This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/V6MhSl0Nrd7IbSPP6sogh_K6LdA.roa
File:                     V6MhSl0Nrd7IbSPP6sogh_K6LdA.roa (raw, json)
Hash identifier:          BEkq0bd021wy4JLoX8KRN8L/2JdiHbrDtNZgZpB/wOc=
Subject key identifier:   57:A3:21:4A:5D:0D:AD:DE:C8:6D:23:CF:EA:CA:20:87:F2:BA:2D:D0
Certificate issuer:       /CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Certificate serial:       019B084C7F3DE6FA7E8D086EB6AC4332C286
Authority key identifier: 81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/V6MhSl0Nrd7IbSPP6sogh_K6LdA.roa
Signing time:             Wed 10 Dec 2025 12:46:29 +0000
ROA not before:           Wed 10 Dec 2025 12:46:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     21430
IP address blocks:        31.7.240.0/21 maxlen: 21
                          77.78.64.0/22 maxlen: 22
                          77.78.68.0/23 maxlen: 23
                          77.78.74.0/23 maxlen: 23
                          77.78.80.0/21 maxlen: 21
                          77.78.88.0/23 maxlen: 23
                          77.78.91.0/24 maxlen: 24
                          77.78.92.0/23 maxlen: 24
                          77.78.122.0/24 maxlen: 24
                          80.250.0.0/19 maxlen: 19
                          81.0.196.0/23 maxlen: 23
                          81.0.198.0/24 maxlen: 24
                          81.0.200.0/22 maxlen: 22
                          81.0.204.0/23 maxlen: 23
                          81.0.210.0/23 maxlen: 23
                          81.0.215.0/24 maxlen: 24
                          81.0.216.0/24 maxlen: 24
                          81.0.222.0/23 maxlen: 23
                          81.0.224.0/24 maxlen: 24
                          81.0.227.0/24 maxlen: 24
                          81.0.229.0/24 maxlen: 24
                          81.0.244.0/23 maxlen: 23
                          81.0.251.0/24 maxlen: 24
                          81.0.252.0/23 maxlen: 23
                          82.208.0.0/22 maxlen: 22
                          82.208.13.0/24 maxlen: 24
                          82.208.15.0/24 maxlen: 24
                          82.208.19.0/24 maxlen: 24
                          82.208.24.0/23 maxlen: 23
                          82.208.30.0/23 maxlen: 24
                          82.208.36.0/23 maxlen: 23
                          82.208.38.0/24 maxlen: 24
                          82.208.42.0/23 maxlen: 23
                          82.208.45.0/24 maxlen: 24
                          82.208.51.0/24 maxlen: 24
                          82.208.52.0/22 maxlen: 22
                          82.208.57.0/24 maxlen: 24
                          82.208.59.0/24 maxlen: 24
                          83.136.200.0/21 maxlen: 21
                          85.239.224.0/23 maxlen: 23
                          85.239.226.0/24 maxlen: 24
                          85.239.228.0/23 maxlen: 23
                          85.239.251.0/24 maxlen: 24
                          85.239.254.0/23 maxlen: 23
                          109.123.200.0/23 maxlen: 23
                          109.123.201.0/24 maxlen: 24
                          109.123.204.0/24 maxlen: 24
                          109.123.212.0/23 maxlen: 23
                          109.123.226.0/24 maxlen: 24
                          147.161.28.0/22 maxlen: 22
                          185.33.136.0/22 maxlen: 22
                          185.161.240.0/22 maxlen: 22
                          217.11.226.0/24 maxlen: 24
                          217.11.231.0/24 maxlen: 24
                          217.11.234.0/24 maxlen: 24
                          217.11.237.0/24 maxlen: 24
                          217.11.238.0/23 maxlen: 23
                          217.11.240.0/23 maxlen: 23
                          217.11.244.0/24 maxlen: 24
                          217.11.250.0/24 maxlen: 24
                          217.11.252.0/23 maxlen: 23
                          217.11.255.0/24 maxlen: 24
                          2a01:6400::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:08:4c:7f:3d:e6:fa:7e:8d:08:6e:b6:ac:43:32:c2:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
        Validity
            Not Before: Dec 10 12:46:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=57a3214a5d0daddec86d23cfeaca2087f2ba2dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cb:63:77:e3:ac:22:90:61:d7:ea:f9:2a:83:
                    e1:9a:bb:e9:93:4a:15:97:bb:d6:d0:a0:fc:87:f4:
                    19:0f:fc:6a:67:2e:3b:c7:9b:ae:73:f2:c8:5a:2a:
                    59:64:3d:0b:65:93:eb:38:6e:2a:7f:ba:fc:57:d7:
                    8a:bb:8e:ef:87:75:f5:e5:68:d8:fe:72:48:e1:db:
                    38:08:e1:43:e7:58:1b:df:8e:d3:bf:08:7f:7f:10:
                    ed:a7:8f:14:99:74:17:b7:17:ce:4f:4d:81:f0:5d:
                    db:42:6a:18:e5:ed:78:93:89:f1:85:0b:da:e0:bd:
                    d7:89:a8:84:28:0a:10:b4:44:7f:dc:55:52:39:c2:
                    b1:cd:06:6d:5b:7c:53:8c:bc:b0:83:9e:b6:aa:cd:
                    d7:c7:84:1b:a6:5c:a7:36:cb:a7:c6:14:52:16:8c:
                    ac:cf:4a:c3:a7:84:2f:be:55:12:60:88:94:99:f8:
                    c6:cf:3b:09:b8:80:1d:4c:a1:4c:58:43:89:3d:cd:
                    a2:b0:6e:33:f2:43:fa:16:54:be:78:ef:2c:b1:6d:
                    e8:1d:bc:9e:3a:d9:56:c8:4a:ab:5b:b4:e0:22:91:
                    b9:77:ce:2d:b6:e1:46:4b:be:94:62:de:d9:0e:28:
                    b4:0d:19:24:a0:fa:0b:87:cd:63:2b:f2:80:fc:2f:
                    a4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A3:21:4A:5D:0D:AD:DE:C8:6D:23:CF:EA:CA:20:87:F2:BA:2D:D0
            X509v3 Authority Key Identifier:
                keyid:81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/V6MhSl0Nrd7IbSPP6sogh_K6LdA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.7.240.0/21
                  77.78.64.0-77.78.69.255
                  77.78.74.0/23
                  77.78.80.0-77.78.89.255
                  77.78.91.0-77.78.93.255
                  77.78.122.0/24
                  80.250.0.0/19
                  81.0.196.0-81.0.198.255
                  81.0.200.0-81.0.205.255
                  81.0.210.0/23
                  81.0.215.0-81.0.216.255
                  81.0.222.0-81.0.224.255
                  81.0.227.0/24
                  81.0.229.0/24
                  81.0.244.0/23
                  81.0.251.0-81.0.253.255
                  82.208.0.0/22
                  82.208.13.0/24
                  82.208.15.0/24
                  82.208.19.0/24
                  82.208.24.0/23
                  82.208.30.0/23
                  82.208.36.0-82.208.38.255
                  82.208.42.0/23
                  82.208.45.0/24
                  82.208.51.0-82.208.55.255
                  82.208.57.0/24
                  82.208.59.0/24
                  83.136.200.0/21
                  85.239.224.0-85.239.226.255
                  85.239.228.0/23
                  85.239.251.0/24
                  85.239.254.0/23
                  109.123.200.0/23
                  109.123.204.0/24
                  109.123.212.0/23
                  109.123.226.0/24
                  147.161.28.0/22
                  185.33.136.0/22
                  185.161.240.0/22
                  217.11.226.0/24
                  217.11.231.0/24
                  217.11.234.0/24
                  217.11.237.0-217.11.241.255
                  217.11.244.0/24
                  217.11.250.0/24
                  217.11.252.0/23
                  217.11.255.0/24
                IPv6:
                  2a01:6400::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:e6:31:98:e8:09:9e:03:a2:7c:b1:85:da:c7:7e:f0:3f:ca:
         9b:45:8b:ff:dd:ed:07:97:a3:45:c9:50:c9:c4:39:b9:f9:ee:
         83:63:1e:cc:b0:c4:07:bf:00:33:63:b1:68:2c:27:b2:97:5d:
         f3:ad:ea:ac:a5:40:4b:3c:2d:f0:b5:01:d2:c7:9e:fb:20:96:
         c7:d4:eb:ae:8f:68:8b:b6:ad:89:bd:dc:fb:79:ca:f5:8a:47:
         ae:5b:f7:38:b1:76:7d:10:5f:6f:01:fc:e9:d6:49:16:40:0d:
         76:d6:71:17:9d:ba:b3:24:6a:86:f8:9b:a5:98:63:07:75:94:
         51:33:85:84:46:f8:d3:08:4a:10:40:c0:85:0f:1e:7c:58:a1:
         41:fb:0e:1d:db:4f:9c:03:f4:78:a1:7e:83:c5:af:ce:4f:ce:
         a7:dc:23:bd:d0:63:76:4c:66:48:8f:5b:22:fe:74:03:46:ea:
         e7:aa:a8:76:03:a9:5f:da:f2:f0:19:6d:c8:a6:ae:e0:65:50:
         f3:6e:21:4f:3b:fb:15:ac:7b:70:c8:fb:09:2a:f3:16:f9:54:
         e4:89:48:72:9a:0c:2d:b7:90:f1:d6:1c:6b:02:a6:46:8f:b6:
         87:bc:d0:d9:cd:3d:cf:3b:be:82:93:92:e5:99:5f:8a:e2:1c:
         c8:3b:5d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 12:15:48 2025 by rpki-client