This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/6SE0GUdovthwCJnBecSees-R98Q.roa
File:                     6SE0GUdovthwCJnBecSees-R98Q.roa (raw, json)
Hash identifier:          wuAooSaYMdUEo2LCRFAmaguJm9EhLDeuwm3V/FeDNYQ=
Subject key identifier:   E9:21:34:19:47:68:BE:D8:70:08:99:C1:79:C4:9E:7A:CF:91:F7:C4
Certificate issuer:       /CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Certificate serial:       019B30D34165EB899B05201B6A325A740B51
Authority key identifier: 51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/6SE0GUdovthwCJnBecSees-R98Q.roa
Signing time:             Thu 18 Dec 2025 09:38:29 +0000
ROA not before:           Thu 18 Dec 2025 09:38:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     200999
IP address blocks:        5.102.40.0/22 maxlen: 24
                          5.102.42.0/24 maxlen: 24
                          45.92.240.0/22 maxlen: 24
                          45.92.241.0/24 maxlen: 24
                          45.92.242.0/23 maxlen: 24
                          45.130.28.0/22 maxlen: 24
                          46.60.16.0/21 maxlen: 24
                          64.225.128.0/20 maxlen: 24
                          64.225.128.0/21 maxlen: 24
                          64.225.136.0/21 maxlen: 24
                          74.63.0.0/21 maxlen: 24
                          74.63.8.0/21 maxlen: 24
                          91.212.135.0/24 maxlen: 24
                          91.212.141.0/24 maxlen: 24
                          91.212.142.0/24 maxlen: 24
                          91.212.149.0/24 maxlen: 24
                          91.233.150.0/24 maxlen: 24
                          91.234.53.0/24 maxlen: 24
                          124.197.32.0/20 maxlen: 24
                          124.197.33.0/24 maxlen: 24
                          124.197.34.0/24 maxlen: 24
                          124.197.40.0/21 maxlen: 24
                          185.48.232.0/22 maxlen: 24
                          185.52.192.0/22 maxlen: 24
                          185.178.84.0/22 maxlen: 24
                          185.254.220.0/22 maxlen: 24
                          193.142.27.0/24 maxlen: 24
                          193.142.52.0/24 maxlen: 24
                          193.142.54.0/24 maxlen: 24
                          194.146.52.0/23 maxlen: 24
                          194.146.60.0/24 maxlen: 24
                          194.146.61.0/24 maxlen: 24
                          194.152.58.0/23 maxlen: 24
                          2a01:9aa0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 12:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:d3:41:65:eb:89:9b:05:20:1b:6a:32:5a:74:0b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
        Validity
            Not Before: Dec 18 09:38:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e92134194768bed8700899c179c49e7acf91f7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:53:1e:f2:aa:f5:eb:0c:f0:ca:dd:92:a3:0c:
                    e6:4b:e7:1d:9e:96:ce:c3:0a:92:dd:43:88:cc:6b:
                    b9:72:ab:7d:5d:8a:fc:14:92:9b:5b:01:e1:94:09:
                    ec:4a:10:b3:50:55:48:59:f7:30:1c:33:c0:da:07:
                    2d:73:29:87:5e:af:d8:eb:f9:7b:62:90:ef:8a:2d:
                    5c:28:b5:32:4f:dc:05:9a:22:b5:49:3a:a5:fa:b3:
                    6e:1a:4b:cf:8c:9a:c8:e5:55:f5:71:33:c2:ce:49:
                    e2:ce:b6:6d:4e:86:55:11:42:f5:73:b9:4b:3f:b8:
                    e9:26:65:73:0a:06:fb:2e:77:09:ed:b8:de:8b:87:
                    22:52:40:40:af:25:15:8a:ed:69:32:07:a9:4d:2e:
                    da:80:93:91:27:57:01:2f:1b:14:64:17:fb:4c:b0:
                    58:27:53:1c:12:a7:db:69:6d:8f:d0:04:af:7b:e1:
                    50:82:d5:35:c0:08:cc:ba:36:f9:2b:1e:72:3a:e7:
                    55:61:b5:b5:af:d9:33:ac:ef:f8:82:a4:46:36:1a:
                    f2:b7:e9:f6:14:1f:8e:b8:18:52:bb:ec:02:3e:89:
                    76:6c:0a:75:d7:00:f8:73:ff:b7:58:58:9f:cb:a0:
                    15:4f:13:26:4a:b0:1d:0b:82:1c:7e:f8:fa:b4:6c:
                    a9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:21:34:19:47:68:BE:D8:70:08:99:C1:79:C4:9E:7A:CF:91:F7:C4
            X509v3 Authority Key Identifier:
                keyid:51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/6SE0GUdovthwCJnBecSees-R98Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.102.40.0/22
                  45.92.240.0/22
                  45.130.28.0/22
                  46.60.16.0/21
                  64.225.128.0/20
                  74.63.0.0/20
                  91.212.135.0/24
                  91.212.141.0-91.212.142.255
                  91.212.149.0/24
                  91.233.150.0/24
                  91.234.53.0/24
                  124.197.32.0/20
                  185.48.232.0/22
                  185.52.192.0/22
                  185.178.84.0/22
                  185.254.220.0/22
                  193.142.27.0/24
                  193.142.52.0/24
                  193.142.54.0/24
                  194.146.52.0/23
                  194.146.60.0/23
                  194.152.58.0/23
                IPv6:
                  2a01:9aa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:80:3c:ca:92:6a:09:7e:cb:c7:a0:a8:04:e5:64:a7:16:b7:
         d2:5a:36:a2:82:4d:ba:0a:c6:0a:cd:90:95:aa:85:2e:ec:ec:
         d0:33:1e:d5:df:66:3a:5f:14:61:ac:12:6c:b7:28:87:0b:02:
         54:8f:35:6d:6f:75:3b:86:1f:22:7d:45:e6:26:ff:b7:43:f5:
         c9:c5:dd:50:77:03:17:51:a3:7b:11:4f:81:10:34:22:80:3a:
         83:3e:bc:0c:e3:1e:46:b8:eb:e9:5d:a0:31:a5:30:27:2a:d3:
         65:d2:92:25:5b:d0:80:f2:bc:ae:ef:0d:ba:dc:04:be:f3:bf:
         cc:8f:40:6e:26:ed:10:83:50:96:fc:9f:ab:c6:1f:de:ba:a8:
         68:f0:15:40:80:24:67:e7:c2:d7:73:92:cc:a5:f1:ca:df:2a:
         fd:b0:24:a2:86:73:6d:a7:19:99:72:82:a5:1c:05:65:e6:3b:
         50:83:ec:ed:be:e3:0d:be:42:de:34:cf:50:5d:94:a0:f2:c3:
         fa:5d:b7:77:00:b7:ff:34:40:4f:79:05:ee:5b:0d:57:5e:c2:
         7c:7b:f2:84:e5:d8:3a:d7:59:d3:a8:7a:30:8b:92:5f:d2:2f:
         2c:20:f5:22:a7:a3:9f:a3:9c:3a:fd:29:67:8a:cd:46:85:8d:
         62:d8:a3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:16:23 2025 by rpki-client