This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/hXp18TXNc2vW47wzTsY3Gjk6q6s.roa
File:                     hXp18TXNc2vW47wzTsY3Gjk6q6s.roa (raw, json)
Hash identifier:          DJL0LKz36E1xLvywkMqqpfB2MQ9fCk5DPu9pByzXtDE=
Subject key identifier:   85:7A:75:F1:35:CD:73:6B:D6:E3:BC:33:4E:C6:37:1A:39:3A:AB:AB
Certificate issuer:       /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial:       019B3719186E06CB9F135C8E3E37814A9BC0
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/hXp18TXNc2vW47wzTsY3Gjk6q6s.roa
Signing time:             Fri 19 Dec 2025 14:52:30 +0000
ROA not before:           Fri 19 Dec 2025 14:52:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     26548
IP address blocks:        5.181.170.0/24 maxlen: 24
                          5.183.252.0/24 maxlen: 24
                          45.10.167.0/24 maxlen: 24
                          45.66.208.0/24 maxlen: 24
                          45.132.184.0/24 maxlen: 24
                          45.148.124.0/24 maxlen: 24
                          77.220.192.0/24 maxlen: 24
                          77.220.193.0/24 maxlen: 24
                          77.220.194.0/24 maxlen: 24
                          77.220.195.0/24 maxlen: 24
                          91.132.198.0/24 maxlen: 24
                          93.177.118.0/23 maxlen: 24
                          147.78.180.0/24 maxlen: 24
                          147.78.182.0/24 maxlen: 24
                          147.78.183.0/24 maxlen: 24
                          185.61.217.0/24 maxlen: 24
                          185.61.218.0/24 maxlen: 24
                          185.61.219.0/24 maxlen: 24
                          185.61.221.0/24 maxlen: 24
                          185.61.222.0/24 maxlen: 24
                          185.61.223.0/24 maxlen: 24
                          185.77.220.0/24 maxlen: 24
                          185.77.222.0/24 maxlen: 24
                          185.77.223.0/24 maxlen: 24
                          185.88.100.0/24 maxlen: 24
                          194.104.8.0/24 maxlen: 24
                          194.104.11.0/24 maxlen: 24
                          213.108.0.0/24 maxlen: 24
                          217.145.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 23:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:37:19:18:6e:06:cb:9f:13:5c:8e:3e:37:81:4a:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
        Validity
            Not Before: Dec 19 14:52:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=857a75f135cd736bd6e3bc334ec6371a393aabab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:31:dc:76:bd:bd:48:65:eb:cd:a4:88:0e:0d:
                    f9:20:6d:46:02:46:3b:63:2f:99:72:8a:6f:b0:63:
                    1f:88:6d:1f:39:c9:d0:ad:7e:eb:ce:60:ef:20:aa:
                    7e:1c:c2:68:7b:b8:82:ec:e3:96:ed:4b:df:58:f1:
                    7a:e6:5b:1b:d0:d3:1a:54:61:91:9a:18:98:39:48:
                    3f:57:66:13:d7:2e:c7:6e:c7:f5:c9:de:2a:0b:d5:
                    ed:8e:84:95:7a:af:a3:1d:5d:e7:e0:45:18:d4:ed:
                    f0:37:e8:d1:b8:e4:9a:89:51:fb:55:df:cd:bd:30:
                    38:16:be:77:c0:b2:ed:52:b9:6e:7c:2f:a4:cf:c7:
                    a9:20:92:c1:c0:3f:22:6b:c1:ef:18:af:6c:97:aa:
                    c9:2a:51:46:0d:b6:f8:1b:ed:9b:af:49:15:6c:67:
                    22:dc:4a:a0:f5:68:cc:07:1e:45:51:c6:f7:5b:4e:
                    b1:63:00:f7:c9:27:29:1a:0e:89:ef:97:57:80:ec:
                    32:eb:33:f6:6d:95:e8:db:43:b4:bc:8a:68:80:41:
                    b6:00:28:2b:a6:6d:39:7e:ce:49:64:97:f3:e8:56:
                    35:ac:94:35:7d:c8:fd:82:85:1d:14:b5:c1:05:48:
                    6c:c5:0a:32:a3:5c:40:64:b5:bb:f5:a2:54:47:28:
                    a4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7A:75:F1:35:CD:73:6B:D6:E3:BC:33:4E:C6:37:1A:39:3A:AB:AB
            X509v3 Authority Key Identifier:
                keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/hXp18TXNc2vW47wzTsY3Gjk6q6s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.170.0/24
                  5.183.252.0/24
                  45.10.167.0/24
                  45.66.208.0/24
                  45.132.184.0/24
                  45.148.124.0/24
                  77.220.192.0/22
                  91.132.198.0/24
                  93.177.118.0/23
                  147.78.180.0/24
                  147.78.182.0/23
                  185.61.217.0-185.61.219.255
                  185.61.221.0-185.61.223.255
                  185.77.220.0/24
                  185.77.222.0/23
                  185.88.100.0/24
                  194.104.8.0/24
                  194.104.11.0/24
                  213.108.0.0/24
                  217.145.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:0b:cc:07:10:1a:21:9d:6a:dc:bd:3c:64:d9:38:d0:4f:6e:
         69:0f:a3:2c:58:78:d9:73:1e:01:43:d3:00:94:57:e5:c4:db:
         8b:ae:2c:be:e2:3d:f7:a0:3c:4b:a7:e3:16:b6:ce:db:48:e3:
         0e:a6:a6:57:1b:4f:d9:6f:d1:73:af:24:2b:71:51:be:05:1d:
         ea:4d:7d:93:d9:97:67:05:dc:b1:8e:b9:7f:8f:30:a5:d8:4c:
         9a:e6:8b:bc:ea:12:b4:22:84:2e:96:fa:7d:5b:84:78:63:f1:
         0d:80:62:39:6a:4c:93:c6:03:bf:7b:23:c7:55:fb:38:cd:2e:
         c2:7d:f6:8c:b1:18:3e:97:0e:7a:fa:e3:27:b0:4c:ba:cc:12:
         32:d3:4c:49:76:9a:ff:22:07:a3:dd:7f:63:f6:ee:84:cc:ae:
         09:1d:2f:22:4a:2a:53:56:f5:28:4b:3f:de:38:33:3f:f5:e4:
         23:54:3f:bc:bd:a1:f4:55:37:08:2f:16:0f:fb:9a:56:3d:9f:
         0e:33:29:67:0f:f3:f1:3c:48:0d:08:c5:f6:97:17:f6:01:36:
         30:6e:79:ba:7b:c8:af:a0:5d:d8:9f:2f:eb:57:ae:06:9b:b1:
         95:9b:7a:55:73:ad:34:a9:5b:33:df:ca:71:7d:0c:06:f0:13:
         f5:c9:10:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 04:36:06 2025 by rpki-client