This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/6GLB9mtHtQ9igAugr-nU-NnOL5I.roa
File:                     6GLB9mtHtQ9igAugr-nU-NnOL5I.roa (raw, json)
Hash identifier:          v+rAB5v9d/a3phjEOAxXcev6bMkZhENGNBYWynOBKZs=
Subject key identifier:   E8:62:C1:F6:6B:47:B5:0F:62:80:0B:A0:AF:E9:D4:F8:D9:CE:2F:92
Certificate issuer:       /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial:       019B77C709AA0A22F458E0E05E54F6339B8C
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/6GLB9mtHtQ9igAugr-nU-NnOL5I.roa
Signing time:             Thu 01 Jan 2026 04:18:11 +0000
ROA not before:           Thu 01 Jan 2026 04:18:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16347
IP address blocks:        5.182.252.0/22 maxlen: 24
                          37.18.160.0/20 maxlen: 24
                          37.58.128.0/17 maxlen: 24
                          37.157.8.0/23 maxlen: 24
                          37.157.10.0/24 maxlen: 24
                          37.157.12.0/22 maxlen: 24
                          37.157.60.0/22 maxlen: 24
                          45.142.172.0/22 maxlen: 24
                          45.145.124.0/22 maxlen: 24
                          46.20.160.0/20 maxlen: 24
                          62.102.224.0/19 maxlen: 24
                          62.244.70.0/23 maxlen: 24
                          62.244.72.0/22 maxlen: 24
                          62.244.80.0/23 maxlen: 24
                          62.244.90.0/23 maxlen: 24
                          62.244.92.0/23 maxlen: 24
                          79.98.96.0/21 maxlen: 24
                          81.22.216.0/21 maxlen: 24
                          89.38.200.0/21 maxlen: 24
                          91.103.232.0/21 maxlen: 24
                          91.205.156.0/24 maxlen: 24
                          91.206.156.0/23 maxlen: 24
                          91.217.94.0/23 maxlen: 24
                          91.229.230.0/23 maxlen: 24
                          92.61.72.0/21 maxlen: 24
                          93.113.136.0/21 maxlen: 24
                          94.127.8.0/21 maxlen: 24
                          103.73.172.0/22 maxlen: 24
                          103.77.32.0/22 maxlen: 24
                          103.229.36.0/23 maxlen: 24
                          103.232.172.0/22 maxlen: 24
                          109.69.192.0/21 maxlen: 24
                          109.237.240.0/20 maxlen: 24
                          128.127.128.0/20 maxlen: 24
                          146.247.88.0/21 maxlen: 24
                          149.255.136.0/21 maxlen: 24
                          178.249.160.0/21 maxlen: 24
                          185.15.128.0/22 maxlen: 24
                          185.42.132.0/22 maxlen: 24
                          185.49.120.0/23 maxlen: 24
                          185.49.122.0/24 maxlen: 24
                          185.65.224.0/22 maxlen: 24
                          185.67.88.0/22 maxlen: 24
                          185.79.148.0/22 maxlen: 24
                          185.90.96.0/22 maxlen: 24
                          185.95.120.0/22 maxlen: 24
                          185.138.104.0/22 maxlen: 24
                          185.149.8.0/22 maxlen: 24
                          185.172.16.0/22 maxlen: 24
                          185.196.248.0/22 maxlen: 24
                          185.204.140.0/22 maxlen: 24
                          185.208.248.0/22 maxlen: 24
                          185.247.248.0/22 maxlen: 24
                          188.66.56.0/22 maxlen: 24
                          193.3.24.0/24 maxlen: 24
                          193.27.194.0/23 maxlen: 24
                          193.41.95.0/24 maxlen: 24
                          193.47.139.0/24 maxlen: 24
                          193.84.100.0/24 maxlen: 24
                          193.108.197.0/24 maxlen: 24
                          193.222.142.0/23 maxlen: 24
                          193.222.188.0/23 maxlen: 24
                          194.177.32.0/19 maxlen: 24
                          195.214.240.0/21 maxlen: 24
                          212.51.160.0/19 maxlen: 24
                          213.108.64.0/21 maxlen: 24
                          213.151.166.0/24 maxlen: 24
                          213.151.168.0/23 maxlen: 24
                          213.151.171.0/24 maxlen: 24
                          213.151.172.0/23 maxlen: 24
                          213.151.174.0/24 maxlen: 24
                          213.151.175.0/24 maxlen: 24
                          2a00:bc80::/32 maxlen: 32
                          2a01:6d8::/32 maxlen: 32
                          2a01:728::/29 maxlen: 48
                          2a03:4c00::/29 maxlen: 48
                          2a03:bf40::/32 maxlen: 32
                          2a05:df00::/29 maxlen: 29
                          2a0d:4240::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:09:aa:0a:22:f4:58:e0:e0:5e:54:f6:33:9b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
        Validity
            Not Before: Jan  1 04:18:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e862c1f66b47b50f62800ba0afe9d4f8d9ce2f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cb:a1:43:c2:ff:90:2c:d2:32:e8:b0:1c:4b:
                    67:d6:50:2a:08:bd:ed:af:c0:e2:5b:85:8a:1c:17:
                    83:3f:c6:58:5e:41:a8:eb:b0:cb:14:4d:f5:70:64:
                    6b:cf:97:a6:f6:f9:d2:84:db:03:3a:a5:47:fa:0e:
                    04:57:ea:8f:1c:53:f5:39:58:a4:80:5b:8b:70:dd:
                    72:57:6a:ce:fd:96:31:b6:41:8c:06:fa:aa:06:86:
                    e3:d3:9d:a6:e9:17:68:e1:7e:07:2a:39:92:54:07:
                    df:78:59:2d:53:32:1e:fb:44:f3:ba:3b:76:6f:d3:
                    16:56:cb:62:27:62:b0:e4:f4:cf:44:85:7a:3f:f9:
                    ec:ef:aa:af:b6:fe:14:4a:f6:de:a9:42:c0:eb:87:
                    79:6a:7d:1f:c8:6b:38:89:10:ea:ac:73:94:19:2d:
                    40:55:0f:b2:68:b8:48:e5:98:25:18:00:49:e9:84:
                    e4:d3:60:f7:96:5b:c8:f4:ce:68:75:8f:eb:ad:af:
                    36:9b:f4:47:fd:3f:4e:af:58:89:bd:f8:da:ee:a1:
                    20:75:19:cc:50:ee:42:e9:0f:76:7e:7a:b5:07:c0:
                    22:51:21:40:93:b7:53:6f:9b:45:5f:51:9c:08:66:
                    6c:dc:95:c6:46:a8:47:5e:c7:56:ed:77:00:a7:e1:
                    bb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:62:C1:F6:6B:47:B5:0F:62:80:0B:A0:AF:E9:D4:F8:D9:CE:2F:92
            X509v3 Authority Key Identifier:
                keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/6GLB9mtHtQ9igAugr-nU-NnOL5I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.252.0/22
                  37.18.160.0/20
                  37.58.128.0/17
                  37.157.8.0-37.157.10.255
                  37.157.12.0/22
                  37.157.60.0/22
                  45.142.172.0/22
                  45.145.124.0/22
                  46.20.160.0/20
                  62.102.224.0/19
                  62.244.70.0-62.244.75.255
                  62.244.80.0/23
                  62.244.90.0-62.244.93.255
                  79.98.96.0/21
                  81.22.216.0/21
                  89.38.200.0/21
                  91.103.232.0/21
                  91.205.156.0/24
                  91.206.156.0/23
                  91.217.94.0/23
                  91.229.230.0/23
                  92.61.72.0/21
                  93.113.136.0/21
                  94.127.8.0/21
                  103.73.172.0/22
                  103.77.32.0/22
                  103.229.36.0/23
                  103.232.172.0/22
                  109.69.192.0/21
                  109.237.240.0/20
                  128.127.128.0/20
                  146.247.88.0/21
                  149.255.136.0/21
                  178.249.160.0/21
                  185.15.128.0/22
                  185.42.132.0/22
                  185.49.120.0-185.49.122.255
                  185.65.224.0/22
                  185.67.88.0/22
                  185.79.148.0/22
                  185.90.96.0/22
                  185.95.120.0/22
                  185.138.104.0/22
                  185.149.8.0/22
                  185.172.16.0/22
                  185.196.248.0/22
                  185.204.140.0/22
                  185.208.248.0/22
                  185.247.248.0/22
                  188.66.56.0/22
                  193.3.24.0/24
                  193.27.194.0/23
                  193.41.95.0/24
                  193.47.139.0/24
                  193.84.100.0/24
                  193.108.197.0/24
                  193.222.142.0/23
                  193.222.188.0/23
                  194.177.32.0/19
                  195.214.240.0/21
                  212.51.160.0/19
                  213.108.64.0/21
                  213.151.166.0/24
                  213.151.168.0/23
                  213.151.171.0-213.151.175.255
                IPv6:
                  2a00:bc80::/32
                  2a01:6d8::/32
                  2a01:728::/29
                  2a03:4c00::/29
                  2a03:bf40::/32
                  2a05:df00::/29
                  2a0d:4240::/29

    Signature Algorithm: sha256WithRSAEncryption
         7e:54:a6:eb:7d:05:19:83:94:01:15:68:76:ec:05:44:1a:fd:
         0b:35:0d:4b:4c:d4:e1:67:aa:c5:a5:f2:2d:51:44:2f:5b:e6:
         2f:9e:d4:a3:8a:61:55:74:2a:ac:15:8d:7b:d1:f7:0c:4a:5a:
         f5:b3:31:af:23:e5:09:5c:bb:b8:e3:30:49:dd:4a:30:1c:6b:
         83:c6:c4:e2:45:a8:63:a7:ff:f0:98:a5:be:7a:0a:2c:0b:b7:
         e6:ae:1b:e3:41:99:bb:36:4f:39:98:f6:29:07:b8:51:ba:c4:
         84:60:06:e7:76:3b:d2:a6:ec:6c:9f:80:5d:24:56:dc:1e:3a:
         da:a8:00:20:8d:36:33:89:99:da:8b:7f:3d:5c:77:58:ec:7d:
         a9:c3:4c:3f:af:0b:23:d0:9f:c2:ba:d8:24:89:7a:19:2f:d1:
         ea:30:90:92:84:96:83:b9:d0:20:e5:6e:72:1a:2e:58:bc:d2:
         bf:44:3c:9c:ad:d7:6a:ef:6a:5f:3e:c9:1b:b6:a8:fb:14:c9:
         ea:bc:39:0f:63:5c:02:f3:9d:ba:08:1d:91:aa:22:73:71:6c:
         d1:4f:77:9b:ff:0d:1e:ad:fe:e4:b0:b2:fe:c1:cc:13:90:2e:
         91:92:af:fa:9b:e1:cc:fc:26:5f:17:fe:d4:61:b3:86:95:e6:
         08:78:f8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:01:18 2026 by rpki-client