This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/pqktpCxLGm0ef4jw2Ni2l6y-LvY.roa
File:                     pqktpCxLGm0ef4jw2Ni2l6y-LvY.roa (raw, json)
Hash identifier:          qzKRc0VCQWppc/oSUuGJGwq+ZahDXUJUBntxA72SvqY=
Subject key identifier:   A6:A9:2D:A4:2C:4B:1A:6D:1E:7F:88:F0:D8:D8:B6:97:AC:BE:2E:F6
Certificate issuer:       /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial:       019B7CEE57006427262BB80CE962989A34C4
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/pqktpCxLGm0ef4jw2Ni2l6y-LvY.roa
Signing time:             Fri 02 Jan 2026 04:19:13 +0000
ROA not before:           Fri 02 Jan 2026 04:19:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15576
IP address blocks:        77.95.120.0/21 maxlen: 21
                          85.118.216.0/21 maxlen: 21
                          185.63.149.0/24 maxlen: 24
                          185.63.150.0/23 maxlen: 23
                          212.103.64.0/19 maxlen: 19
                          212.103.64.0/24 maxlen: 24
                          212.103.65.0/24 maxlen: 24
                          217.11.208.0/20 maxlen: 20
                          217.146.160.0/20 maxlen: 20
                          217.146.165.0/24 maxlen: 24
                          2a00:c38::/32 maxlen: 32
                          2a00:c38:1a5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:57:00:64:27:26:2b:b8:0c:e9:62:98:9a:34:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
        Validity
            Not Before: Jan  2 04:19:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a6a92da42c4b1a6d1e7f88f0d8d8b697acbe2ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:43:80:d2:ed:09:ff:7a:4f:65:cd:71:e5:40:
                    00:2e:a9:f1:71:73:60:99:4d:3e:ac:ed:79:a6:8b:
                    1c:17:6b:8c:d2:b9:00:dc:81:f1:7d:fc:c3:d5:33:
                    85:63:c6:ce:c3:1c:39:a9:12:39:fb:d1:8a:5f:c3:
                    47:6f:cc:ac:5d:3e:f0:e6:e5:18:15:a3:ac:34:0e:
                    8e:65:ca:3d:e6:35:db:67:c5:ad:8f:9f:34:15:89:
                    05:ee:49:4d:99:14:e4:3c:59:7d:ac:2d:2f:44:63:
                    fd:10:77:2f:04:a1:35:21:38:69:87:d0:08:27:ea:
                    ef:f1:7f:e0:53:3a:d2:99:74:94:2f:c6:92:34:3d:
                    59:5d:e5:35:60:0c:fd:bb:b5:d0:f2:52:6a:86:e5:
                    17:57:db:83:50:ff:08:50:3a:40:9f:1d:39:7f:b9:
                    32:2d:28:23:21:c8:d5:75:f9:db:a4:34:75:7c:7f:
                    8c:13:c2:55:c5:d3:23:d1:1d:02:1a:25:48:e7:3f:
                    83:9e:eb:a2:31:19:0f:8b:e8:f5:75:db:e1:31:32:
                    9b:52:88:bf:c0:4d:0f:a6:c1:e2:bd:ce:6d:24:a7:
                    15:51:86:05:70:6c:69:b9:a4:3a:9c:26:0d:2f:b6:
                    fc:b7:d8:dd:f3:a6:b2:3f:bf:da:41:a9:1a:6d:4a:
                    42:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A9:2D:A4:2C:4B:1A:6D:1E:7F:88:F0:D8:D8:B6:97:AC:BE:2E:F6
            X509v3 Authority Key Identifier:
                keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/pqktpCxLGm0ef4jw2Ni2l6y-LvY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.95.120.0/21
                  85.118.216.0/21
                  185.63.149.0-185.63.151.255
                  212.103.64.0/19
                  217.11.208.0/20
                  217.146.160.0/20
                IPv6:
                  2a00:c38::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:6e:8e:e7:38:14:0b:22:8f:7b:a5:ed:2c:55:5d:e9:0b:f3:
         89:e9:29:b2:f2:ff:f8:70:7d:f9:d1:aa:f8:c5:46:df:65:e3:
         1c:23:64:57:4e:5e:b7:d6:3b:ca:53:4e:e3:f6:86:68:d6:ff:
         f2:00:52:8e:bc:d1:b2:8b:a0:95:76:68:dd:5e:0e:ef:00:09:
         d2:24:9d:ee:a2:b3:b1:41:72:b0:08:9e:f5:71:60:fa:6d:a0:
         8b:d6:07:14:0f:21:39:5d:28:55:be:c3:75:02:5c:22:aa:c4:
         2c:e5:2b:a7:e6:97:34:63:95:8d:67:fc:97:17:1f:4f:bd:88:
         b9:c3:86:5b:bf:fc:3f:23:91:56:53:ba:ad:c1:74:9b:32:2e:
         72:6c:50:57:19:97:5d:16:2e:c4:41:14:8c:06:a6:03:7c:32:
         84:98:5d:2a:9f:f4:d6:ce:0a:8f:ac:a1:b2:96:80:d4:ca:70:
         07:00:08:ab:b2:3e:02:b9:1a:58:17:97:88:62:76:f9:58:57:
         c1:50:b5:17:dc:ca:c5:10:8f:ae:e0:b4:ee:95:4a:4e:9c:5a:
         2f:01:e3:2e:85:9a:31:f8:50:9c:76:8c:0c:a1:fe:1a:1a:9f:
         44:f6:26:49:c0:73:f5:9f:0c:aa:38:4e:e1:c2:af:1a:79:ce:
         73:ce:21:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 19:20:43 2026 by rpki-client