This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/7_vTLU6_W9WRO99eRf3W3MXytqs.roa
File:                     7_vTLU6_W9WRO99eRf3W3MXytqs.roa (raw, json)
Hash identifier:          H8ULtmJILJ9TvT6VQcaaq/32t8wDD2TyxKJK2DXGNIw=
Subject key identifier:   EF:FB:D3:2D:4E:BF:5B:D5:91:3B:DF:5E:45:FD:D6:DC:C5:F2:B6:AB
Certificate issuer:       /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial:       019ADDD3FA8B1A61AD3A106C1D4AB948B569
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/7_vTLU6_W9WRO99eRf3W3MXytqs.roa
Signing time:             Tue 02 Dec 2025 06:50:48 +0000
ROA not before:           Tue 02 Dec 2025 06:50:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213541
IP address blocks:        89.19.56.0/24 maxlen: 24
                          89.19.57.0/24 maxlen: 24
                          89.19.58.0/24 maxlen: 24
                          89.19.59.0/24 maxlen: 24
                          185.59.232.0/22 maxlen: 24
                          185.68.245.0/24 maxlen: 24
                          185.81.146.0/24 maxlen: 24
                          185.81.147.0/24 maxlen: 24
                          185.81.174.0/24 maxlen: 24
                          185.81.184.0/23 maxlen: 23
                          185.81.186.0/23 maxlen: 23
                          185.89.104.0/22 maxlen: 22
                          185.89.108.0/22 maxlen: 22
                          185.95.100.0/23 maxlen: 24
                          185.95.102.0/23 maxlen: 24
                          185.96.82.0/24 maxlen: 24
                          185.96.83.0/24 maxlen: 24
                          185.96.132.0/24 maxlen: 24
                          185.96.134.0/23 maxlen: 24
                          185.97.0.0/22 maxlen: 24
                          185.98.43.0/24 maxlen: 24
                          185.101.203.0/24 maxlen: 24
                          185.104.151.0/24 maxlen: 24
                          185.112.56.0/23 maxlen: 24
                          185.175.224.0/23 maxlen: 24
                          185.175.226.0/23 maxlen: 24
                          213.170.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 18:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:dd:d3:fa:8b:1a:61:ad:3a:10:6c:1d:4a:b9:48:b5:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
        Validity
            Not Before: Dec  2 06:50:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=effbd32d4ebf5bd5913bdf5e45fdd6dcc5f2b6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fa:55:a5:f4:2f:18:e1:7c:78:cb:4f:09:9d:
                    d2:2a:0f:3e:d2:74:84:1b:d5:94:4c:0f:f7:55:b4:
                    e2:4f:14:83:75:01:92:7d:8e:81:ad:d1:c7:05:5f:
                    20:00:47:15:b3:7a:3c:77:a3:aa:b7:a9:fb:45:c1:
                    0d:52:5a:65:a4:36:c7:e7:a1:21:7f:7b:f4:ad:a8:
                    1b:35:51:d0:1d:5b:17:03:fd:43:3a:96:7b:44:e1:
                    94:3e:f4:24:72:56:c7:05:85:4b:73:ca:bc:f0:34:
                    e6:35:85:2d:b8:6f:fe:7c:c0:48:73:22:e6:b2:67:
                    bc:3f:0b:5b:20:4b:76:53:3f:f2:88:3e:48:40:1d:
                    3f:83:8e:ec:ea:46:1e:aa:d4:d6:7f:0d:ad:5e:cc:
                    d7:e6:3e:a3:f5:2c:a8:30:c2:6a:81:e3:ca:e7:0a:
                    d9:47:cb:26:2e:6d:f3:a7:22:fd:c1:74:db:4c:ef:
                    03:5e:48:e6:f3:ae:ac:f5:34:ff:a0:2f:57:d0:9e:
                    de:26:ea:8c:5d:d5:a2:2d:d8:b1:38:4e:5e:e9:56:
                    66:be:a5:1c:ef:fe:a7:b2:23:d8:6f:3d:5c:77:47:
                    48:64:bc:13:21:3d:97:ba:8b:63:f3:58:b1:b6:71:
                    44:ce:aa:3f:45:79:5a:85:93:55:3e:18:bf:a2:9d:
                    0a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FB:D3:2D:4E:BF:5B:D5:91:3B:DF:5E:45:FD:D6:DC:C5:F2:B6:AB
            X509v3 Authority Key Identifier:
                keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/7_vTLU6_W9WRO99eRf3W3MXytqs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.19.56.0/22
                  185.59.232.0/22
                  185.68.245.0/24
                  185.81.146.0/23
                  185.81.174.0/24
                  185.81.184.0/22
                  185.89.104.0/21
                  185.95.100.0/22
                  185.96.82.0/23
                  185.96.132.0/24
                  185.96.134.0/23
                  185.97.0.0/22
                  185.98.43.0/24
                  185.101.203.0/24
                  185.104.151.0/24
                  185.112.56.0/23
                  185.175.224.0/22
                  213.170.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:48:c4:e9:5d:93:0a:0f:ac:c1:3b:76:13:25:2d:ea:6e:ea:
         cf:8a:6f:44:ad:1e:26:8b:b2:db:d1:77:42:b1:8e:df:df:33:
         ee:64:e0:2b:51:9b:59:86:c0:64:a0:ba:f8:96:82:e6:50:7c:
         ff:9e:b9:74:e0:ee:7a:d4:70:02:e4:84:bd:a1:d6:6d:70:fa:
         18:95:47:59:b9:67:90:e4:bc:ab:2e:44:a9:4d:43:7c:a0:cb:
         ea:78:f6:46:f1:9f:73:a7:46:54:51:b5:ac:3a:bd:36:b1:ef:
         41:9f:7d:93:6a:89:d3:f5:af:00:60:53:64:e5:41:9b:e8:ef:
         61:1b:f9:44:81:69:34:de:98:28:1f:ea:b5:aa:d2:46:dd:c3:
         43:eb:38:00:16:84:f9:1d:8d:ea:3f:a5:c8:82:7d:28:a2:23:
         e6:00:9b:fc:67:86:c8:e7:36:6a:22:ca:4c:69:49:f1:02:80:
         1b:a9:88:f3:f8:87:66:eb:8f:6d:77:01:6b:0e:d1:21:83:ed:
         95:df:dc:29:7e:dc:2c:63:5a:93:d9:c1:ad:15:3b:9e:ba:94:
         a1:4c:fa:90:7a:e2:53:aa:bd:97:20:3c:8a:b2:b6:cb:0c:ed:
         be:a8:7a:62:1e:6b:e8:64:db:a4:40:aa:6e:c3:11:5a:cd:92:
         46:d5:77:4a
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAZrd0/qLGmGtOhBsHUq5SLVpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjUxMjAyMDY1MDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmZiZDMyZDRlYmY1YmQ1OTEzYmRmNWU0NWZkZDZkY2M1ZjJiNmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PpVpfQvGOF8eMtPCZ3SKg8+0nSE
G9WUTA/3VbTiTxSDdQGSfY6BrdHHBV8gAEcVs3o8d6Oqt6n7RcENUlplpDbH56Eh
f3v0ragbNVHQHVsXA/1DOpZ7ROGUPvQkclbHBYVLc8q88DTmNYUtuG/+fMBIcyLm
sme8PwtbIEt2Uz/yiD5IQB0/g47s6kYeqtTWfw2tXszX5j6j9SyoMMJqgePK5wrZ
R8smLm3zpyL9wXTbTO8DXkjm866s9TT/oC9X0J7eJuqMXdWiLdixOE5e6VZmvqUc
7/6nsiPYbz1cd0dIZLwTIT2Xuotj81ixtnFEzqo/RXlahZNVPhi/op0KRwIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFO/70y1Ov1vVkTvfXkX91tzF8rarMB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvN192VExVNl9XOVdSTzk5ZVJmM1czTVh5dHFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAlkTOAME
Ark76AMEALlE9QMEAblRkgMEALlRrgMEArlRuAMEA7lZaAMEArlfZAMEAblgUgME
ALlghAMEAblghgMEArlhAAMEALliKwMEALllywMEALlolwMEAblwOAMEArmv4AME
ANWq3zANBgkqhkiG9w0BAQsFAAOCAQEAekjE6V2TCg+swTt2EyUt6m7qz4pvRK0e
Jouy29F3QrGO398z7mTgK1GbWYbAZKC6+JaC5lB8/565dODuetRwAuSEvaHWbXD6
GJVHWblnkOS8qy5EqU1DfKDL6nj2RvGfc6dGVFG1rDq9NrHvQZ99k2qJ0/WvAGBT
ZOVBm+jvYRv5RIFpNN6YKB/qtarSRt3DQ+s4ABaE+R2N6j+lyIJ9KKIj5gCb/GeG
yOc2aiLKTGlJ8QKAG6mI8/iHZuuPbXcBaw7RIYPtld/cKX7cLGNak9nBrRU7nrqU
oUz6kHriU6q9lyA8irK2ywztvqh6Yh5r6GTbpECqbsMRWs2SRtV3Sg==
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:05:54 2025 by rpki-client