This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/uNcW8oAJty7QJ3rdwrvZtidPJb4.roa
File:                     uNcW8oAJty7QJ3rdwrvZtidPJb4.roa (raw, json)
Hash identifier:          Va2QYZ3dyGhdpIjzyxbKQa1lFsVqCxw/WfEiLCdpGjc=
Subject key identifier:   B8:D7:16:F2:80:09:B7:2E:D0:27:7A:DD:C2:BB:D9:B6:27:4F:25:BE
Certificate issuer:       /CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Certificate serial:       019B0CCE46BAC948B17E13D0BCCC064E3966
Authority key identifier: 7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/uNcW8oAJty7QJ3rdwrvZtidPJb4.roa
Signing time:             Thu 11 Dec 2025 09:46:43 +0000
ROA not before:           Thu 11 Dec 2025 09:46:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     211261
IP address blocks:        92.246.82.0/24 maxlen: 24
                          92.246.83.0/24 maxlen: 24
                          103.226.192.0/24 maxlen: 24
                          103.226.194.0/23 maxlen: 23
                          103.229.168.0/24 maxlen: 24
                          103.229.170.0/24 maxlen: 24
                          103.229.171.0/24 maxlen: 24
                          185.117.46.0/24 maxlen: 24
                          185.117.47.0/24 maxlen: 24
                          185.145.68.0/24 maxlen: 24
                          185.145.69.0/24 maxlen: 24
                          185.145.70.0/24 maxlen: 24
                          185.145.71.0/24 maxlen: 24
                          185.167.181.0/24 maxlen: 24
                          185.201.4.0/24 maxlen: 24
                          185.204.200.0/24 maxlen: 24
                          185.204.201.0/24 maxlen: 24
                          185.204.203.0/24 maxlen: 24
                          185.223.176.0/24 maxlen: 24
                          185.223.177.0/24 maxlen: 24
                          185.223.179.0/24 maxlen: 24
                          185.237.212.0/24 maxlen: 24
                          185.237.213.0/24 maxlen: 24
                          185.237.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 12:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0c:ce:46:ba:c9:48:b1:7e:13:d0:bc:cc:06:4e:39:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
        Validity
            Not Before: Dec 11 09:46:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b8d716f28009b72ed0277addc2bbd9b6274f25be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7f:68:68:57:c8:db:40:b4:a1:0a:5d:f6:96:
                    02:d4:8c:13:35:11:ee:97:64:cc:af:26:98:ff:8a:
                    26:c1:8d:1c:80:2f:85:b9:6a:63:5a:1b:16:5e:72:
                    40:db:1d:4c:67:c1:5b:e4:49:29:b6:8a:0c:a7:15:
                    71:a5:b1:74:98:89:df:8a:81:c4:42:7a:66:b2:c3:
                    ee:73:7c:cd:96:46:96:60:73:c2:66:72:e7:7d:5b:
                    bc:b8:41:0b:8e:48:0c:21:c6:05:c9:c1:ff:41:26:
                    0e:95:57:79:e9:6b:97:d7:1f:1c:20:9d:6f:1b:fa:
                    b6:26:b3:65:dd:e8:f1:ef:09:54:d1:2f:79:96:bc:
                    89:eb:a1:19:01:db:73:2b:78:0f:6d:0b:d9:37:ba:
                    b9:7c:e4:1a:37:26:e4:a1:f5:6a:2d:c9:c8:ee:e8:
                    55:59:34:c2:f6:58:5e:39:86:2e:16:e6:74:66:91:
                    82:be:47:7b:72:72:05:28:5a:97:cd:7d:d9:09:63:
                    23:e4:90:41:d5:c9:ac:86:d9:d9:a4:d0:44:f8:42:
                    1d:1c:5b:72:8f:26:93:2f:b2:31:73:2c:bc:25:d5:
                    7b:85:02:26:87:1f:94:b6:ca:89:c9:69:36:6e:9a:
                    23:c3:a4:bc:ae:ec:58:97:7e:ed:1f:1e:3a:ad:0c:
                    ad:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D7:16:F2:80:09:B7:2E:D0:27:7A:DD:C2:BB:D9:B6:27:4F:25:BE
            X509v3 Authority Key Identifier:
                keyid:7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/uNcW8oAJty7QJ3rdwrvZtidPJb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.246.82.0/23
                  103.226.192.0/24
                  103.226.194.0/23
                  103.229.168.0/24
                  103.229.170.0/23
                  185.117.46.0/23
                  185.145.68.0/22
                  185.167.181.0/24
                  185.201.4.0/24
                  185.204.200.0/23
                  185.204.203.0/24
                  185.223.176.0/23
                  185.223.179.0/24
                  185.237.212.0-185.237.214.255

    Signature Algorithm: sha256WithRSAEncryption
         6b:85:de:d4:39:dd:d9:3c:b3:2c:89:65:97:f2:07:11:23:f0:
         97:f4:ea:4a:3e:c1:9a:8f:f0:bd:4b:4f:f5:f2:c2:31:a1:4e:
         7b:b2:84:18:08:f5:2d:ac:6a:96:33:cf:65:0d:9c:9a:c6:ec:
         2c:60:fe:8a:3b:b6:08:f3:fe:39:55:31:b6:cd:40:2b:6a:fa:
         67:7d:df:d0:4c:4a:70:ee:20:03:db:8a:2f:10:2e:16:0c:f7:
         cc:72:09:37:60:1a:0e:45:d2:fe:0f:7c:d2:ce:21:bb:4f:e3:
         16:a4:d3:5f:a4:88:78:6f:1e:ed:1b:0c:24:4a:78:07:e9:e5:
         f5:a7:5c:af:88:2f:7a:fb:76:8f:8d:07:5f:f6:15:3b:c3:11:
         9e:94:6f:2f:a1:c2:f2:25:6d:4c:74:90:ef:80:f2:6d:eb:f7:
         9f:eb:15:5d:69:e7:61:81:23:e4:f9:d6:da:05:4a:3a:78:60:
         c3:44:ca:96:12:35:f0:c8:a9:2b:f5:4d:86:88:1c:92:3b:3f:
         8d:03:26:f7:38:0c:e1:6f:25:d7:88:78:1c:67:e5:dc:4d:72:
         2b:98:7c:98:ac:e3:62:af:b8:8d:a1:bf:85:91:9c:f9:f8:08:
         a1:d3:c4:ca:25:78:a9:45:fb:3f:1e:63:f6:70:e4:6f:77:6a:
         be:70:68:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 19:42:50 2025 by rpki-client