This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/dyKVgNsjZxg_ms1n2E7Bfw10stc.roa
File:                     dyKVgNsjZxg_ms1n2E7Bfw10stc.roa (raw, json)
Hash identifier:          BqmZyOOtyNCSkSJ7x/mGSb0glowMzHs3l/S8+cc3Vzw=
Subject key identifier:   77:22:95:80:DB:23:67:18:3F:9A:CD:67:D8:4E:C1:7F:0D:74:B2:D7
Certificate issuer:       /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial:       019B7D5AF3D6DC9B246B189267FB9C8A3DBC
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/dyKVgNsjZxg_ms1n2E7Bfw10stc.roa
Signing time:             Fri 02 Jan 2026 06:17:51 +0000
ROA not before:           Fri 02 Jan 2026 06:17:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204548
IP address blocks:        45.83.41.0/24 maxlen: 24
                          63.250.59.0/24 maxlen: 24
                          63.250.60.0/24 maxlen: 24
                          81.28.6.0/24 maxlen: 24
                          83.229.84.0/24 maxlen: 24
                          83.229.85.0/24 maxlen: 24
                          83.229.86.0/24 maxlen: 24
                          83.229.87.0/24 maxlen: 24
                          103.13.211.0/24 maxlen: 24
                          103.240.144.0/24 maxlen: 24
                          185.47.174.0/24 maxlen: 24
                          185.53.210.0/24 maxlen: 24
                          185.139.230.0/24 maxlen: 24
                          185.181.10.0/24 maxlen: 24
                          185.227.108.0/24 maxlen: 24
                          185.227.111.0/24 maxlen: 24
                          185.237.14.0/24 maxlen: 24
                          185.237.15.0/24 maxlen: 24
                          185.237.96.0/24 maxlen: 24
                          185.237.97.0/24 maxlen: 24
                          185.247.118.0/24 maxlen: 24
                          194.36.88.0/24 maxlen: 24
                          194.37.80.0/24 maxlen: 24
                          195.238.122.0/24 maxlen: 24
                          2a06:c5c0:1100::/48 maxlen: 48
                          2a07:3b80:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5a:f3:d6:dc:9b:24:6b:18:92:67:fb:9c:8a:3d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
        Validity
            Not Before: Jan  2 06:17:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=77229580db2367183f9acd67d84ec17f0d74b2d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:61:2a:06:c0:0f:ec:54:aa:fc:cf:a3:d7:7f:
                    71:65:33:f9:0c:fc:e7:27:27:10:52:01:09:7e:0e:
                    1a:61:2b:8a:84:de:4c:70:92:33:d3:f8:66:87:62:
                    95:c5:41:13:0d:1e:6d:cd:fb:ce:35:22:f7:3b:a4:
                    be:b6:6f:82:2c:d9:77:b3:a8:0c:40:d4:4b:b9:b6:
                    46:34:85:ae:dc:ad:a0:22:9a:d7:54:9c:47:a6:4d:
                    19:95:dd:f9:53:cd:a5:83:7b:a5:4c:2e:d2:48:d9:
                    9f:67:5e:0e:a7:66:a2:0c:1c:5f:dc:e1:cc:29:16:
                    f6:1e:a0:62:94:a9:c6:a4:eb:35:2e:3a:70:4d:02:
                    e0:ca:cb:9f:8f:33:e5:6d:4c:2c:ea:f4:d0:6d:f8:
                    57:19:9b:c2:65:71:39:93:9f:79:43:46:84:2b:f2:
                    13:6e:00:9e:89:94:53:37:35:55:7a:47:7f:7b:72:
                    7f:26:d5:e3:c9:4d:a3:1e:24:16:5f:b1:d3:8d:c9:
                    31:f1:f2:4a:12:c1:01:4c:25:df:3b:a4:f9:61:ce:
                    4a:43:5e:fd:d8:a6:05:bc:f7:8f:29:bf:2d:94:e7:
                    39:28:68:05:74:98:2e:52:89:60:76:46:b8:f6:a4:
                    67:9e:ec:06:4f:81:8b:be:df:b4:d1:8f:05:ef:df:
                    6d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:22:95:80:DB:23:67:18:3F:9A:CD:67:D8:4E:C1:7F:0D:74:B2:D7
            X509v3 Authority Key Identifier:
                keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/dyKVgNsjZxg_ms1n2E7Bfw10stc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.83.41.0/24
                  63.250.59.0-63.250.60.255
                  81.28.6.0/24
                  83.229.84.0/22
                  103.13.211.0/24
                  103.240.144.0/24
                  185.47.174.0/24
                  185.53.210.0/24
                  185.139.230.0/24
                  185.181.10.0/24
                  185.227.108.0/24
                  185.227.111.0/24
                  185.237.14.0/23
                  185.237.96.0/23
                  185.247.118.0/24
                  194.36.88.0/24
                  194.37.80.0/24
                  195.238.122.0/24
                IPv6:
                  2a06:c5c0:1100::/48
                  2a07:3b80:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:32:8a:0e:16:cf:01:31:7b:33:8e:f3:8b:d0:3b:55:ea:13:
         f8:66:6a:77:08:09:4d:08:42:52:c7:9e:ca:7a:dd:80:cc:ad:
         bb:2e:a2:e6:11:35:3a:b7:3c:ce:ef:41:cb:9b:e4:ef:b9:7b:
         30:3f:a9:78:21:b2:ea:c1:6f:00:15:84:99:54:34:c2:ce:5d:
         be:b3:56:da:3b:a0:f2:dd:8a:6f:f0:51:46:63:8f:60:cd:6a:
         c5:f2:5f:51:0e:d0:30:6a:4c:db:7a:c4:79:4f:bd:4b:39:cd:
         6c:6c:5a:02:a4:a9:c0:8e:1d:4d:cb:37:88:eb:da:b1:8e:f7:
         cc:0f:ff:f1:31:38:df:3e:4d:26:1b:19:80:bf:7a:4e:8f:83:
         c6:ee:94:c2:3f:81:35:3c:bc:1b:e9:74:42:32:6a:68:4c:51:
         4a:3e:fc:4d:62:6a:6f:96:6b:8a:39:05:11:6c:89:8a:db:07:
         fb:b3:8d:be:c8:1e:06:6f:60:6a:1d:f8:1c:38:70:ef:b3:3f:
         4c:59:51:92:55:ab:78:1a:a3:ba:23:09:4c:33:df:35:07:00:
         17:7f:4b:40:43:34:b4:92:88:a6:d5:4b:99:3d:27:7f:0a:83:
         0e:19:2e:ad:00:f8:f2:f7:bc:64:20:1c:b9:db:a5:22:fc:f5:
         82:23:6e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:14:22 2026 by rpki-client