This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/7Wcy_e-fygtsm1qzHK47f90_Dec.roa
File:                     7Wcy_e-fygtsm1qzHK47f90_Dec.roa (raw, json)
Hash identifier:          6nUoYVEyzYPZ0+V/PoHKlh7i8I3FhH7T4Idy+0rvrjU=
Subject key identifier:   ED:67:32:FD:EF:9F:CA:0B:6C:9B:5A:B3:1C:AE:3B:7F:DD:3F:0D:E7
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       019AE7C74BA0BBB5A025410DA1E6DCBA9FE4
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/7Wcy_e-fygtsm1qzHK47f90_Dec.roa
Signing time:             Thu 04 Dec 2025 05:13:09 +0000
ROA not before:           Thu 04 Dec 2025 05:13:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     31205
IP address blocks:        31.173.240.0/23 maxlen: 23
                          31.173.242.0/23 maxlen: 23
                          31.173.244.0/22 maxlen: 22
                          37.29.86.0/23 maxlen: 23
                          46.232.200.0/24 maxlen: 24
                          46.232.202.0/23 maxlen: 23
                          78.25.92.0/23 maxlen: 23
                          78.25.94.0/23 maxlen: 23
                          83.149.48.0/24 maxlen: 24
                          83.149.49.0/24 maxlen: 24
                          83.149.50.0/24 maxlen: 24
                          83.149.51.0/24 maxlen: 24
                          83.169.248.0/22 maxlen: 22
                          83.169.252.0/22 maxlen: 22
                          85.26.224.0/24 maxlen: 24
                          85.26.226.0/24 maxlen: 24
                          85.26.227.0/24 maxlen: 24
                          85.26.228.0/24 maxlen: 24
                          85.26.229.0/24 maxlen: 24
                          85.26.230.0/24 maxlen: 24
                          85.26.231.0/24 maxlen: 24
                          128.204.66.0/24 maxlen: 24
                          128.204.67.0/24 maxlen: 24
                          178.176.48.0/24 maxlen: 24
                          178.176.240.0/22 maxlen: 22
                          178.176.244.0/22 maxlen: 22
                          178.177.208.0/21 maxlen: 21
                          185.210.140.0/23 maxlen: 23
                          185.210.142.0/23 maxlen: 23
                          188.162.0.0/24 maxlen: 24
                          188.162.1.0/24 maxlen: 24
                          188.162.2.0/23 maxlen: 23
                          188.162.4.0/22 maxlen: 22
                          188.162.8.0/23 maxlen: 23
                          188.162.10.0/23 maxlen: 23
                          188.162.12.0/23 maxlen: 23
                          188.162.14.0/23 maxlen: 23
                          188.162.72.0/22 maxlen: 22
                          188.162.76.0/23 maxlen: 23
                          188.162.78.0/24 maxlen: 24
                          188.162.79.0/24 maxlen: 24
                          188.162.80.0/24 maxlen: 24
                          188.162.81.0/24 maxlen: 24
                          188.162.82.0/24 maxlen: 24
                          188.162.83.0/24 maxlen: 24
                          188.162.84.0/24 maxlen: 24
                          188.162.85.0/24 maxlen: 24
                          188.162.86.0/24 maxlen: 24
                          188.162.87.0/24 maxlen: 24
                          188.162.88.0/24 maxlen: 24
                          188.162.89.0/24 maxlen: 24
                          188.162.90.0/23 maxlen: 23
                          188.162.92.0/22 maxlen: 22
                          188.170.240.0/22 maxlen: 22
                          188.170.247.0/24 maxlen: 24
                          2a03:d000:6400::/40 maxlen: 40
                          2a03:d000:6500::/40 maxlen: 40
                          2a03:d000:67fe::/48 maxlen: 48
                          2a03:d000:67ff::/48 maxlen: 48
                          2a03:d000:6802::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e7:c7:4b:a0:bb:b5:a0:25:41:0d:a1:e6:dc:ba:9f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Dec  4 05:13:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ed6732fdef9fca0b6c9b5ab31cae3b7fdd3f0de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e3:cf:80:ad:6f:ad:7b:f4:12:02:64:d5:00:
                    e2:5e:f5:bd:c8:2c:79:82:88:09:76:99:8b:cd:d7:
                    f7:9f:eb:ae:85:c8:f8:4a:8f:0d:31:41:06:82:38:
                    55:95:02:e0:6f:fb:75:35:8e:74:df:f2:8f:07:fc:
                    30:2d:77:b3:a0:37:41:a8:b7:e0:a1:11:de:31:3a:
                    34:df:c4:ee:5d:ed:41:00:7d:4f:a5:3e:1c:67:ae:
                    3f:7c:21:a1:c9:fd:18:1c:77:43:9a:b1:40:43:97:
                    68:21:d3:99:cb:e4:94:1a:70:2b:6d:c3:48:da:73:
                    d4:92:54:4f:11:81:4f:60:c9:db:68:f4:41:82:79:
                    f8:66:04:49:9d:75:bf:d7:9f:3f:64:a6:ee:04:48:
                    92:e2:60:5a:55:21:74:1c:39:03:b0:c6:65:ac:77:
                    22:33:91:f5:90:15:28:25:02:14:c5:fd:30:80:a9:
                    ca:0a:da:f4:d5:4a:b0:69:7c:40:79:26:0a:ab:0c:
                    c9:da:ae:7e:0f:fd:b8:f9:9c:ce:9c:9a:2b:05:b0:
                    8d:bc:89:b6:c5:95:70:83:53:8a:38:82:92:96:75:
                    b8:0e:b3:b8:9c:bd:70:14:7d:f0:66:3d:14:50:3a:
                    eb:1f:9b:9a:46:17:7b:a3:77:e9:24:09:f6:a0:73:
                    0e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:67:32:FD:EF:9F:CA:0B:6C:9B:5A:B3:1C:AE:3B:7F:DD:3F:0D:E7
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/7Wcy_e-fygtsm1qzHK47f90_Dec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.173.240.0/21
                  37.29.86.0/23
                  46.232.200.0/24
                  46.232.202.0/23
                  78.25.92.0/22
                  83.149.48.0/22
                  83.169.248.0/21
                  85.26.224.0/24
                  85.26.226.0-85.26.231.255
                  128.204.66.0/23
                  178.176.48.0/24
                  178.176.240.0/21
                  178.177.208.0/21
                  185.210.140.0/22
                  188.162.0.0/20
                  188.162.72.0-188.162.95.255
                  188.170.240.0/22
                  188.170.247.0/24
                IPv6:
                  2a03:d000:6400::/39
                  2a03:d000:67fe::/47
                  2a03:d000:6802::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:8f:98:f9:e8:bb:70:96:92:f8:08:9d:0b:d4:eb:55:61:8b:
         b3:0e:61:78:0c:18:ee:84:24:34:ce:e5:d4:34:04:6f:ed:e0:
         bc:4c:41:19:26:a8:80:77:af:fb:40:22:11:14:40:0c:ed:4b:
         c0:52:67:10:79:c5:b5:b4:b2:b6:2f:a3:01:7e:92:9a:bd:62:
         94:bb:fe:ce:dc:d3:94:1c:b9:cd:60:61:b9:39:09:a7:84:48:
         33:a5:c3:51:cb:e3:cb:ea:e9:1b:44:fc:f2:26:c7:c4:06:17:
         dc:d0:4d:95:99:96:ce:b8:a6:5c:ef:11:f1:bb:3c:33:20:f2:
         1e:2d:3f:ba:3f:06:d0:70:95:5a:73:25:af:a1:0d:5b:ae:6e:
         1e:f2:78:c7:1e:1a:3a:40:80:74:d6:61:6e:8a:89:9e:d4:f9:
         ba:3c:63:23:5b:42:4f:82:92:64:c0:1c:96:c1:e8:73:af:9d:
         a9:77:c8:4d:13:04:91:3e:e4:e6:53:91:0a:65:4f:eb:c8:73:
         00:f1:3b:b3:ee:53:81:9d:ea:85:db:e6:86:35:c8:2e:7b:a3:
         35:7a:2f:2f:8f:b3:fe:0b:48:90:37:b5:99:97:8a:5a:9f:1e:
         3a:e6:f6:88:d9:9f:22:11:e9:07:b8:53:b0:40:5a:6a:3b:b1:
         94:90:c0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:51:08 2025 by rpki-client