This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/N9DvlYiEnTd-BLxQIuYKDLw6FhU.roa
File:                     N9DvlYiEnTd-BLxQIuYKDLw6FhU.roa (raw, json)
Hash identifier:          tCvNDpW1HBKDaylh0FNGJEWUNfFKsq9xnKyzzc+9A6I=
Subject key identifier:   37:D0:EF:95:88:84:9D:37:7E:04:BC:50:22:E6:0A:0C:BC:3A:16:15
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       019ADA50054E36D1660D5533543FA93D0216
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/N9DvlYiEnTd-BLxQIuYKDLw6FhU.roa
Signing time:             Mon 01 Dec 2025 14:27:48 +0000
ROA not before:           Mon 01 Dec 2025 14:27:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     30633
IP address blocks:        45.128.77.0/24 maxlen: 24
                          45.129.127.0/24 maxlen: 24
                          45.135.37.0/24 maxlen: 24
                          45.157.37.0/24 maxlen: 24
                          80.253.250.0/24 maxlen: 24
                          103.139.50.0/24 maxlen: 24
                          193.5.125.0/24 maxlen: 24
                          193.27.23.0/24 maxlen: 24
                          193.164.199.0/24 maxlen: 24
                          2a06:1184:33::/48 maxlen: 48
                          2a06:35c2::/32 maxlen: 32
                          2a06:b5c0::/29 maxlen: 29
                          2a0a:2d06:33::/48 maxlen: 48
                          2a0a:2d06:55::/48 maxlen: 48
                          2a0c:7886:33::/48 maxlen: 48
                          2a0e:1a80:2541::/48 maxlen: 48
                          2a0e:8880::/29 maxlen: 29
                          2a0e:c780::/32 maxlen: 32
                          2a0e:f201::/32 maxlen: 32
                          2a0e:f201:1::/48 maxlen: 48
                          2a0f:140::/29 maxlen: 29
                          2a0f:e00::/29 maxlen: 29
                          2a0f:1740::/29 maxlen: 29
                          2a0f:1e00:123::/48 maxlen: 48
                          2a0f:1e00:456::/48 maxlen: 48
                          2a0f:1e00:987::/48 maxlen: 48
                          2a0f:1e00:abc::/48 maxlen: 48
                          2a0f:1e00:def9::/48 maxlen: 48
                          2a0f:1e01:1::/48 maxlen: 48
                          2a0f:1e81:2::/48 maxlen: 48
                          2a0f:1e81:1293::/48 maxlen: 48
                          2a0f:1e81:4319::/48 maxlen: 48
                          2a0f:1e81:92e8::/48 maxlen: 48
                          2a0f:1e81:a3d0::/48 maxlen: 48
                          2a0f:1e81:cdae::/48 maxlen: 48
                          2a0f:2100::/29 maxlen: 29
                          2a0f:2d81::/32 maxlen: 32
                          2a0f:2e80::/29 maxlen: 29
                          2a0f:3045::/32 maxlen: 32
                          2a0f:3046:320::/48 maxlen: 48
                          2a0f:3240::/29 maxlen: 29
                          2a0f:3d84::/32 maxlen: 32
                          2a0f:7d02:1::/48 maxlen: 48
                          2a0f:8300::/29 maxlen: 29
                          2a0f:b400::/29 maxlen: 29
                          2a0f:c400::/29 maxlen: 29
                          2a0f:e1c6::/32 maxlen: 32
                          2a0f:e4c0::/29 maxlen: 29
                          2a10:32c0::/29 maxlen: 29
                          2a10:32c0::/32 maxlen: 32
                          2a10:32c1::/32 maxlen: 32
                          2a10:32c2::/32 maxlen: 32
                          2a10:32c4::/32 maxlen: 32
                          2a10:32c5::/32 maxlen: 32
                          2a10:32c6::/32 maxlen: 32
                          2a10:32c7::/32 maxlen: 32
                          2a10:3340::/29 maxlen: 29
                          2a10:35c0::/29 maxlen: 29
                          2a10:35c0::/32 maxlen: 32
                          2a10:35c1::/32 maxlen: 32
                          2a10:35c2::/32 maxlen: 32
                          2a10:35c3::/32 maxlen: 32
                          2a10:35c4::/32 maxlen: 32
                          2a10:35c5::/32 maxlen: 32
                          2a10:35c6::/32 maxlen: 32
                          2a10:35c7::/32 maxlen: 32
                          2a10:37c0::/29 maxlen: 29
                          2a10:4a00::/29 maxlen: 29
                          2a10:5400::/29 maxlen: 29
                          2a10:6500::/29 maxlen: 29
                          2a10:6d40::/29 maxlen: 29
                          2a10:7100::/29 maxlen: 29
                          2a10:7300::/29 maxlen: 29
                          2a10:7900::/29 maxlen: 29
                          2a10:7b00::/29 maxlen: 29
                          2a11:4c40::/29 maxlen: 29
                          2a11:5c80::/29 maxlen: 29
                          2a11:6d40::/29 maxlen: 29
                          2a11:fd80::/29 maxlen: 29
                          2a12:ac40::/32 maxlen: 32
                          2a12:ac41::/32 maxlen: 32
                          2a12:ba00::/29 maxlen: 29
                          2a12:f540::/29 maxlen: 29
                          2a13:18c0:1::/48 maxlen: 48
                          2a13:18c6:33::/48 maxlen: 48
                          2a13:18c6:55::/48 maxlen: 48
                          2a13:3080::/29 maxlen: 29
                          2a13:8c82:3::/48 maxlen: 48
                          2a13:8c84::/32 maxlen: 32
                          2a13:df00::/29 maxlen: 29
                          2a13:e101:2::/48 maxlen: 48
                          2a13:e102:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 19:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:da:50:05:4e:36:d1:66:0d:55:33:54:3f:a9:3d:02:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Dec  1 14:27:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=37d0ef9588849d377e04bc5022e60a0cbc3a1615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f9:8d:e4:2a:0d:64:e8:3d:cb:e4:94:b4:9a:
                    d3:91:c1:b4:d4:b5:5d:9c:bf:3d:d9:88:43:8a:93:
                    e8:03:f3:dd:06:b3:f0:74:6e:4f:cd:14:a7:4a:58:
                    46:32:da:f7:17:b6:d9:76:ef:8a:e7:f3:69:a0:6a:
                    77:8a:d3:83:31:b0:c1:8d:71:b8:bb:f6:9f:26:ed:
                    8f:52:ac:57:08:cf:3e:dd:ed:1c:7d:e1:41:c8:ac:
                    da:d3:e6:2c:d5:f6:17:82:40:37:44:43:de:5d:0b:
                    8c:92:5b:bc:c0:0c:b7:3a:0d:ee:83:85:a5:13:14:
                    17:07:51:c3:1f:a4:e4:87:e6:a7:7a:36:aa:d3:de:
                    f8:46:d3:26:cc:a4:84:3b:eb:d0:b0:67:50:9c:5d:
                    65:a8:4b:b0:09:50:77:42:27:77:15:bc:5e:3c:f2:
                    47:bb:99:41:bd:be:5f:5d:9b:1f:7d:5a:50:15:4b:
                    67:31:44:b1:de:4d:4a:58:4c:ac:3c:58:a8:3f:e5:
                    c5:df:a2:6c:04:d0:73:81:28:3e:a5:33:c4:ff:54:
                    8b:fa:dd:56:7c:72:83:72:a5:c4:1f:a6:a2:87:7e:
                    73:ba:c5:55:c2:b8:29:39:ba:1f:8b:3e:63:e3:53:
                    e7:f5:b2:f8:3c:13:d1:de:84:1f:e6:f9:67:ec:30:
                    9d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D0:EF:95:88:84:9D:37:7E:04:BC:50:22:E6:0A:0C:BC:3A:16:15
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/N9DvlYiEnTd-BLxQIuYKDLw6FhU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.128.77.0/24
                  45.129.127.0/24
                  45.135.37.0/24
                  45.157.37.0/24
                  80.253.250.0/24
                  103.139.50.0/24
                  193.5.125.0/24
                  193.27.23.0/24
                  193.164.199.0/24
                IPv6:
                  2a06:1184:33::/48
                  2a06:35c2::/32
                  2a06:b5c0::/29
                  2a0a:2d06:33::/48
                  2a0a:2d06:55::/48
                  2a0c:7886:33::/48
                  2a0e:1a80:2541::/48
                  2a0e:8880::/29
                  2a0e:c780::/32
                  2a0e:f201::/32
                  2a0f:140::/29
                  2a0f:e00::/29
                  2a0f:1740::/29
                  2a0f:1e00:123::/48
                  2a0f:1e00:456::/48
                  2a0f:1e00:987::/48
                  2a0f:1e00:abc::/48
                  2a0f:1e00:def9::/48
                  2a0f:1e01:1::/48
                  2a0f:1e81:2::/48
                  2a0f:1e81:1293::/48
                  2a0f:1e81:4319::/48
                  2a0f:1e81:92e8::/48
                  2a0f:1e81:a3d0::/48
                  2a0f:1e81:cdae::/48
                  2a0f:2100::/29
                  2a0f:2d81::/32
                  2a0f:2e80::/29
                  2a0f:3045::/32
                  2a0f:3046:320::/48
                  2a0f:3240::/29
                  2a0f:3d84::/32
                  2a0f:7d02:1::/48
                  2a0f:8300::/29
                  2a0f:b400::/29
                  2a0f:c400::/29
                  2a0f:e1c6::/32
                  2a0f:e4c0::/29
                  2a10:32c0::/29
                  2a10:3340::/29
                  2a10:35c0::/29
                  2a10:37c0::/29
                  2a10:4a00::/29
                  2a10:5400::/29
                  2a10:6500::/29
                  2a10:6d40::/29
                  2a10:7100::/29
                  2a10:7300::/29
                  2a10:7900::/29
                  2a10:7b00::/29
                  2a11:4c40::/29
                  2a11:5c80::/29
                  2a11:6d40::/29
                  2a11:fd80::/29
                  2a12:ac40::/31
                  2a12:ba00::/29
                  2a12:f540::/29
                  2a13:18c0:1::/48
                  2a13:18c6:33::/48
                  2a13:18c6:55::/48
                  2a13:3080::/29
                  2a13:8c82:3::/48
                  2a13:8c84::/32
                  2a13:df00::/29
                  2a13:e101:2::/48
                  2a13:e102:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:38:3a:d4:56:ab:ed:78:5a:64:76:1f:c2:16:02:a5:41:41:
         88:7d:7e:de:45:03:86:9c:2c:95:2b:95:8f:05:e8:b2:db:83:
         20:24:84:5d:f2:9f:36:24:2d:3d:cb:50:39:e5:9f:da:d2:11:
         ac:3e:e2:8b:a8:01:8f:5d:cd:9d:60:0c:6b:d1:8f:38:47:a2:
         5c:cf:ec:4e:3e:ee:40:a7:16:fe:38:23:e6:3d:1f:a1:47:60:
         30:60:e2:90:2b:c5:b3:39:37:2c:3b:6a:5d:31:c6:05:e6:37:
         33:4d:a5:83:e6:3e:46:08:0a:25:b1:e9:2f:96:ec:0b:bd:5f:
         c4:38:45:b2:89:f3:39:16:da:f2:37:00:60:33:4a:47:ab:2e:
         93:b7:fe:d7:50:cd:06:3d:67:8c:df:73:0c:6d:71:94:89:6c:
         d8:dd:0c:cd:62:30:6f:d7:63:24:74:ab:53:5e:7e:5b:84:7b:
         63:3e:a5:79:b0:f8:a2:41:52:bf:be:d0:e9:ec:7a:91:20:74:
         86:db:7e:14:78:ca:48:02:fd:55:0f:13:3a:75:95:c2:75:18:
         ac:f5:15:64:3e:ba:02:0b:de:c0:fa:93:b6:ba:4a:92:9b:72:
         a9:68:1e:e1:5b:8a:5c:11:1c:ef:c1:82:70:51:e3:01:74:c6:
         11:92:26:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 03:14:56 2025 by rpki-client