This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/JXqAYK5l-_wM9jMlcMoBRcvTpnw.roa
File:                     JXqAYK5l-_wM9jMlcMoBRcvTpnw.roa (raw, json)
Hash identifier:          WtaTh/P/aPKzmJKsdEQ9npXPcszgPjwctR1jbOex9BA=
Subject key identifier:   25:7A:80:60:AE:65:FB:FC:0C:F6:33:25:70:CA:01:45:CB:D3:A6:7C
Certificate issuer:       /CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Certificate serial:       019A71E7F2E8EE5088075CE573CE951D564A
Authority key identifier: E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/JXqAYK5l-_wM9jMlcMoBRcvTpnw.roa
Signing time:             Tue 11 Nov 2025 07:53:37 +0000
ROA not before:           Tue 11 Nov 2025 07:53:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     16074
IP address blocks:        145.77.32.0/21 maxlen: 24
                          145.77.32.0/22 maxlen: 24
                          145.77.36.0/22 maxlen: 24
                          145.77.42.0/23 maxlen: 24
                          145.77.44.0/23 maxlen: 24
                          145.77.46.0/23 maxlen: 24
                          145.77.48.0/23 maxlen: 24
                          145.77.50.0/23 maxlen: 24
                          145.77.52.0/22 maxlen: 24
                          145.77.56.0/22 maxlen: 24
                          145.77.60.0/22 maxlen: 24
                          145.77.64.0/19 maxlen: 24
                          145.77.64.0/20 maxlen: 24
                          145.77.80.0/20 maxlen: 24
                          145.77.96.0/20 maxlen: 24
                          145.77.96.0/21 maxlen: 24
                          145.77.104.0/21 maxlen: 24
                          145.77.224.0/20 maxlen: 24
                          145.77.224.0/21 maxlen: 24
                          2001:67c:2f04::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:e7:f2:e8:ee:50:88:07:5c:e5:73:ce:95:1d:56:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
        Validity
            Not Before: Nov 11 07:53:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=257a8060ae65fbfc0cf6332570ca0145cbd3a67c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:18:c8:d2:e7:34:e6:91:4f:1b:c9:a6:88:c7:
                    9b:96:ba:58:1f:08:5d:23:e7:1c:47:de:55:c2:7a:
                    b2:c1:2e:b7:17:60:b2:b4:35:d6:2d:f9:e2:e8:27:
                    c6:11:3e:05:5f:bc:6b:20:c7:ed:96:8a:aa:8e:f4:
                    16:6a:21:e4:a8:dc:bc:20:3b:c5:dd:4f:85:5b:59:
                    1c:d7:77:72:39:5d:a7:71:a6:a1:ff:94:55:5f:f4:
                    af:2a:6a:70:c9:8a:ed:76:33:01:a7:0c:d9:7a:7a:
                    f6:bf:f5:f7:a9:03:87:00:94:60:4a:fb:23:33:ee:
                    2f:39:1b:9f:54:52:32:ee:3c:1f:6f:b1:8a:3c:e2:
                    09:6d:53:7d:e9:2f:5e:05:e6:49:59:bf:d1:32:8f:
                    14:57:dd:ad:ec:27:68:04:81:f7:5e:dd:bb:9c:63:
                    33:3c:a8:54:03:81:fb:0f:5c:1e:88:56:51:e3:79:
                    ea:68:55:bc:97:57:d9:ea:3c:f5:1b:8c:0b:ea:c1:
                    09:d5:43:e8:e5:15:cc:f3:ba:6d:49:eb:cd:09:94:
                    cd:41:81:08:e4:88:73:db:ab:9f:6d:9c:70:e0:75:
                    b4:94:ed:76:bf:2d:9e:61:a7:a6:c9:89:12:7b:4d:
                    67:78:bf:84:5b:eb:8d:86:60:41:f0:8f:ba:80:11:
                    cb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7A:80:60:AE:65:FB:FC:0C:F6:33:25:70:CA:01:45:CB:D3:A6:7C
            X509v3 Authority Key Identifier:
                keyid:E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/JXqAYK5l-_wM9jMlcMoBRcvTpnw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.77.32.0/21
                  145.77.42.0-145.77.111.255
                  145.77.224.0/20
                IPv6:
                  2001:67c:2f04::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:b6:a0:96:04:fa:e6:33:bd:5a:97:7d:3c:22:d6:fc:47:0d:
         c8:35:34:0c:7f:c2:24:c9:f7:c2:76:f6:7f:1f:7d:84:3a:57:
         8e:40:80:72:33:76:80:d4:38:a3:97:2e:65:38:ed:e8:7a:e2:
         c9:95:ad:68:85:d7:81:8d:08:c2:d9:9f:e8:99:38:d4:29:f5:
         4e:fe:3f:88:42:c2:14:e0:55:77:38:2b:55:64:44:9f:22:f7:
         b2:c9:be:68:d8:55:5d:d9:4b:2a:b5:35:75:f3:7d:6d:72:a1:
         00:db:e4:44:fd:9d:2c:c8:54:7d:f5:15:4f:33:95:f0:1d:91:
         db:66:d0:71:cd:05:0e:7e:53:82:96:90:dd:3a:86:24:2c:2f:
         44:b5:a3:90:dc:8e:3a:74:ec:d4:23:af:d8:45:ad:c7:ea:01:
         23:50:c6:6b:33:22:ab:be:5e:16:0b:a6:85:77:75:05:58:b5:
         47:0c:d4:7c:78:83:fc:7f:ca:a6:82:97:6a:47:20:42:33:1e:
         67:96:49:3a:ea:0a:a4:3f:92:1c:2b:92:7f:b3:16:1d:1f:d9:
         13:45:2b:dd:a9:d6:c5:37:28:79:e9:59:bb:e1:aa:b6:5a:6c:
         18:f3:8e:24:dc:d1:55:23:6d:0f:26:0d:ef:fb:1e:68:7b:fa:
         90:34:5a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:52:38 2025 by rpki-client