This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/6vNiWGJsCX4DENtjblYdb8eV818.roa
File:                     6vNiWGJsCX4DENtjblYdb8eV818.roa (raw, json)
Hash identifier:          AnIQkshIVLoMZKKYE45/aCjoLxqi/2wWfr79R1DyCiM=
Subject key identifier:   EA:F3:62:58:62:6C:09:7E:03:10:DB:63:6E:56:1D:6F:C7:95:F3:5F
Certificate issuer:       /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial:       019AFB6805396EE34D9806293953B9F18B73
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/6vNiWGJsCX4DENtjblYdb8eV818.roa
Signing time:             Mon 08 Dec 2025 00:41:29 +0000
ROA not before:           Mon 08 Dec 2025 00:41:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     9009
IP address blocks:        45.12.206.0/24 maxlen: 24
                          45.12.207.0/24 maxlen: 24
                          45.66.132.0/24 maxlen: 24
                          45.85.3.0/24 maxlen: 24
                          45.144.240.0/24 maxlen: 24
                          45.144.241.0/24 maxlen: 24
                          45.144.242.0/24 maxlen: 24
                          45.144.243.0/24 maxlen: 24
                          81.90.190.0/24 maxlen: 24
                          185.126.119.0/24 maxlen: 24
                          185.126.139.0/24 maxlen: 24
                          185.160.25.0/24 maxlen: 24
                          2a0c:8a40:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Dec 2025 09:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:fb:68:05:39:6e:e3:4d:98:06:29:39:53:b9:f1:8b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
        Validity
            Not Before: Dec  8 00:41:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=eaf36258626c097e0310db636e561d6fc795f35f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:30:71:9b:9e:25:b5:26:09:eb:94:a5:69:08:
                    e7:1a:7a:e4:59:32:e1:d4:c8:01:8a:4a:e1:70:3f:
                    b0:c2:6b:a2:60:5c:98:8e:8d:6e:7d:bf:9d:e7:cc:
                    25:31:c6:dc:27:50:a0:33:aa:52:b0:7e:94:1c:74:
                    9e:6e:40:5b:de:56:85:89:38:4b:b8:15:6c:7b:1f:
                    82:e0:c0:66:65:e1:63:af:62:a9:e0:e5:2e:2a:71:
                    ea:3d:22:73:70:19:68:6b:81:3a:4b:8d:f3:4f:b8:
                    98:f1:1d:79:be:1e:7c:cd:be:26:52:97:7a:6f:88:
                    7c:b8:09:b6:57:e3:b3:ee:be:c6:98:73:4d:f9:30:
                    22:09:67:fe:39:50:6f:6a:ae:5f:ba:27:04:76:91:
                    0c:4d:7e:e4:8b:b2:11:09:a1:77:fe:af:3e:16:85:
                    1b:b5:ca:ee:1c:63:13:d6:ec:b6:6b:ad:84:ce:bc:
                    c3:ee:db:35:7d:a4:e4:32:e3:65:80:a1:71:40:e3:
                    96:3c:b6:c1:3b:9c:52:26:e8:3f:18:c8:8b:0e:64:
                    2b:cc:75:06:ca:94:67:f9:bf:01:3b:b6:cf:43:a0:
                    72:4e:bd:75:78:f2:5c:21:0d:d8:b4:5b:55:94:8f:
                    f2:d4:ea:d3:33:f9:3d:7b:2a:64:8c:e4:19:3d:f8:
                    0a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F3:62:58:62:6C:09:7E:03:10:DB:63:6E:56:1D:6F:C7:95:F3:5F
            X509v3 Authority Key Identifier:
                keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/6vNiWGJsCX4DENtjblYdb8eV818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.206.0/23
                  45.66.132.0/24
                  45.85.3.0/24
                  45.144.240.0/22
                  81.90.190.0/24
                  185.126.119.0/24
                  185.126.139.0/24
                  185.160.25.0/24
                IPv6:
                  2a0c:8a40:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:78:46:21:4b:89:ec:d7:d0:99:42:38:41:f2:79:c2:14:5d:
         9f:62:96:ff:37:ef:aa:2b:3a:98:c2:46:5b:56:1f:8f:5c:7f:
         3d:96:f4:31:e9:e1:19:21:97:55:1a:72:f2:fe:fd:99:9b:e3:
         68:8a:52:6e:b4:cb:a8:66:db:63:d2:5b:47:6e:3d:71:09:06:
         e7:89:15:f1:73:53:4e:40:33:4f:d4:98:7e:bf:1e:da:43:7f:
         e9:fb:6b:44:81:4f:95:8a:32:5f:16:f8:a7:7e:4e:45:2f:da:
         d4:98:3c:41:dd:54:b8:41:3d:1e:a7:26:83:07:64:38:34:33:
         c1:c4:e6:a0:bc:fa:23:46:3a:ee:e7:6f:21:7d:11:fe:2f:57:
         92:34:c9:f1:30:fb:78:91:2c:b8:ef:d8:ce:d6:1a:d8:b8:aa:
         4b:cf:12:5f:c1:30:26:69:1c:35:ad:19:03:7a:21:94:4e:3f:
         bf:22:94:fd:67:cf:03:e3:cf:9c:dc:b0:01:c1:68:b4:0c:28:
         0e:29:17:2e:30:4c:f6:2f:94:a8:cd:92:ba:ef:7e:28:a0:19:
         e3:f5:ab:ba:de:a6:b4:2e:61:67:42:8e:84:f0:db:6a:cc:1c:
         45:96:a8:ef:4c:d1:6d:22:d1:79:fa:36:b7:d3:d6:89:ea:a7:
         85:f7:76:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 16:53:36 2025 by rpki-client