This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/unZltpWjHIJfFpLIwg4b58uUsuU.roa
File:                     unZltpWjHIJfFpLIwg4b58uUsuU.roa (raw, json)
Hash identifier:          hb7AVSL7Cg4MYbwSNaPjN4NWBI4LlWAD7QoGarhaIFE=
Subject key identifier:   BA:76:65:B6:95:A3:1C:82:5F:16:92:C8:C2:0E:1B:E7:CB:94:B2:E5
Certificate issuer:       /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial:       019B7F83607F5930ECBDEFF799ED23031108
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/unZltpWjHIJfFpLIwg4b58uUsuU.roa
Signing time:             Fri 02 Jan 2026 16:21:14 +0000
ROA not before:           Fri 02 Jan 2026 16:21:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51559
IP address blocks:        31.192.208.0/24 maxlen: 24
                          31.192.209.0/24 maxlen: 24
                          31.192.210.0/24 maxlen: 24
                          31.192.213.0/24 maxlen: 24
                          31.192.215.0/24 maxlen: 24
                          89.43.28.0/24 maxlen: 24
                          89.43.29.0/24 maxlen: 24
                          89.43.30.0/24 maxlen: 24
                          89.43.31.0/24 maxlen: 24
                          89.43.64.0/24 maxlen: 24
                          89.43.65.0/24 maxlen: 24
                          89.43.66.0/24 maxlen: 24
                          89.43.67.0/24 maxlen: 24
                          89.252.128.0/24 maxlen: 24
                          89.252.129.0/24 maxlen: 24
                          89.252.130.0/24 maxlen: 24
                          89.252.131.0/24 maxlen: 24
                          89.252.134.0/24 maxlen: 24
                          89.252.135.0/24 maxlen: 24
                          89.252.136.0/24 maxlen: 24
                          89.252.137.0/24 maxlen: 24
                          89.252.139.0/24 maxlen: 24
                          89.252.140.0/24 maxlen: 24
                          89.252.141.0/24 maxlen: 24
                          89.252.143.0/24 maxlen: 24
                          89.252.144.0/24 maxlen: 24
                          89.252.145.0/24 maxlen: 24
                          89.252.146.0/24 maxlen: 24
                          89.252.147.0/24 maxlen: 24
                          89.252.148.0/24 maxlen: 24
                          89.252.150.0/24 maxlen: 24
                          89.252.154.0/24 maxlen: 24
                          89.252.155.0/24 maxlen: 24
                          89.252.156.0/24 maxlen: 24
                          89.252.158.0/24 maxlen: 24
                          89.252.160.0/24 maxlen: 24
                          89.252.161.0/24 maxlen: 24
                          89.252.162.0/24 maxlen: 24
                          89.252.163.0/24 maxlen: 24
                          89.252.164.0/24 maxlen: 24
                          89.252.165.0/24 maxlen: 24
                          89.252.166.0/24 maxlen: 24
                          89.252.167.0/24 maxlen: 24
                          89.252.168.0/24 maxlen: 24
                          89.252.169.0/24 maxlen: 24
                          89.252.170.0/24 maxlen: 24
                          89.252.171.0/24 maxlen: 24
                          89.252.172.0/24 maxlen: 24
                          89.252.173.0/24 maxlen: 24
                          89.252.173.119/32 maxlen: 32
                          89.252.174.0/24 maxlen: 24
                          89.252.175.0/24 maxlen: 24
                          89.252.176.0/24 maxlen: 24
                          89.252.177.0/24 maxlen: 24
                          93.113.60.0/24 maxlen: 24
                          93.113.61.0/24 maxlen: 24
                          93.113.62.0/24 maxlen: 24
                          93.113.63.0/24 maxlen: 24
                          93.115.76.0/24 maxlen: 24
                          93.115.77.0/24 maxlen: 24
                          93.115.78.0/24 maxlen: 24
                          93.115.79.0/24 maxlen: 24
                          94.102.0.0/24 maxlen: 24
                          94.102.1.0/24 maxlen: 24
                          94.102.2.0/24 maxlen: 24
                          94.102.3.0/24 maxlen: 24
                          94.102.4.0/24 maxlen: 24
                          94.102.5.0/24 maxlen: 24
                          94.102.6.0/24 maxlen: 24
                          94.102.7.0/24 maxlen: 24
                          94.102.8.0/24 maxlen: 24
                          94.102.9.0/24 maxlen: 24
                          94.102.10.0/24 maxlen: 24
                          94.102.11.0/24 maxlen: 24
                          94.102.13.0/24 maxlen: 24
                          94.102.14.0/24 maxlen: 24
                          94.102.15.0/24 maxlen: 24
                          95.173.160.0/24 maxlen: 24
                          95.173.161.0/24 maxlen: 24
                          95.173.162.0/24 maxlen: 24
                          95.173.163.0/24 maxlen: 24
                          95.173.164.0/24 maxlen: 24
                          95.173.165.0/24 maxlen: 24
                          95.173.166.0/24 maxlen: 24
                          95.173.167.0/24 maxlen: 24
                          95.173.168.0/24 maxlen: 24
                          95.173.169.0/24 maxlen: 24
                          95.173.170.0/24 maxlen: 24
                          95.173.171.0/24 maxlen: 24
                          95.173.172.0/24 maxlen: 24
                          95.173.177.0/24 maxlen: 24
                          95.173.178.0/24 maxlen: 24
                          95.173.179.0/24 maxlen: 24
                          95.173.180.0/24 maxlen: 24
                          95.173.181.0/24 maxlen: 24
                          95.173.182.0/24 maxlen: 24
                          95.173.183.0/24 maxlen: 24
                          95.173.184.0/24 maxlen: 24
                          95.173.185.0/24 maxlen: 24
                          95.173.186.0/24 maxlen: 24
                          95.173.187.0/24 maxlen: 24
                          95.173.188.0/24 maxlen: 24
                          95.173.189.0/24 maxlen: 24
                          95.173.190.0/24 maxlen: 24
                          95.173.191.0/24 maxlen: 24
                          159.253.32.0/24 maxlen: 24
                          159.253.33.0/24 maxlen: 24
                          159.253.34.0/24 maxlen: 24
                          159.253.35.0/24 maxlen: 24
                          159.253.36.0/24 maxlen: 24
                          159.253.38.0/24 maxlen: 24
                          159.253.39.0/24 maxlen: 24
                          159.253.40.0/24 maxlen: 24
                          159.253.41.0/24 maxlen: 24
                          159.253.42.0/24 maxlen: 24
                          159.253.43.0/24 maxlen: 24
                          159.253.44.0/24 maxlen: 24
                          159.253.45.0/24 maxlen: 24
                          159.253.46.0/24 maxlen: 24
                          159.253.47.0/24 maxlen: 24
                          185.95.84.0/24 maxlen: 24
                          185.95.85.0/24 maxlen: 24
                          185.95.86.0/24 maxlen: 24
                          185.95.87.0/24 maxlen: 24
                          2a02:f80::/32 maxlen: 32
                          2a03:2100::/32 maxlen: 48
                          2a03:2100::/48 maxlen: 48
                          2a03:2100:1::/48 maxlen: 48
                          2a03:2100:2::/48 maxlen: 48
                          2a03:2100:3::/48 maxlen: 48
                          2a03:2100:4::/48 maxlen: 48
                          2a03:2100:5::/48 maxlen: 48
                          2a03:2100:6::/48 maxlen: 48
                          2a03:2100:7::/48 maxlen: 48
                          2a03:2100:8::/48 maxlen: 48
                          2a03:2100:9::/48 maxlen: 48
                          2a03:2100:a::/48 maxlen: 48
                          2a03:2100:b::/48 maxlen: 48
                          2a03:2100:c::/48 maxlen: 48
                          2a03:2100:d::/48 maxlen: 48
                          2a03:2100:e::/48 maxlen: 48
                          2a03:2100:f::/48 maxlen: 48
                          2a03:2100:10::/48 maxlen: 48
                          2a03:2100:11::/48 maxlen: 48
                          2a03:2100:12::/48 maxlen: 48
                          2a03:2100:13::/48 maxlen: 48
                          2a03:2100:14::/48 maxlen: 48
                          2a03:2100:15::/48 maxlen: 48
                          2a03:2100:16::/48 maxlen: 48
                          2a03:2100:17::/48 maxlen: 48
                          2a03:2100:18::/48 maxlen: 48
                          2a03:2100:19::/48 maxlen: 48
                          2a03:2100:1a::/48 maxlen: 48
                          2a03:2100:1b::/48 maxlen: 48
                          2a03:2100:1c::/48 maxlen: 48
                          2a03:2100:1d::/48 maxlen: 48
                          2a03:2100:1e::/48 maxlen: 48
                          2a03:2100:1f::/48 maxlen: 48
                          2a03:2100:20::/48 maxlen: 48
                          2a03:2100:21::/48 maxlen: 48
                          2a03:2100:22::/48 maxlen: 48
                          2a03:2100:23::/48 maxlen: 48
                          2a03:2100:24::/48 maxlen: 48
                          2a03:2100:25::/48 maxlen: 48
                          2a03:2100:26::/48 maxlen: 48
                          2a03:2100:27::/48 maxlen: 48
                          2a03:2100:28::/48 maxlen: 48
                          2a03:2100:29::/48 maxlen: 48
                          2a03:2100:2a::/48 maxlen: 48
                          2a03:2100:2b::/48 maxlen: 48
                          2a03:2100:2c::/48 maxlen: 48
                          2a03:2100:2d::/48 maxlen: 48
                          2a03:2100:2e::/48 maxlen: 48
                          2a03:2100:2f::/48 maxlen: 48
                          2a03:2100:32::/48 maxlen: 48
                          2a03:2100:33::/48 maxlen: 48
                          2a03:2100:34::/48 maxlen: 48
                          2a03:2100:35::/48 maxlen: 48
                          2a03:2100:36::/48 maxlen: 48
                          2a03:2100:37::/48 maxlen: 48
                          2a03:2100:38::/48 maxlen: 48
                          2a03:2100:39::/48 maxlen: 48
                          2a03:2100:3a::/48 maxlen: 48
                          2a03:2100:3b::/48 maxlen: 48
                          2a03:2100:3c::/48 maxlen: 48
                          2a03:2100:3d::/48 maxlen: 48
                          2a03:2100:3e::/48 maxlen: 48
                          2a03:2100:3f::/48 maxlen: 48
                          2a03:2100:40::/48 maxlen: 48
                          2a03:2100:44::/48 maxlen: 48
                          2a03:2102:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:60:7f:59:30:ec:bd:ef:f7:99:ed:23:03:11:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
        Validity
            Not Before: Jan  2 16:21:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ba7665b695a31c825f1692c8c20e1be7cb94b2e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cb:fb:96:36:29:83:93:19:50:de:00:24:7c:
                    f2:95:06:46:98:55:88:33:69:00:57:42:89:2d:99:
                    b1:4a:11:7b:7e:a1:03:d8:b8:fc:e1:89:08:b7:d5:
                    69:aa:11:aa:6e:cf:fc:da:fc:26:4d:7b:0a:97:02:
                    46:63:b4:e3:21:ba:28:21:40:a0:05:06:be:f8:ab:
                    4f:ed:49:73:d6:55:98:c7:97:1d:3f:72:16:33:a8:
                    2c:54:95:8f:3f:7b:7e:ff:ac:16:14:65:dc:c7:58:
                    38:2f:fe:d7:0f:c1:13:ba:0a:62:a9:31:6f:4e:c8:
                    07:d6:94:c1:13:1e:4a:43:c7:fb:34:e8:c1:16:d2:
                    03:2b:0a:87:7f:2d:9a:11:18:53:6f:bd:2e:ef:6c:
                    d0:3e:aa:78:37:6d:5d:3d:27:5e:3b:ce:13:73:be:
                    cd:be:1c:d0:f3:9d:ed:b5:23:d2:4f:39:bb:e7:49:
                    d4:f1:25:47:66:4c:68:77:3b:79:51:2a:48:33:7f:
                    86:ac:19:6f:3b:da:7b:e8:41:75:5c:bb:6c:a9:ef:
                    9d:4e:e5:f3:fb:a3:0a:9a:f2:09:68:31:94:b8:c8:
                    ea:22:c1:c8:bf:c0:28:19:5d:f5:a8:63:0d:49:a9:
                    da:41:a1:e9:2f:50:97:d4:fd:8c:c5:96:0c:b9:b0:
                    4e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:76:65:B6:95:A3:1C:82:5F:16:92:C8:C2:0E:1B:E7:CB:94:B2:E5
            X509v3 Authority Key Identifier:
                keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/unZltpWjHIJfFpLIwg4b58uUsuU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.192.208.0-31.192.210.255
                  31.192.213.0/24
                  31.192.215.0/24
                  89.43.28.0/22
                  89.43.64.0/22
                  89.252.128.0/22
                  89.252.134.0-89.252.137.255
                  89.252.139.0-89.252.141.255
                  89.252.143.0-89.252.148.255
                  89.252.150.0/24
                  89.252.154.0-89.252.156.255
                  89.252.158.0/24
                  89.252.160.0-89.252.177.255
                  93.113.60.0/22
                  93.115.76.0/22
                  94.102.0.0-94.102.11.255
                  94.102.13.0-94.102.15.255
                  95.173.160.0-95.173.172.255
                  95.173.177.0-95.173.191.255
                  159.253.32.0-159.253.36.255
                  159.253.38.0-159.253.47.255
                  185.95.84.0/22
                IPv6:
                  2a02:f80::/32
                  2a03:2100::/32
                  2a03:2102:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:4c:c7:93:ea:54:11:a1:bb:ed:81:ff:97:a4:77:fe:9a:dd:
         6c:e4:02:38:21:c4:84:b2:d0:a8:ce:a8:0b:2c:b9:3b:3b:67:
         53:06:83:99:f6:bf:76:5a:9c:db:5c:00:88:5d:54:51:dd:ff:
         e2:2b:f2:1c:c0:29:7b:a6:08:3c:87:94:1b:6e:7e:97:e2:a5:
         32:3e:fd:e8:d1:c7:24:b8:be:9c:f3:a0:f4:42:c3:da:92:0a:
         09:ac:fd:fc:db:00:15:c3:37:f9:d5:ab:0b:3b:98:85:dc:65:
         1d:12:0a:a9:14:63:63:17:d7:e8:5b:21:47:d6:59:15:b0:6a:
         e4:b8:f0:66:59:a3:a0:af:7a:3b:d5:16:53:57:55:72:d9:fc:
         38:d9:3c:7c:ac:6a:67:ee:06:a1:9f:3f:8b:3d:f9:b1:2c:5f:
         21:8e:73:d1:c1:18:95:33:c4:88:70:e2:59:d4:4a:0a:98:48:
         8f:93:ac:c6:0a:1d:31:40:0f:8e:04:6c:75:17:aa:e6:77:da:
         b2:fa:72:23:ec:89:af:79:e2:d6:65:8f:5e:b3:35:ca:f6:5a:
         7f:c2:f6:4e:8a:0c:96:5c:14:b0:45:d0:14:14:19:de:b0:c6:
         cd:05:a3:0b:60:6d:0e:bf:b8:b8:05:58:42:14:c1:d5:aa:6c:
         e1:81:53:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:39:57 2026 by rpki-client