This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/AdpJzB_165_vM-A0xjZgLE7S2dw.roa
File:                     AdpJzB_165_vM-A0xjZgLE7S2dw.roa (raw, json)
Hash identifier:          zlL9iaw9WKsny1uLvqLWpTrCWRCeCZOD3cYS5HwhgqI=
Subject key identifier:   01:DA:49:CC:1F:F5:EB:9F:EF:33:E0:34:C6:36:60:2C:4E:D2:D9:DC
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       019B2990BD4C1FA8B27FD1401E94352B7C13
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/AdpJzB_165_vM-A0xjZgLE7S2dw.roa
Signing time:             Tue 16 Dec 2025 23:48:30 +0000
ROA not before:           Tue 16 Dec 2025 23:48:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215727
IP address blocks:        45.136.0.0/24 maxlen: 32
                          45.136.2.0/24 maxlen: 32
                          45.136.3.0/24 maxlen: 32
                          128.0.119.0/24 maxlen: 32
                          185.117.21.0/24 maxlen: 32
                          185.117.23.0/24 maxlen: 32
                          185.144.100.0/24 maxlen: 32
                          185.144.101.0/24 maxlen: 32
                          185.144.102.0/24 maxlen: 32
                          185.211.48.0/24 maxlen: 32
                          185.211.49.0/24 maxlen: 32
                          185.211.50.0/24 maxlen: 32
                          185.227.240.0/24 maxlen: 32
                          185.227.241.0/24 maxlen: 32
                          185.227.242.0/24 maxlen: 32
                          185.227.243.0/24 maxlen: 32
                          193.201.208.0/24 maxlen: 32
                          193.201.209.0/24 maxlen: 32
                          193.201.210.0/24 maxlen: 32
                          193.201.211.0/24 maxlen: 32
                          194.36.102.0/24 maxlen: 32
                          194.36.103.0/24 maxlen: 32
                          194.124.64.0/24 maxlen: 32
                          194.124.66.0/24 maxlen: 32
                          194.124.67.0/24 maxlen: 32
                          195.85.68.0/24 maxlen: 32
                          195.85.69.0/24 maxlen: 32
                          195.85.70.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:29:90:bd:4c:1f:a8:b2:7f:d1:40:1e:94:35:2b:7c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Dec 16 23:48:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=01da49cc1ff5eb9fef33e034c636602c4ed2d9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2f:de:8f:77:13:b5:b6:20:c9:d4:92:e2:d5:
                    fa:ca:50:8a:32:90:86:6e:af:dd:92:ff:ad:05:ac:
                    20:36:ff:a5:0f:e5:36:03:a1:7c:ae:0e:7d:1a:bc:
                    b9:c1:3a:c5:df:88:fa:46:7a:96:cc:e7:92:30:e1:
                    5c:1a:d0:c4:1d:4e:79:a9:41:b1:b0:02:8b:b2:ed:
                    ee:51:e7:20:40:73:30:f4:98:b6:f1:f5:16:93:65:
                    f7:4b:7d:2b:49:6c:4b:5b:2f:26:d2:83:ec:55:66:
                    8c:58:ee:8f:89:4f:a7:86:28:d1:48:23:e3:68:0c:
                    d9:c8:77:1c:15:08:0c:e3:3b:0d:59:6c:44:88:87:
                    78:cc:05:f4:a9:c3:d1:be:01:ba:0e:80:8a:f7:18:
                    85:34:1e:c2:fd:f1:12:f5:ac:31:d5:2f:05:b6:1d:
                    ad:ea:b4:70:db:c6:cf:0e:16:f8:91:ab:d9:f0:f4:
                    6d:a4:86:c5:d4:18:1e:77:92:10:61:b8:25:e9:a7:
                    ba:21:a7:ae:1b:cb:6f:9e:c5:05:18:18:50:59:26:
                    19:58:db:f3:6f:39:fe:16:9e:02:c4:2b:18:74:f3:
                    b0:b5:c8:15:cc:77:57:fe:74:47:3d:e3:f1:48:ef:
                    48:d1:23:bb:70:e7:7b:07:5c:d4:e9:55:8d:ba:9e:
                    20:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DA:49:CC:1F:F5:EB:9F:EF:33:E0:34:C6:36:60:2C:4E:D2:D9:DC
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/AdpJzB_165_vM-A0xjZgLE7S2dw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.0.0/24
                  45.136.2.0/23
                  128.0.119.0/24
                  185.117.21.0/24
                  185.117.23.0/24
                  185.144.100.0-185.144.102.255
                  185.211.48.0-185.211.50.255
                  185.227.240.0/22
                  193.201.208.0/22
                  194.36.102.0/23
                  194.124.64.0/24
                  194.124.66.0/23
                  195.85.68.0-195.85.70.255

    Signature Algorithm: sha256WithRSAEncryption
         ae:31:6c:7c:c7:2b:96:75:42:a4:c2:ef:14:3f:13:45:d3:66:
         6a:4c:41:d2:15:81:04:fc:47:87:be:f5:2a:2f:35:bb:ce:b1:
         d7:4f:a8:4f:04:d9:87:7f:37:aa:e8:ea:ca:ca:a2:d1:f0:03:
         ee:34:a8:75:e3:b1:06:83:75:5a:d6:b3:af:fe:8a:af:5d:da:
         7c:6c:69:8d:39:7f:7c:5e:c2:76:2e:84:dd:4a:28:d9:3c:7d:
         34:b8:e0:34:8d:4d:7d:3d:63:fd:14:cd:d1:20:c3:a7:9c:20:
         b4:ae:3e:a6:0c:44:37:d1:47:41:61:75:bd:07:4d:11:a4:75:
         e3:c8:10:75:94:6e:ac:94:67:cb:49:41:1e:d7:48:d2:61:0a:
         32:89:f4:4b:d2:40:9b:2c:f8:b9:9f:be:a4:af:00:4e:ee:b7:
         04:55:c1:24:ae:31:1f:d6:d7:48:bb:4a:7d:0c:dc:ac:89:8a:
         60:66:00:cf:69:f4:8e:ed:0c:da:62:5b:59:2e:91:83:aa:b1:
         d8:54:8e:4b:18:64:61:9e:1d:b1:a0:fd:e5:b4:e9:2e:f2:84:
         48:a6:35:0d:b4:ea:91:7f:e7:9b:84:0b:51:25:41:9b:08:92:
         c7:f2:de:43:7d:6a:62:cc:f5:05:5b:51:bc:10:b2:18:cd:fb:
         bc:60:75:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 20:07:23 2025 by rpki-client