This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-A099rhYspxL1k7iQ2FzsnPOfbs.roa
File:                     1-A099rhYspxL1k7iQ2FzsnPOfbs.roa (raw, json)
Hash identifier:          FRY41zLtnJbth2Bd58FFP6uRD9yhmju4htqggaW90Xo=
Subject key identifier:   F8:0D:3D:F6:B8:58:B2:9C:4B:D6:4E:E2:43:61:73:B2:73:CE:7D:BB
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       019AF2020A6859923742103E4BA5425AA33A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-A099rhYspxL1k7iQ2FzsnPOfbs.roa
Signing time:             Sat 06 Dec 2025 04:53:31 +0000
ROA not before:           Sat 06 Dec 2025 04:53:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     16276
IP address blocks:        37.202.202.0/24 maxlen: 24
                          151.240.1.0/24 maxlen: 24
                          151.240.9.0/24 maxlen: 24
                          151.240.17.0/24 maxlen: 24
                          151.240.24.0/24 maxlen: 24
                          151.240.227.0/24 maxlen: 24
                          151.241.1.0/24 maxlen: 24
                          151.241.8.0/24 maxlen: 24
                          151.241.68.0/24 maxlen: 24
                          151.241.92.0/24 maxlen: 24
                          151.242.67.0/24 maxlen: 24
                          151.242.103.0/24 maxlen: 24
                          151.242.117.0/24 maxlen: 24
                          151.242.118.0/24 maxlen: 24
                          151.243.6.0/24 maxlen: 24
                          151.243.120.0/24 maxlen: 24
                          151.243.160.0/22 maxlen: 22
                          151.244.78.0/24 maxlen: 24
                          151.244.192.0/24 maxlen: 24
                          151.245.54.0/24 maxlen: 24
                          151.245.144.0/24 maxlen: 24
                          151.245.183.0/24 maxlen: 24
                          151.245.238.0/24 maxlen: 24
                          151.246.177.0/24 maxlen: 24
                          151.246.190.0/24 maxlen: 24
                          151.247.158.0/24 maxlen: 24
                          151.247.192.0/24 maxlen: 24
                          151.247.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:02:0a:68:59:92:37:42:10:3e:4b:a5:42:5a:a3:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Dec  6 04:53:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f80d3df6b858b29c4bd64ee2436173b273ce7dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a1:63:8e:0e:d8:3b:87:b9:d4:d3:0e:1e:a4:
                    b3:9b:32:32:fd:27:d5:11:43:75:8b:26:7f:7d:56:
                    a4:c9:80:84:c9:c9:ed:13:59:7a:f3:56:12:3f:03:
                    5a:94:f3:c0:5a:a9:1d:ce:19:8e:2a:fc:ad:4b:1a:
                    c9:2d:e6:a2:10:e2:f6:b0:a2:f1:43:a9:d1:e8:bf:
                    1d:f5:85:e5:4a:75:d2:e6:7f:1b:93:ea:c5:05:36:
                    22:a4:97:50:26:1e:1c:f7:bb:59:10:8f:34:51:92:
                    09:d5:e4:99:27:a9:c4:57:89:d3:07:91:f6:e9:10:
                    65:50:ae:13:92:38:8c:6a:45:85:b6:88:c3:a2:92:
                    f5:f4:35:e8:94:34:30:f0:00:98:2c:01:88:b5:68:
                    34:6c:c4:ce:0c:5a:e9:cf:b4:c5:42:9b:9e:72:a8:
                    e3:52:95:02:bf:31:0f:ec:c3:76:e1:94:e3:ad:a0:
                    47:62:b1:30:40:b2:94:65:ab:61:81:36:f5:34:3a:
                    6d:3f:aa:91:83:d2:32:94:4e:b2:b7:ae:e9:ca:dd:
                    aa:cd:79:a9:48:bf:ca:e0:86:ec:4e:f3:99:ca:71:
                    c0:72:64:24:90:c8:b3:29:4d:00:b8:ad:de:9c:6c:
                    cd:6d:eb:63:40:c8:98:dd:47:2a:ce:0c:6b:ec:e9:
                    f4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0D:3D:F6:B8:58:B2:9C:4B:D6:4E:E2:43:61:73:B2:73:CE:7D:BB
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-A099rhYspxL1k7iQ2FzsnPOfbs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.202.202.0/24
                  151.240.1.0/24
                  151.240.9.0/24
                  151.240.17.0/24
                  151.240.24.0/24
                  151.240.227.0/24
                  151.241.1.0/24
                  151.241.8.0/24
                  151.241.68.0/24
                  151.241.92.0/24
                  151.242.67.0/24
                  151.242.103.0/24
                  151.242.117.0-151.242.118.255
                  151.243.6.0/24
                  151.243.120.0/24
                  151.243.160.0/22
                  151.244.78.0/24
                  151.244.192.0/24
                  151.245.54.0/24
                  151.245.144.0/24
                  151.245.183.0/24
                  151.245.238.0/24
                  151.246.177.0/24
                  151.246.190.0/24
                  151.247.158.0/24
                  151.247.192.0/24
                  151.247.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:43:9d:5a:a9:64:34:66:fe:95:00:e4:d8:22:3b:0f:a6:65:
         7e:16:b6:64:0a:5b:8b:38:eb:31:bf:e4:7a:17:6e:4b:77:cc:
         14:b5:e9:7f:25:7f:0d:a6:97:09:d8:a7:69:65:eb:d2:e9:c9:
         75:ee:08:6b:e2:04:13:47:4b:af:cc:dd:0f:4b:2b:af:a4:f1:
         72:ac:c3:88:ec:32:f0:79:5f:ee:c3:9f:09:05:78:b2:b6:62:
         43:6c:93:1f:b1:69:22:53:da:b3:39:65:b8:7a:0f:58:39:71:
         e4:4a:64:50:75:cb:53:69:07:a5:38:28:20:7b:78:3c:e2:be:
         6f:f1:20:23:11:4e:73:1e:3d:63:f7:e2:f4:e8:fa:20:1b:df:
         f0:a7:51:f8:93:5c:48:5b:34:1e:d6:b5:4c:35:0e:4f:82:f6:
         5b:35:78:52:4f:a5:54:49:f6:05:50:35:56:98:e1:29:ef:de:
         7e:32:29:6c:1a:22:4d:62:6d:6e:60:f3:ee:71:3f:88:6e:bd:
         f6:9f:58:8f:21:d1:7b:04:d9:57:61:a8:00:85:bf:40:17:92:
         9c:0a:60:5f:de:b5:13:63:64:58:e4:aa:a1:c0:90:57:58:0a:
         b6:fd:1c:69:30:2a:4f:01:d5:47:19:35:5d:de:b2:1e:14:f1:
         18:be:61:fb
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgISAZryAgpoWZI3QhA+S6VCWqM6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUxMjA2MDQ1MzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODBkM2RmNmI4NThiMjljNGJkNjRlZTI0MzYxNzNiMjczY2U3ZGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqFjjg7YO4e51NMOHqSzmzIy/SfV
EUN1iyZ/fVakyYCEycntE1l681YSPwNalPPAWqkdzhmOKvytSxrJLeaiEOL2sKLx
Q6nR6L8d9YXlSnXS5n8bk+rFBTYipJdQJh4c97tZEI80UZIJ1eSZJ6nEV4nTB5H2
6RBlUK4TkjiMakWFtojDopL19DXolDQw8ACYLAGItWg0bMTODFrpz7TFQpuecqjj
UpUCvzEP7MN24ZTjraBHYrEwQLKUZathgTb1NDptP6qRg9IylE6yt67pyt2qzXmp
SL/K4IbsTvOZynHAcmQkkMizKU0AuK3enGzNbetjQMiY3Ucqzgxr7On0QwIDAQAB
o4ICszCCAq8wHQYDVR0OBBYEFPgNPfa4WLKcS9ZO4kNhc7Jzzn27MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvMS1BMDk5cmhZc3B4TDFrN2lRMkZ6c25QT2Zicy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOGUvZjQzYjFkLTllNTAtNDU1MS1hZTZhLTE3YjlkZTE0MTI1
Mi8xL3htSm05R2I3SkppamxGbXpOUzJpVVZHbHBNQS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBxwYIKwYBBQUHAQcBAf8EgbcwgbQwgbEEAgABMIGqAwQA
JcrKAwQAl/ABAwQAl/AJAwQAl/ARAwQAl/AYAwQAl/DjAwQAl/EBAwQAl/EIAwQA
l/FEAwQAl/FcAwQAl/JDAwQAl/JnMAwDBACX8nUDBACX8nYDBACX8wYDBACX83gD
BAKX86ADBACX9E4DBACX9MADBACX9TYDBACX9ZADBACX9bcDBACX9e4DBACX9rED
BACX9r4DBACX954DBACX98ADBACX99kwDQYJKoZIhvcNAQELBQADggEBAJVDnVqp
ZDRm/pUA5NgiOw+mZX4WtmQKW4s46zG/5HoXbkt3zBS16X8lfw2mlwnYp2ll69Lp
yXXuCGviBBNHS6/M3Q9LK6+k8XKsw4jsMvB5X+7DnwkFeLK2YkNskx+xaSJT2rM5
Zbh6D1g5ceRKZFB1y1NpB6U4KCB7eDzivm/xICMRTnMePWP34vTo+iAb3/CnUfiT
XEhbNB7WtUw1Dk+C9ls1eFJPpVRJ9gVQNVaY4Snv3n4yKWwaIk1ibW5g8+5xP4hu
vfafWI8h0XsE2VdhqACFv0AXkpwKYF/etRNjZFjkqqHAkFdYCrb9HGkwKk8B1UcZ
NV3esh4U8Ri+Yfs=
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:55:35 2025 by rpki-client