This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/E5pfM8_6xdfnWcd79wNvaskhDKo.roa
File:                     E5pfM8_6xdfnWcd79wNvaskhDKo.roa (raw, json)
Hash identifier:          y0Ll9TqNFCMXsaTQIESwVtfULWRNBlB/EyrKykV1sx8=
Subject key identifier:   13:9A:5F:33:CF:FA:C5:D7:E7:59:C7:7B:F7:03:6F:6A:C9:21:0C:AA
Certificate issuer:       /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial:       019AE899DD339BA41A91E68341CCB670A3EA
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/E5pfM8_6xdfnWcd79wNvaskhDKo.roa
Signing time:             Thu 04 Dec 2025 09:03:08 +0000
ROA not before:           Thu 04 Dec 2025 09:03:08 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212097
IP address blocks:        62.133.36.0/22 maxlen: 22
                          62.133.36.0/24 maxlen: 24
                          62.133.37.0/24 maxlen: 24
                          62.133.38.0/24 maxlen: 24
                          62.133.39.0/24 maxlen: 24
                          185.230.102.0/24 maxlen: 24
                          193.46.32.0/22 maxlen: 22
                          193.46.32.0/24 maxlen: 24
                          193.46.33.0/24 maxlen: 24
                          193.46.34.0/24 maxlen: 24
                          193.46.35.0/24 maxlen: 24
                          2a0d:a240::/29 maxlen: 29
                          2a10:b180::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e8:99:dd:33:9b:a4:1a:91:e6:83:41:cc:b6:70:a3:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
        Validity
            Not Before: Dec  4 09:03:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=139a5f33cffac5d7e759c77bf7036f6ac9210caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2e:92:84:8b:cc:b9:10:c9:5a:4b:0e:fe:bd:
                    39:55:72:5f:57:90:6c:f7:bc:80:11:75:cc:39:70:
                    6e:a7:69:8d:4c:a8:a5:ad:16:7d:5a:e7:96:4b:4c:
                    9f:82:02:9c:22:a3:1a:c6:9f:2b:fb:4c:ab:d0:2d:
                    b5:49:73:f5:7a:0f:89:c5:dc:12:f9:f4:85:23:20:
                    55:28:13:62:73:80:65:29:54:8f:7e:cd:6d:4f:38:
                    39:ae:c7:64:f2:6d:71:11:6e:a2:57:c7:a7:cb:4b:
                    6f:c4:86:36:36:02:e0:5c:01:fc:99:26:74:de:4c:
                    0b:30:6f:4e:cf:3b:b4:79:fc:cf:f8:4f:ab:c6:36:
                    ba:04:66:a7:a8:36:e1:a6:e1:f7:8b:d3:d1:29:8b:
                    0f:48:87:36:cc:0d:c9:bb:3e:c9:16:3c:0f:d1:d9:
                    91:52:8b:43:94:31:59:9d:93:10:07:73:05:b5:6b:
                    73:be:ba:a0:b7:e2:5d:3f:61:8c:03:48:2a:7d:3f:
                    53:1b:2c:07:a1:0e:1a:43:dd:e7:9c:33:f1:8a:49:
                    13:43:0e:6e:5d:9b:61:17:a6:06:f6:c8:25:e5:1d:
                    85:f9:94:e6:ac:a6:57:21:70:07:db:f2:cf:da:b6:
                    5e:ce:4f:b1:11:01:3b:eb:4c:d5:95:59:6c:78:be:
                    9e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9A:5F:33:CF:FA:C5:D7:E7:59:C7:7B:F7:03:6F:6A:C9:21:0C:AA
            X509v3 Authority Key Identifier:
                keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/E5pfM8_6xdfnWcd79wNvaskhDKo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.133.36.0/22
                  185.230.102.0/24
                  193.46.32.0/22
                IPv6:
                  2a0d:a240::/29
                  2a10:b180::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:5d:71:25:14:78:ab:9c:09:19:fa:bf:64:8d:28:b6:c9:5b:
         3e:d4:95:f4:1a:91:08:1c:ba:b1:6e:7b:62:c6:bf:50:8d:4f:
         83:d6:2f:3d:90:29:8f:e4:35:93:2e:5d:a9:85:a7:f3:71:c2:
         c6:67:36:2a:ad:cd:9c:ae:77:55:b0:d3:fa:81:ad:14:f7:f2:
         5e:40:7e:d8:a5:3a:9a:7a:e4:96:2e:c7:f6:2f:97:bd:27:78:
         7d:07:8b:46:1f:fe:b4:b7:53:25:1c:96:42:36:f8:68:00:2a:
         1c:92:d9:0c:2d:b5:5c:35:5e:3e:7e:44:69:0f:9f:ef:7e:f6:
         59:05:f1:01:8b:af:ee:c2:55:c0:b6:a0:9e:c6:d2:b8:9f:f5:
         1f:fb:34:24:87:a0:55:54:0d:59:ee:7c:a8:b7:04:87:3d:72:
         8b:bc:5c:b6:54:18:ad:9d:57:57:b4:99:94:d4:cc:93:a0:ef:
         00:f0:11:83:1d:e0:09:c9:7b:fe:7c:c0:ae:c2:60:b9:a1:40:
         17:0a:91:b5:6f:4a:79:37:43:f8:9b:ac:be:0f:7e:ba:0d:28:
         42:1e:12:a5:c6:73:86:ea:a5:01:b0:2a:ed:ee:a4:63:0d:6f:
         16:72:36:2b:62:e3:21:e6:c3:56:4d:ee:52:2a:9b:7b:33:ae:
         6a:c4:e3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:30:50 2025 by rpki-client