This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/PE77Z5wen-eVZ16iGf2_1c1Jaws.roa
File:                     PE77Z5wen-eVZ16iGf2_1c1Jaws.roa (raw, json)
Hash identifier:          h7zUrN0KBvEcmYXd1dCIRMPxZTqT4501CRk4u67n9zo=
Subject key identifier:   3C:4E:FB:67:9C:1E:9F:E7:95:67:5E:A2:19:FD:BF:D5:CD:49:6B:0B
Certificate issuer:       /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial:       019B7910F42342D1E5ABADBF322D074584B2
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/PE77Z5wen-eVZ16iGf2_1c1Jaws.roa
Signing time:             Thu 01 Jan 2026 10:18:32 +0000
ROA not before:           Thu 01 Jan 2026 10:18:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203020
IP address blocks:        5.183.94.0/24 maxlen: 24
                          45.82.223.0/24 maxlen: 24
                          85.208.32.0/23 maxlen: 24
                          85.208.34.0/23 maxlen: 24
                          185.244.8.0/23 maxlen: 24
                          185.244.11.0/24 maxlen: 24
                          193.42.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:f4:23:42:d1:e5:ab:ad:bf:32:2d:07:45:84:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
        Validity
            Not Before: Jan  1 10:18:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3c4efb679c1e9fe795675ea219fdbfd5cd496b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9c:2b:64:eb:fa:03:c7:3c:cf:14:a9:63:34:
                    5a:4b:e9:06:b6:9d:b9:eb:d2:a5:98:b9:c7:40:ca:
                    c8:0f:3d:f8:02:62:b0:ed:ef:97:73:b2:bf:89:d6:
                    f1:04:e9:49:0f:c1:b4:ba:45:f0:d6:ab:2f:fe:a2:
                    32:94:22:19:6b:85:59:72:5f:88:37:0a:68:4a:bc:
                    e5:3d:05:bd:4d:bd:fc:68:99:fa:cf:ec:c7:7c:eb:
                    26:d2:26:81:71:0e:0c:12:14:8d:3a:62:81:39:d9:
                    0e:52:a1:16:ce:9d:31:df:ed:04:54:30:42:50:43:
                    9b:16:ef:3c:63:c7:70:2c:dc:ad:48:60:b5:d8:5d:
                    83:04:0d:b4:59:26:24:fd:5b:e0:57:d1:50:9f:28:
                    e5:64:dd:10:e6:4a:d1:fb:74:a2:3e:59:52:c1:41:
                    cd:78:69:27:c5:cb:f4:88:aa:0e:e1:ad:4c:ce:c9:
                    cb:80:8b:9d:92:f1:88:51:ab:e2:23:60:fc:85:ca:
                    cb:ca:f3:a6:de:37:ff:c6:0a:4e:74:d8:51:f2:92:
                    78:11:07:16:15:fe:27:f2:5b:17:48:19:04:35:6f:
                    fb:1f:2e:1c:ee:46:cd:7f:51:0b:c6:97:4c:08:e4:
                    72:c5:78:d4:5a:55:cd:35:2e:21:41:fc:6e:06:cf:
                    11:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4E:FB:67:9C:1E:9F:E7:95:67:5E:A2:19:FD:BF:D5:CD:49:6B:0B
            X509v3 Authority Key Identifier:
                keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/PE77Z5wen-eVZ16iGf2_1c1Jaws.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.94.0/24
                  45.82.223.0/24
                  85.208.32.0/22
                  185.244.8.0/23
                  185.244.11.0/24
                  193.42.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:e7:1d:fc:2a:ea:a0:c6:9b:1c:e8:6e:4f:2c:88:7e:d9:06:
         71:20:a1:b1:ed:92:e1:fb:58:ad:ee:87:76:1d:5c:37:82:95:
         b8:3c:e7:aa:15:57:0d:87:d3:25:78:39:d7:0a:3d:60:bd:05:
         13:1e:57:ef:0b:3a:aa:0d:b5:af:e6:ec:bc:36:33:e5:91:74:
         14:e2:7a:73:09:20:32:d2:74:17:f3:e4:12:2f:c8:29:2f:9f:
         6e:dc:67:cb:16:bf:39:89:8c:ef:b1:0a:1e:45:7d:32:43:ba:
         fa:87:c6:3c:be:c6:d4:40:92:3e:f9:51:11:05:e8:1b:98:07:
         b3:dd:63:3e:75:47:13:ca:b8:8b:ea:0a:91:83:f0:d5:df:a9:
         40:dc:68:da:0d:95:78:7d:2b:ac:a8:cf:c4:3f:8e:42:26:1c:
         01:8d:16:67:db:42:1c:3a:56:13:85:b9:fe:52:2e:de:c1:ec:
         07:b7:80:04:9b:da:0b:e8:97:bf:bf:03:db:d3:8e:d6:12:c2:
         6b:fb:c7:7d:69:e2:a5:9e:d3:56:3c:19:8c:5d:c4:08:81:56:
         31:af:6b:a7:50:2c:9f:4a:59:85:96:11:e9:71:95:03:84:c3:
         0e:c5:90:65:e1:d6:d0:1c:80:cd:fb:52:4f:9c:ee:db:47:9d:
         2f:dd:f3:0c
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZt5EPQjQtHlq62/Mi0HRYSyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj
YjUzZDYwHhcNMjYwMTAxMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzRlZmI2NzljMWU5ZmU3OTU2NzVlYTIxOWZkYmZkNWNkNDk2YjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JwrZOv6A8c8zxSpYzRaS+kGtp25
69KlmLnHQMrIDz34AmKw7e+Xc7K/idbxBOlJD8G0ukXw1qsv/qIylCIZa4VZcl+I
NwpoSrzlPQW9Tb38aJn6z+zHfOsm0iaBcQ4MEhSNOmKBOdkOUqEWzp0x3+0EVDBC
UEObFu88Y8dwLNytSGC12F2DBA20WSYk/VvgV9FQnyjlZN0Q5krR+3SiPllSwUHN
eGknxcv0iKoO4a1MzsnLgIudkvGIUaviI2D8hcrLyvOm3jf/xgpOdNhR8pJ4EQcW
Ff4n8lsXSBkENW/7Hy4c7kbNf1ELxpdMCORyxXjUWlXNNS4hQfxuBs8RQQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFDxO+2ecHp/nlWdeohn9v9XNSWsLMB8GA1UdIwQY
MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt
NDY5MGEwMDcxNDFmLzEvUEU3N1o1d2VuLWVWWjE2aUdmMl8xYzFKYXdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm
LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQABbdeAwQA
LVLfAwQCVdAgAwQBufQIAwQAufQLAwQBwSriMA0GCSqGSIb3DQEBCwUAA4IBAQAQ
5x38Kuqgxpsc6G5PLIh+2QZxIKGx7ZLh+1it7od2HVw3gpW4POeqFVcNh9MleDnX
Cj1gvQUTHlfvCzqqDbWv5uy8NjPlkXQU4npzCSAy0nQX8+QSL8gpL59u3GfLFr85
iYzvsQoeRX0yQ7r6h8Y8vsbUQJI++VERBegbmAez3WM+dUcTyriL6gqRg/DV36lA
3GjaDZV4fSusqM/EP45CJhwBjRZn20IcOlYThbn+Ui7ewewHt4AEm9oL6Je/vwPb
047WEsJr+8d9aeKlntNWPBmMXcQIgVYxr2unUCyfSlmFlhHpcZUDhMMOxZBl4dbQ
HIDN+1JPnO7bR50v3fMM
-----END CERTIFICATE-----
Generated at Sun Jan 18 10:45:39 2026 by rpki-client