This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/5ELvi2prTaHlQQw-aKR9uMwtFA8.roa
File:                     5ELvi2prTaHlQQw-aKR9uMwtFA8.roa (raw, json)
Hash identifier:          8uiks0UyE3YVuRlbo43yM8bQQXEWa2U0fKuakGVSNAU=
Subject key identifier:   E4:42:EF:8B:6A:6B:4D:A1:E5:41:0C:3E:68:A4:7D:B8:CC:2D:14:0F
Certificate issuer:       /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial:       019B7F84FC02F2E8650733790E38FE6A206F
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/5ELvi2prTaHlQQw-aKR9uMwtFA8.roa
Signing time:             Fri 02 Jan 2026 16:23:00 +0000
ROA not before:           Fri 02 Jan 2026 16:23:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     25144
IP address blocks:        31.223.128.0/19 maxlen: 19
                          31.223.128.0/21 maxlen: 21
                          31.223.136.0/21 maxlen: 21
                          31.223.144.0/21 maxlen: 21
                          31.223.152.0/21 maxlen: 21
                          45.131.116.0/22 maxlen: 23
                          45.131.118.0/23 maxlen: 23
                          46.239.0.0/18 maxlen: 18
                          46.239.0.0/22 maxlen: 22
                          46.239.4.0/22 maxlen: 22
                          46.239.32.0/19 maxlen: 19
                          62.101.144.0/20 maxlen: 20
                          81.93.64.0/19 maxlen: 19
                          81.93.66.0/24 maxlen: 24
                          81.93.67.0/24 maxlen: 24
                          81.93.69.0/24 maxlen: 24
                          81.93.73.0/24 maxlen: 24
                          81.93.84.0/24 maxlen: 24
                          81.93.86.0/24 maxlen: 24
                          81.93.91.0/24 maxlen: 24
                          81.93.92.0/24 maxlen: 24
                          89.111.192.0/18 maxlen: 18
                          89.111.192.0/19 maxlen: 19
                          89.111.192.0/24 maxlen: 24
                          89.111.200.0/24 maxlen: 24
                          89.111.224.0/19 maxlen: 19
                          89.111.225.0/24 maxlen: 24
                          89.111.226.0/24 maxlen: 24
                          89.111.227.0/24 maxlen: 24
                          89.111.231.0/24 maxlen: 24
                          89.111.235.0/24 maxlen: 24
                          89.111.236.0/24 maxlen: 24
                          89.111.240.0/24 maxlen: 24
                          89.111.244.0/22 maxlen: 22
                          89.111.246.0/24 maxlen: 24
                          89.111.248.0/22 maxlen: 22
                          94.250.0.0/18 maxlen: 18
                          94.250.18.0/24 maxlen: 24
                          94.250.64.0/18 maxlen: 18
                          109.165.128.0/17 maxlen: 17
                          185.35.156.0/22 maxlen: 22
                          185.125.120.0/22 maxlen: 22
                          217.24.128.0/20 maxlen: 20
                          2a00:cb00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:fc:02:f2:e8:65:07:33:79:0e:38:fe:6a:20:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
        Validity
            Not Before: Jan  2 16:23:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e442ef8b6a6b4da1e5410c3e68a47db8cc2d140f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:50:14:95:ee:48:b3:aa:7a:5d:a4:fd:16:60:
                    47:67:f7:cb:52:59:b3:70:ac:00:1b:9f:4f:b6:62:
                    6e:9c:c9:62:fe:9e:bd:dd:69:89:67:69:5b:44:83:
                    3e:50:e8:ad:a6:fb:b9:19:a4:92:dc:d8:63:77:14:
                    d0:c1:fb:93:18:ab:e7:cc:48:f7:2d:13:5b:86:cd:
                    56:de:42:ff:ff:4d:f3:6d:59:0d:46:9f:4a:8c:62:
                    a9:a7:59:a1:e1:49:d0:49:9f:e8:d1:1e:52:a2:16:
                    d1:d9:06:fa:50:eb:67:66:2f:29:5b:5e:e6:f8:ab:
                    15:39:7f:9a:cc:a5:69:36:e5:11:91:92:12:56:31:
                    f3:ff:60:b5:af:86:cd:f5:0c:ae:5a:62:25:67:14:
                    20:36:e8:27:62:75:62:d9:76:48:44:0e:7c:05:a9:
                    cc:cd:be:d2:ec:ab:77:17:13:e7:a1:1b:b8:39:c6:
                    be:2d:da:75:b4:92:26:b9:94:23:f1:3d:79:6a:9e:
                    9d:6e:f9:44:3a:82:14:3b:4e:88:9b:bc:39:ff:d9:
                    ce:ef:10:71:d1:62:b3:e2:ec:56:fd:fc:fc:06:13:
                    9c:b5:ae:74:7c:0d:58:d5:ea:cf:79:0a:55:b2:44:
                    82:c6:ae:f0:79:4d:7b:1f:0e:db:01:99:32:a7:2b:
                    40:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:42:EF:8B:6A:6B:4D:A1:E5:41:0C:3E:68:A4:7D:B8:CC:2D:14:0F
            X509v3 Authority Key Identifier:
                keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/5ELvi2prTaHlQQw-aKR9uMwtFA8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.223.128.0/19
                  45.131.116.0/22
                  46.239.0.0/18
                  62.101.144.0/20
                  81.93.64.0/19
                  89.111.192.0/18
                  94.250.0.0/17
                  109.165.128.0/17
                  185.35.156.0/22
                  185.125.120.0/22
                  217.24.128.0/20
                IPv6:
                  2a00:cb00::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:a5:74:0d:f0:85:e1:17:20:ad:50:3e:6d:57:3f:7b:f6:7d:
         39:4b:1e:0e:e7:48:c8:f3:60:e7:7b:fb:11:e3:4f:fe:34:c2:
         ca:81:4d:03:98:ed:7b:ab:77:0c:ac:74:8d:e7:39:2c:ae:d6:
         d1:3a:42:fc:ec:ec:60:26:c1:c9:33:b8:89:31:97:ab:45:75:
         07:b5:81:ce:6b:c4:1f:fe:89:53:a6:99:0a:36:48:20:41:6a:
         83:35:f2:c6:b9:f3:79:12:a5:7e:9d:13:ca:92:2f:d2:d8:52:
         62:58:df:7a:c8:6e:c5:36:4f:cf:30:6c:6c:99:3c:43:2b:fc:
         f0:15:60:df:bf:78:98:de:73:cc:d0:6e:1b:83:47:2c:0e:f3:
         6f:af:56:71:dc:d8:9b:8e:f5:11:82:5a:ec:18:04:3d:02:28:
         e3:f7:64:f0:5b:5c:29:da:ba:5b:56:51:36:0d:1b:80:ad:23:
         1d:33:27:38:bd:1a:d5:ba:d7:c3:3e:6c:da:da:29:fd:2c:83:
         4c:a9:33:f3:f6:e2:1a:0c:ca:cb:1a:0d:fd:96:3f:19:be:17:
         77:ed:71:19:c7:71:ed:b3:d9:a7:66:5e:36:89:40:6f:d6:40:
         0f:54:60:00:43:ab:1a:07:1d:93:ea:cd:6f:fc:f3:5a:36:0f:
         06:ce:6e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:15:37 2026 by rpki-client