This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/q4aWYTu2Vcs2y5zyssVw-uBIsy8.roa
File:                     q4aWYTu2Vcs2y5zyssVw-uBIsy8.roa (raw, json)
Hash identifier:          Z2ATniNFuzKSrm6AaRuDSbbnCSlCJQr2korwEY9ufig=
Subject key identifier:   AB:86:96:61:3B:B6:55:CB:36:CB:9C:F2:B2:C5:70:FA:E0:48:B3:2F
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       019B77C76ACE958F3C92B220B13B0E54ED69
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/q4aWYTu2Vcs2y5zyssVw-uBIsy8.roa
Signing time:             Thu 01 Jan 2026 04:18:36 +0000
ROA not before:           Thu 01 Jan 2026 04:18:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     20804
IP address blocks:        81.15.128.0/17 maxlen: 17
                          81.15.136.0/23 maxlen: 23
                          81.15.156.0/24 maxlen: 24
                          81.15.174.0/24 maxlen: 24
                          81.15.175.0/24 maxlen: 24
                          81.15.182.0/23 maxlen: 23
                          81.15.187.0/24 maxlen: 24
                          81.15.191.0/24 maxlen: 24
                          81.15.194.0/24 maxlen: 24
                          81.15.195.0/24 maxlen: 24
                          81.15.198.0/23 maxlen: 23
                          81.15.198.0/24 maxlen: 24
                          81.15.199.0/24 maxlen: 24
                          81.15.201.0/24 maxlen: 24
                          81.15.202.0/24 maxlen: 24
                          81.15.203.0/24 maxlen: 24
                          81.15.204.0/23 maxlen: 23
                          81.15.209.0/24 maxlen: 24
                          81.15.214.0/23 maxlen: 23
                          81.15.216.0/24 maxlen: 24
                          81.15.217.0/24 maxlen: 24
                          81.15.218.0/23 maxlen: 23
                          81.15.218.0/24 maxlen: 24
                          81.15.222.0/23 maxlen: 23
                          81.15.222.0/24 maxlen: 24
                          81.15.224.0/22 maxlen: 22
                          81.15.225.0/24 maxlen: 24
                          81.15.227.0/24 maxlen: 24
                          81.15.230.0/24 maxlen: 24
                          81.15.232.0/22 maxlen: 22
                          81.15.232.0/24 maxlen: 24
                          81.15.236.0/24 maxlen: 24
                          81.15.237.0/24 maxlen: 24
                          81.15.238.0/24 maxlen: 24
                          81.15.239.0/24 maxlen: 24
                          81.15.240.0/23 maxlen: 23
                          81.15.242.0/24 maxlen: 24
                          81.15.244.0/23 maxlen: 23
                          81.15.254.0/23 maxlen: 23
                          81.15.254.0/24 maxlen: 24
                          81.15.255.0/24 maxlen: 24
                          82.177.0.0/16 maxlen: 16
                          82.177.0.0/23 maxlen: 23
                          82.177.2.0/24 maxlen: 24
                          82.177.4.0/22 maxlen: 22
                          82.177.9.0/24 maxlen: 24
                          82.177.10.0/23 maxlen: 23
                          82.177.14.0/23 maxlen: 23
                          82.177.16.0/24 maxlen: 24
                          82.177.27.0/24 maxlen: 24
                          82.177.35.0/24 maxlen: 24
                          82.177.37.0/24 maxlen: 24
                          82.177.48.0/21 maxlen: 21
                          82.177.48.0/24 maxlen: 24
                          82.177.50.0/24 maxlen: 24
                          82.177.52.0/23 maxlen: 23
                          82.177.54.0/24 maxlen: 24
                          82.177.59.0/24 maxlen: 24
                          82.177.68.0/22 maxlen: 22
                          82.177.72.0/21 maxlen: 21
                          82.177.80.0/21 maxlen: 21
                          82.177.102.0/23 maxlen: 24
                          82.177.108.0/23 maxlen: 23
                          82.177.112.0/22 maxlen: 22
                          82.177.140.0/23 maxlen: 23
                          82.177.164.0/24 maxlen: 24
                          82.177.192.0/24 maxlen: 24
                          82.177.194.0/24 maxlen: 24
                          82.177.195.0/24 maxlen: 24
                          82.177.196.0/22 maxlen: 22
                          82.177.196.0/24 maxlen: 24
                          82.177.199.0/24 maxlen: 24
                          82.177.206.0/24 maxlen: 24
                          82.177.249.0/24 maxlen: 24
                          82.177.252.0/24 maxlen: 24
                          88.220.0.0/17 maxlen: 17
                          88.220.60.0/23 maxlen: 23
                          88.220.81.0/24 maxlen: 24
                          88.220.84.0/24 maxlen: 24
                          88.220.107.0/24 maxlen: 24
                          88.220.113.0/24 maxlen: 24
                          88.220.114.0/24 maxlen: 24
                          88.220.116.0/24 maxlen: 24
                          88.220.117.0/24 maxlen: 24
                          88.220.120.0/22 maxlen: 22
                          88.220.128.0/18 maxlen: 18
                          88.220.132.0/23 maxlen: 23
                          88.220.152.0/23 maxlen: 23
                          88.220.165.0/24 maxlen: 24
                          88.220.181.0/24 maxlen: 24
                          88.220.185.0/24 maxlen: 24
                          88.220.192.0/20 maxlen: 20
                          88.220.208.0/20 maxlen: 20
                          88.220.224.0/19 maxlen: 19
                          88.220.252.0/24 maxlen: 24
                          88.220.253.0/24 maxlen: 24
                          194.183.32.0/19 maxlen: 19
                          194.183.32.0/23 maxlen: 23
                          194.183.34.0/23 maxlen: 23
                          194.183.54.0/24 maxlen: 24
                          194.183.55.0/24 maxlen: 24
                          194.183.56.0/23 maxlen: 23
                          195.136.0.0/16 maxlen: 16
                          195.136.4.0/22 maxlen: 22
                          195.136.16.0/22 maxlen: 22
                          195.136.21.0/24 maxlen: 24
                          195.136.25.0/24 maxlen: 24
                          195.136.27.0/24 maxlen: 24
                          195.136.32.158/32 maxlen: 32
                          195.136.32.201/32 maxlen: 32
                          195.136.34.0/23 maxlen: 23
                          195.136.38.0/23 maxlen: 23
                          195.136.65.0/24 maxlen: 24
                          195.136.88.0/22 maxlen: 22
                          195.136.113.0/24 maxlen: 24
                          195.136.148.0/22 maxlen: 22
                          195.136.156.0/23 maxlen: 23
                          195.136.164.0/23 maxlen: 23
                          195.136.174.0/23 maxlen: 23
                          195.136.176.0/22 maxlen: 22
                          213.172.160.0/19 maxlen: 19
                          2a00:4120::/32 maxlen: 32
                          2a00:4120:8000:2::/64 maxlen: 64
                          2a00:4120:8000:4::/64 maxlen: 64
                          2a00:4120:8000:5::/64 maxlen: 64
                          2a00:4120:8000:70::/65 maxlen: 65
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:6a:ce:95:8f:3c:92:b2:20:b1:3b:0e:54:ed:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:18:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ab8696613bb655cb36cb9cf2b2c570fae048b32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:41:d7:0a:ea:74:6e:22:77:cc:77:91:d9:d8:
                    37:df:88:6e:13:e2:da:ea:04:a3:5e:b7:f0:f5:f0:
                    37:bf:0d:b5:bb:5b:24:84:43:1e:f7:86:84:f8:36:
                    a9:96:60:82:14:24:15:86:26:ba:10:1e:a9:47:36:
                    e1:6b:6e:07:fe:70:21:87:da:f7:51:3c:87:8b:3d:
                    cc:16:bb:3f:7d:5d:1b:e6:7e:6a:6a:1c:e1:3c:b1:
                    88:bd:8e:cf:d0:03:61:5c:38:fa:fb:66:ee:3c:47:
                    99:3c:b9:33:a4:33:44:ee:b3:20:09:84:e5:97:e6:
                    58:b5:7a:05:ea:15:3f:d9:87:7c:52:3f:4d:6f:98:
                    1a:ae:1f:46:a7:af:a7:f8:f8:39:24:49:2a:2a:22:
                    45:de:91:f8:c0:03:b6:1e:d5:3c:56:da:7c:f6:27:
                    c8:9e:4e:d2:67:c6:29:0f:d7:26:27:de:e9:55:9a:
                    b8:99:da:a8:7b:79:0d:c0:58:7d:5d:5f:ff:9b:ed:
                    15:79:d9:e7:40:53:75:6d:4e:7e:68:1d:4a:d5:7f:
                    ae:2b:04:6f:da:72:a2:3c:ce:02:5d:3b:7e:00:83:
                    74:9e:3d:09:d1:88:6d:a6:4b:09:73:23:be:25:8e:
                    66:02:c9:23:ca:79:af:8c:05:7c:5a:83:15:b7:66:
                    88:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:86:96:61:3B:B6:55:CB:36:CB:9C:F2:B2:C5:70:FA:E0:48:B3:2F
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/q4aWYTu2Vcs2y5zyssVw-uBIsy8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.15.128.0/17
                  82.177.0.0/16
                  88.220.0.0/16
                  194.183.32.0/19
                  195.136.0.0/16
                  213.172.160.0/19
                IPv6:
                  2a00:4120::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:39:01:72:52:2f:42:83:7e:83:e2:e3:aa:c2:bc:d3:77:38:
         5b:ec:8d:3e:f3:fa:18:28:dc:62:dd:9e:ca:24:11:a4:66:0b:
         d8:d6:3c:15:e0:bd:c8:68:dd:2e:fe:50:14:04:b0:b6:0e:81:
         e9:9e:0a:60:25:3f:7c:df:f5:a8:46:29:75:36:58:c2:43:3a:
         d0:ae:e0:33:27:3c:03:4e:d8:5b:0c:ef:c2:81:32:fe:24:1b:
         ce:19:86:34:82:84:8e:d0:0b:59:cc:96:47:7b:44:af:5c:69:
         af:c2:e0:44:19:f7:e0:ef:63:67:08:35:e7:21:d1:54:04:51:
         6a:56:7e:b3:da:5a:d5:6b:5c:9b:89:2c:00:a2:b6:d7:f5:98:
         ab:ff:3d:f1:4d:04:f5:d6:52:19:5e:44:ba:be:93:d9:46:b6:
         13:44:29:dd:19:cf:d8:a5:8f:ce:f9:dd:56:80:08:94:66:23:
         94:e5:97:de:3a:28:bd:6c:a4:5f:ca:98:e1:b5:4f:e9:3e:d1:
         ef:38:b1:8a:34:4f:06:e1:da:78:cd:0c:2d:ce:48:ea:1e:2e:
         33:1d:57:60:3a:38:d2:27:5f:1a:b2:0d:49:40:92:e4:45:7c:
         4a:fd:16:69:fa:46:88:f6:54:c6:21:c4:88:52:b1:09:cf:da:
         62:73:8f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:48:21 2026 by rpki-client