This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/qV6YZHTPQXWhgBdmg4M8ACy1Nzc.roa
File:                     qV6YZHTPQXWhgBdmg4M8ACy1Nzc.roa (raw, json)
Hash identifier:          rhOXifa+7nHd3nhrZbKRQ04m/9DDGuJ4vIHbxjYC8DU=
Subject key identifier:   A9:5E:98:64:74:CF:41:75:A1:80:17:66:83:83:3C:00:2C:B5:37:37
Certificate issuer:       /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial:       019C35D1446590E96B3146CA36C37B24CF7D
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/qV6YZHTPQXWhgBdmg4M8ACy1Nzc.roa
Signing time:             Sat 07 Feb 2026 01:57:12 +0000
ROA not before:           Sat 07 Feb 2026 01:57:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59711
IP address blocks:        5.149.248.0/23 maxlen: 23
                          5.149.254.0/23 maxlen: 23
                          77.83.196.0/24 maxlen: 24
                          77.83.197.0/24 maxlen: 24
                          77.83.198.0/24 maxlen: 24
                          79.141.164.0/23 maxlen: 23
                          79.141.174.0/23 maxlen: 23
                          80.75.215.0/24 maxlen: 24
                          85.158.108.0/24 maxlen: 24
                          85.158.109.0/24 maxlen: 24
                          85.158.110.0/24 maxlen: 24
                          89.44.80.0/24 maxlen: 24
                          89.150.40.0/24 maxlen: 24
                          89.150.45.0/24 maxlen: 24
                          89.150.48.0/24 maxlen: 24
                          89.150.57.0/24 maxlen: 24
                          91.193.18.0/24 maxlen: 24
                          91.220.8.0/24 maxlen: 24
                          94.126.224.0/24 maxlen: 24
                          94.126.225.0/24 maxlen: 24
                          94.126.226.0/24 maxlen: 24
                          185.40.86.0/24 maxlen: 24
                          185.80.52.0/23 maxlen: 23
                          185.80.54.0/23 maxlen: 23
                          185.81.114.0/23 maxlen: 23
                          185.81.114.0/24 maxlen: 24
                          185.81.115.0/24 maxlen: 24
                          185.104.192.0/24 maxlen: 24
                          185.104.193.0/24 maxlen: 24
                          185.104.194.0/24 maxlen: 24
                          185.117.88.0/23 maxlen: 23
                          185.117.90.0/23 maxlen: 23
                          185.123.102.0/24 maxlen: 24
                          185.174.133.0/24 maxlen: 24
                          185.174.135.0/24 maxlen: 24
                          185.221.222.0/24 maxlen: 24
                          185.221.223.0/24 maxlen: 24
                          185.223.57.0/24 maxlen: 24
                          185.235.137.0/24 maxlen: 24
                          185.235.138.0/24 maxlen: 24
                          185.253.116.0/24 maxlen: 24
                          185.253.117.0/24 maxlen: 24
                          185.253.118.0/24 maxlen: 24
                          193.42.36.0/24 maxlen: 24
                          193.42.39.0/24 maxlen: 24
                          193.111.208.0/24 maxlen: 24
                          194.33.28.0/24 maxlen: 24
                          195.95.155.0/24 maxlen: 24
                          2a01:8640::/48 maxlen: 48
                          2a01:8640:2::/48 maxlen: 48
                          2a01:8640:6::/48 maxlen: 48
                          2a01:8640:9::/48 maxlen: 48
                          2a01:8640:a::/48 maxlen: 48
                          2a01:8640:f::/48 maxlen: 48
                          2a01:8640:11::/48 maxlen: 48
                          2a01:8640:12::/48 maxlen: 48
                          2a01:8640:13::/48 maxlen: 48
                          2a01:8640:14::/48 maxlen: 48
                          2a01:8640:15::/48 maxlen: 48
                          2a01:8640:17::/48 maxlen: 48
                          2a01:8640:18::/48 maxlen: 48
                          2a01:8640:1a::/48 maxlen: 48
                          2a01:8640:1b::/48 maxlen: 48
                          2a01:8640:1c::/48 maxlen: 48
                          2a01:8640:1d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:35:d1:44:65:90:e9:6b:31:46:ca:36:c3:7b:24:cf:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
        Validity
            Not Before: Feb  7 01:57:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a95e986474cf4175a180176683833c002cb53737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:d0:b7:ec:4e:79:a4:3e:86:1a:3d:6f:22:
                    b3:f3:a2:f9:d8:be:7d:28:69:9c:1a:ce:19:3b:61:
                    9b:c2:55:b0:4e:6c:df:a3:74:21:ef:4a:85:02:0e:
                    a1:50:57:b2:3f:eb:82:68:68:26:fa:94:c8:d4:02:
                    08:1f:3c:63:ab:a2:7a:41:7e:2f:83:ba:ba:61:11:
                    05:a6:99:05:e2:5f:15:e4:2e:2e:1e:6d:96:37:53:
                    3c:5a:ef:db:3b:47:e8:b4:35:02:81:1a:87:22:21:
                    ce:aa:21:0b:a4:30:ea:56:c1:4c:62:ac:7b:78:f6:
                    d9:9a:bb:5b:8e:8f:f6:52:91:b5:8b:ab:af:e0:2d:
                    67:27:ef:d5:4f:8b:5f:99:98:66:23:6e:43:d9:93:
                    02:24:cc:8f:d1:15:f0:5e:06:66:84:d2:3f:2b:36:
                    9a:7d:29:e4:37:5f:e6:49:39:0b:16:27:41:9e:9f:
                    e0:b8:20:14:3d:b1:6e:42:2c:7d:c1:8a:4f:f6:dc:
                    90:43:95:81:38:f6:bd:55:2e:8c:33:70:72:c3:83:
                    57:46:67:a5:02:c7:43:9f:ae:37:a5:9a:bd:11:17:
                    0a:1c:a8:74:39:e6:ef:a9:98:93:54:12:11:1c:18:
                    d7:2e:1b:8d:46:4e:12:8f:46:83:bf:fc:15:88:cc:
                    db:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5E:98:64:74:CF:41:75:A1:80:17:66:83:83:3C:00:2C:B5:37:37
            X509v3 Authority Key Identifier:
                keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/qV6YZHTPQXWhgBdmg4M8ACy1Nzc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.149.248.0/23
                  5.149.254.0/23
                  77.83.196.0-77.83.198.255
                  79.141.164.0/23
                  79.141.174.0/23
                  80.75.215.0/24
                  85.158.108.0-85.158.110.255
                  89.44.80.0/24
                  89.150.40.0/24
                  89.150.45.0/24
                  89.150.48.0/24
                  89.150.57.0/24
                  91.193.18.0/24
                  91.220.8.0/24
                  94.126.224.0-94.126.226.255
                  185.40.86.0/24
                  185.80.52.0/22
                  185.81.114.0/23
                  185.104.192.0-185.104.194.255
                  185.117.88.0/22
                  185.123.102.0/24
                  185.174.133.0/24
                  185.174.135.0/24
                  185.221.222.0/23
                  185.223.57.0/24
                  185.235.137.0-185.235.138.255
                  185.253.116.0-185.253.118.255
                  193.42.36.0/24
                  193.42.39.0/24
                  193.111.208.0/24
                  194.33.28.0/24
                  195.95.155.0/24
                IPv6:
                  2a01:8640::/48
                  2a01:8640:2::/48
                  2a01:8640:6::/48
                  2a01:8640:9::-2a01:8640:a:ffff:ffff:ffff:ffff:ffff
                  2a01:8640:f::/48
                  2a01:8640:11::-2a01:8640:15:ffff:ffff:ffff:ffff:ffff
                  2a01:8640:17::-2a01:8640:18:ffff:ffff:ffff:ffff:ffff
                  2a01:8640:1a::-2a01:8640:1d:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         18:bc:9a:a0:e8:44:a7:73:b1:8c:46:fa:2e:a4:7f:e5:0e:bb:
         de:2e:a8:65:6a:f7:09:73:19:a0:03:36:95:81:79:0d:fb:a1:
         56:f5:c0:13:35:55:b9:85:f4:89:d1:3c:89:8c:1f:66:7f:7c:
         6c:16:7c:70:16:db:ea:59:0b:2d:20:32:89:84:96:52:7c:af:
         98:ca:60:2f:6b:27:b5:38:d0:6d:65:bd:b5:af:cd:fb:c5:7e:
         f7:b0:cc:f1:76:b6:f1:92:ca:10:4e:f3:43:24:84:02:c7:94:
         28:4d:00:aa:ed:93:56:f8:2e:29:4f:cb:a9:08:23:a1:1a:4c:
         5e:11:81:37:67:58:c6:16:6c:34:b4:7c:bd:17:a0:b5:b9:38:
         be:b4:05:78:5e:11:44:04:76:d4:93:65:a1:dd:f7:7f:51:b3:
         3e:a2:64:57:37:54:87:ce:49:bb:6b:49:f1:5c:4d:14:d3:11:
         40:eb:75:62:d1:0a:97:6a:12:14:f2:95:1b:1d:ae:9d:6a:04:
         e5:51:d0:56:c3:09:0a:30:23:2a:a2:40:1f:76:c2:73:d3:80:
         34:b6:b7:9c:82:46:db:35:19:94:3a:b3:48:51:02:0e:c5:62:
         24:4e:70:18:7b:47:52:c9:ec:28:0b:86:ec:eb:37:0f:ea:45:
         55:e8:ec:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:28:45 2026 by rpki-client