This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/E5z2SlwXjTUl_dxuFn5Hj8DA13E.roa
File:                     E5z2SlwXjTUl_dxuFn5Hj8DA13E.roa (raw, json)
Hash identifier:          9f37/tNohAMGdruEvWhcUxavSXF2Z9dpN0nP011TZfM=
Subject key identifier:   13:9C:F6:4A:5C:17:8D:35:25:FD:DC:6E:16:7E:47:8F:C0:C0:D7:71
Certificate issuer:       /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial:       019B08FD32B8DD5542E36BDECE9DB1043706
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/E5z2SlwXjTUl_dxuFn5Hj8DA13E.roa
Signing time:             Wed 10 Dec 2025 15:59:29 +0000
ROA not before:           Wed 10 Dec 2025 15:59:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209737
IP address blocks:        5.180.105.0/24 maxlen: 24
                          5.180.106.0/24 maxlen: 24
                          5.180.107.0/24 maxlen: 24
                          45.131.0.0/24 maxlen: 24
                          45.131.1.0/24 maxlen: 24
                          45.136.4.0/24 maxlen: 24
                          77.83.200.0/24 maxlen: 24
                          77.83.201.0/24 maxlen: 24
                          77.83.202.0/24 maxlen: 24
                          77.83.203.0/24 maxlen: 24
                          91.208.204.0/24 maxlen: 24
                          194.116.237.0/24 maxlen: 24
                          2a09:8780::/29 maxlen: 29
                          2a0f:b700::/29 maxlen: 29
                          2a0f:e900::/29 maxlen: 29
                          2a0f:eb00::/29 maxlen: 29
                          2a0f:eb00::/32 maxlen: 32
                          2a0f:eb07::/32 maxlen: 32
                          2a0f:ed00::/29 maxlen: 29
                          2a0f:ed03::/32 maxlen: 32
                          2a0f:f900::/29 maxlen: 29
                          2a13:a440:7::/48 maxlen: 48
                          2a13:a441::/32 maxlen: 32
                          2a13:a445::/32 maxlen: 32
                          2a13:a447::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 00:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:08:fd:32:b8:dd:55:42:e3:6b:de:ce:9d:b1:04:37:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
        Validity
            Not Before: Dec 10 15:59:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=139cf64a5c178d3525fddc6e167e478fc0c0d771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:42:98:eb:a9:db:74:5f:8f:4a:c5:53:e3:4b:
                    f0:fa:fb:29:5e:81:a3:07:1d:cd:d0:03:e5:a8:50:
                    97:39:a1:63:44:23:0b:49:1f:dd:2d:1b:fe:de:ec:
                    7c:48:66:22:33:b6:f0:ed:d0:8e:d2:1e:5e:01:c9:
                    e8:3f:4c:bf:db:16:90:8e:28:da:fd:62:c8:b9:77:
                    a9:42:4c:87:e8:aa:3f:93:50:ae:19:37:f2:94:60:
                    5b:9d:72:af:07:5d:08:8d:ed:90:a5:69:b6:58:c8:
                    98:b0:1d:6e:88:9a:2a:5a:dd:2c:fd:a1:55:5a:d1:
                    85:33:3a:b5:cf:83:74:91:c3:8a:52:42:31:49:4a:
                    86:db:7a:51:d0:a1:e7:22:08:63:45:cd:ba:97:1c:
                    8a:45:3d:64:5d:5d:68:a6:29:a7:7b:96:b4:1f:1b:
                    e3:1a:40:35:b3:fb:54:83:9a:7a:03:c6:af:6c:eb:
                    83:2c:80:c6:e1:74:08:0a:75:c8:00:2e:16:49:e7:
                    1f:85:99:a5:42:71:41:b5:93:de:12:c7:c9:20:33:
                    2d:59:d7:9c:f7:8f:dc:95:f9:58:61:86:f0:30:85:
                    77:ae:8c:a0:02:eb:ef:d2:83:e2:13:76:45:c4:f6:
                    bb:df:3d:e6:32:3c:ad:95:71:c2:d4:39:4e:59:86:
                    7a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9C:F6:4A:5C:17:8D:35:25:FD:DC:6E:16:7E:47:8F:C0:C0:D7:71
            X509v3 Authority Key Identifier:
                keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/E5z2SlwXjTUl_dxuFn5Hj8DA13E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.105.0-5.180.107.255
                  45.131.0.0/23
                  45.136.4.0/24
                  77.83.200.0/22
                  91.208.204.0/24
                  194.116.237.0/24
                IPv6:
                  2a09:8780::/29
                  2a0f:b700::/29
                  2a0f:e900::/29
                  2a0f:eb00::/29
                  2a0f:ed00::/29
                  2a0f:f900::/29
                  2a13:a440:7::/48
                  2a13:a441::/32
                  2a13:a445::/32
                  2a13:a447::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:a2:15:cf:5b:8d:ed:bb:20:28:ac:71:c1:e6:24:bb:dc:ba:
         72:19:cd:5e:db:84:a0:c2:32:9a:6a:67:41:a4:98:31:bb:47:
         82:12:79:cc:83:0d:5c:6b:ca:f9:f1:af:ab:ce:e4:be:11:d3:
         6e:e6:65:ea:fd:4b:f5:d2:b2:af:bf:c6:ec:33:98:22:f1:e1:
         3f:3d:3a:a2:b6:af:0c:74:f2:ef:66:e5:2d:f6:18:ad:4d:2e:
         30:42:2d:8f:d9:06:03:63:62:d2:84:b1:6b:2c:67:b9:a2:ee:
         21:3c:e2:81:c0:5d:b4:81:bc:af:da:52:5e:42:19:7f:be:8f:
         dd:65:fa:28:4b:f8:21:68:46:b6:4a:e9:1e:67:38:f2:a4:60:
         62:81:c4:a4:13:10:3a:5c:86:f2:0b:aa:1c:4e:5b:62:3a:0b:
         47:37:18:6c:04:7e:17:4c:56:30:5d:81:22:d4:c5:55:04:a6:
         78:13:c0:19:d6:22:52:d2:7c:b4:6b:30:a5:16:25:6f:2e:d7:
         7b:43:8a:fc:21:b5:e0:62:37:56:82:2f:22:5a:53:42:96:e9:
         f5:0a:4f:1e:fe:f1:2a:18:ea:c6:e2:fd:1d:65:79:a8:2b:a3:
         b5:7a:34:bd:3e:29:03:f6:68:3b:a1:24:44:8c:bb:ba:37:b1:
         eb:e1:e2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 08:17:13 2025 by rpki-client