35:9a:68:fd:50:d6:52:d9:03:03:
                    ee:d1:1b:14:a7:48:a5:e9:a0:d3:d9:b3:1f:7d:f9:
                    70:f4:05:a3:0e:6b:76:0b:cc:41:d4:0d:44:4f:f6:
                    1d:b7:06:98:9c:d0:80:cc:10:a9:b0:73:ec:5d:46:
                    17:fb:ed:ce:a5:64:f1:22:e0:b9:37:9d:c7:a7:c2:
                    f4:65:b6:0b:11:9b:74:97:80:7a:51:69:be:ee:a1:
                    47:d2:ac:6c:71:fc:56:62:a7:d6:1b:a3:a4:f6:0f:
                    ab:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:03:7E:7A:6D:75:A1:91:EB:DB:B2:95:7D:4D:F7:81:38:AE:69:44
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/6wN-em11oZHr27KVfU33gTiuaUQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.208.0/23
                  45.142.211.0/24
                  45.151.136.0/22
                  80.76.40.0/24
                  81.22.193.0/24
                  83.171.240.0/24
                  84.54.37.0/24
                  84.54.39.0/24
                  95.215.108.0/22
                  130.49.180.0/24
                  185.42.26.0/24
                  185.118.64.0/22
                  185.156.176.0/22
                  185.177.113.0/24
                  185.177.115.0/24
                  185.197.72.0/23
                  185.220.32.0/22
                  185.230.140.0-185.230.142.255
                  185.246.116.0/23
                  185.246.119.0/24
                  185.254.188.0-185.254.190.255
                  193.38.232.0-193.38.234.255
                  193.150.70.0/24
                  194.26.210.0/24
                  194.113.104.0/24
                  194.113.107.0/24
                IPv6:
                  2a05:fb41::-2a05:fb42:ffff:ffff:ffff:ffff:ffff:ffff
                  2a05:fb44::/31
                  2a07:14c0::/47
                  2a07:14c0:1000::/36
                  2a07:14c0:3000::-2a07:14c0:6fff:ffff:ffff:ffff:ffff:ffff
                  2a07:14c0:d000::/36
                  2a07:14c1::-2a07:14c2:ffff:ffff:ffff:ffff:ffff:ffff
                  2a07:14c6::/31
                  2a0a:4780::-2a0a:4785:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0c:2103::/32
                  2a0c:5241::/32
                  2a0c:5245::/32
                  2a0c:5247:7000::/36
                  2a0c:5247:c000::/34
                  2a0d:60c0::/31
                  2a0d:60c3::/32
                  2a0d:7740::/32
                  2a0d:7747::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:c6:e3:0c:0d:fd:50:b5:d2:06:be:b7:37:d2:51:d4:ab:64:
         34:e3:0c:22:9d:cd:ab:5d:43:71:00:a0:2e:df:42:b7:8e:f8:
         fb:91:2c:03:b1:e0:b9:f0:1f:7c:8d:dd:88:a6:c0:3f:d0:4e:
         1a:3c:cd:02:d2:e0:89:35:90:e4:ba:43:b0:86:93:79:87:ce:
         9b:57:aa:31:0a:66:8d:8f:0f:14:ee:16:33:7a:f0:f2:82:ec:
         41:83:d7:47:68:c9:0c:54:6b:47:38:5f:60:93:d7:95:5f:96:
         1c:55:bf:47:73:2a:ff:dd:21:28:bd:61:88:bc:ed:6c:a0:39:
         38:7c:c9:b2:20:fc:e4:2a:bc:15:3f:10:ed:10:56:cd:b9:d1:
         9e:26:7a:fe:03:a7:a4:89:50:24:a0:9c:4b:df:73:1b:b9:4b:
         1b:12:f4:c0:28:7d:1d:87:68:48:36:7e:74:c6:b6:1a:06:1f:
         81:66:5a:ab:5e:85:9e:b4:28:ee:a1:71:57:0a:95:50:48:da:
         7b:25:16:5b:fb:9e:07:47:18:52:c6:88:19:fe:25:11:e8:0d:
         ca:b1:59:88:e6:ce:c7:bc:4b:a5:75:16:94:26:5e:c1:a3:f3:
         31:68:d9:c3:20:86:8b:d2:be:44:ad:4f:c5:68:9e:9c:c6:b2:
         12:cb:57:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 17:19:16 2026 by rpki-client