This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mHmtVfH7qq7UQ_eMGo8nWbLrfTE.roa
File:                     mHmtVfH7qq7UQ_eMGo8nWbLrfTE.roa (raw, json)
Hash identifier:          ddQ7814l11yzfsTAlf/6l/QmLD/rjfoAvAc3gEz5oSo=
Subject key identifier:   98:79:AD:55:F1:FB:AA:AE:D4:43:F7:8C:1A:8F:27:59:B2:EB:7D:31
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       019B0CFA0361F2BB1F6F84479C4DA7586766
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mHmtVfH7qq7UQ_eMGo8nWbLrfTE.roa
Signing time:             Thu 11 Dec 2025 10:34:30 +0000
ROA not before:           Thu 11 Dec 2025 10:34:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     6079
IP address blocks:        2a05:b300::/29 maxlen: 32
                          2a06:1184:11::/48 maxlen: 48
                          2a06:35c3:100::/48 maxlen: 48
                          2a09:17c1:4a::/48 maxlen: 48
                          2a0a:2d06:66::/48 maxlen: 48
                          2a0c:7882:2::/48 maxlen: 48
                          2a0e:15c7:101::/48 maxlen: 48
                          2a0e:1a83:99::/48 maxlen: 48
                          2a0e:c786:122::/48 maxlen: 48
                          2a0e:c787:1000::/48 maxlen: 48
                          2a0e:f600:2a::/48 maxlen: 48
                          2a0f:1200:10::/48 maxlen: 48
                          2a0f:1206:66::/48 maxlen: 48
                          2a0f:1584:6::/48 maxlen: 48
                          2a0f:18c0::/29 maxlen: 32
                          2a0f:1e80:1986::/48 maxlen: 48
                          2a0f:1fc0::/29 maxlen: 32
                          2a0f:3046:85::/48 maxlen: 48
                          2a0f:3047:fe48::/48 maxlen: 48
                          2a0f:3d80:1312::/48 maxlen: 48
                          2a0f:7d00:100::/48 maxlen: 48
                          2a0f:bc04:1004::/48 maxlen: 48
                          2a0f:da40::/29 maxlen: 32
                          2a0f:de40::/29 maxlen: 32
                          2a0f:e1c0:1312::/48 maxlen: 48
                          2a0f:e1c7:77::/48 maxlen: 48
                          2a0f:e202:33::/48 maxlen: 48
                          2a0f:e207:fd38::/48 maxlen: 48
                          2a0f:e740::/29 maxlen: 32
                          2a0f:e7c7:b4::/48 maxlen: 48
                          2a0f:ea44:55::/48 maxlen: 48
                          2a0f:ea44:acab::/48 maxlen: 48
                          2a0f:ec00::/29 maxlen: 29
                          2a10:4e00::/29 maxlen: 32
                          2a10:67c2:d6::/48 maxlen: 48
                          2a10:67c5:2::/48 maxlen: 48
                          2a10:6f00::/29 maxlen: 32
                          2a10:7700::/29 maxlen: 32
                          2a12:ac46:77::/48 maxlen: 48
                          2a12:ac46:99::/48 maxlen: 48
                          2a12:ecc0:11::/48 maxlen: 48
                          2a12:ecc0:3e2::/48 maxlen: 48
                          2a13:18c5:11::/48 maxlen: 48
                          2a13:18c6:101::/48 maxlen: 48
                          2a13:18c6:8512::/48 maxlen: 48
                          2a13:2c40::/29 maxlen: 32
                          2a13:8100::/29 maxlen: 32
                          2a13:8c86:88::/48 maxlen: 48
                          2a13:8c86:10a::/48 maxlen: 48
                          2a13:9180::/29 maxlen: 32
                          2a13:9285:100::/48 maxlen: 48
                          2a13:c900:120::/48 maxlen: 48
                          2a13:e100:323::/48 maxlen: 48
                          2a13:e102:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0c:fa:03:61:f2:bb:1f:6f:84:47:9c:4d:a7:58:67:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Dec 11 10:34:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9879ad55f1fbaaaed443f78c1a8f2759b2eb7d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:95:0c:b2:1f:8d:9c:c8:5c:ee:76:a3:43:5b:
                    98:92:74:cc:04:98:b4:53:a0:ef:23:f8:9a:74:74:
                    5d:f9:02:87:c7:45:cd:99:b8:df:03:c6:2b:54:7c:
                    b4:85:66:bf:6a:be:1a:33:15:0c:b7:94:b9:18:a5:
                    15:71:84:1d:e4:54:6f:79:aa:2a:bf:eb:e7:b5:6b:
                    d1:cf:a5:f5:b3:dc:c0:79:d8:7e:b8:e8:4b:bf:2d:
                    d2:31:d6:2f:c8:ad:94:08:dc:c1:f9:b1:2b:de:28:
                    d0:40:7d:a8:10:1a:d7:e3:08:b1:9a:78:53:dc:a8:
                    f0:2e:40:03:3b:53:0a:26:db:5f:2c:5a:9a:f0:23:
                    8f:e6:22:68:c6:90:d2:f0:af:f2:84:d1:7b:23:f5:
                    16:f5:1c:1e:bd:e6:b9:6e:14:ba:32:2f:ac:56:bd:
                    6f:dc:3b:f1:22:50:9f:50:dc:9f:7f:2e:fe:a4:a8:
                    5a:cc:56:cb:c0:9d:6f:4a:ed:ab:b9:19:04:4f:71:
                    d5:c0:14:86:7b:e7:6b:96:89:b7:c4:56:ca:e0:23:
                    79:c5:da:06:2d:c0:a2:d4:e0:70:81:a3:f9:20:02:
                    36:7e:22:c5:75:63:49:3e:c9:3d:2d:f2:a8:e1:42:
                    61:91:2e:01:35:86:6e:bd:7e:01:ac:da:5e:5d:28:
                    06:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:79:AD:55:F1:FB:AA:AE:D4:43:F7:8C:1A:8F:27:59:B2:EB:7D:31
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mHmtVfH7qq7UQ_eMGo8nWbLrfTE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:b300::/29
                  2a06:1184:11::/48
                  2a06:35c3:100::/48
                  2a09:17c1:4a::/48
                  2a0a:2d06:66::/48
                  2a0c:7882:2::/48
                  2a0e:15c7:101::/48
                  2a0e:1a83:99::/48
                  2a0e:c786:122::/48
                  2a0e:c787:1000::/48
                  2a0e:f600:2a::/48
                  2a0f:1200:10::/48
                  2a0f:1206:66::/48
                  2a0f:1584:6::/48
                  2a0f:18c0::/29
                  2a0f:1e80:1986::/48
                  2a0f:1fc0::/29
                  2a0f:3046:85::/48
                  2a0f:3047:fe48::/48
                  2a0f:3d80:1312::/48
                  2a0f:7d00:100::/48
                  2a0f:bc04:1004::/48
                  2a0f:da40::/29
                  2a0f:de40::/29
                  2a0f:e1c0:1312::/48
                  2a0f:e1c7:77::/48
                  2a0f:e202:33::/48
                  2a0f:e207:fd38::/48
                  2a0f:e740::/29
                  2a0f:e7c7:b4::/48
                  2a0f:ea44:55::/48
                  2a0f:ea44:acab::/48
                  2a0f:ec00::/29
                  2a10:4e00::/29
                  2a10:67c2:d6::/48
                  2a10:67c5:2::/48
                  2a10:6f00::/29
                  2a10:7700::/29
                  2a12:ac46:77::/48
                  2a12:ac46:99::/48
                  2a12:ecc0:11::/48
                  2a12:ecc0:3e2::/48
                  2a13:18c5:11::/48
                  2a13:18c6:101::/48
                  2a13:18c6:8512::/48
                  2a13:2c40::/29
                  2a13:8100::/29
                  2a13:8c86:88::/48
                  2a13:8c86:10a::/48
                  2a13:9180::/29
                  2a13:9285:100::/48
                  2a13:c900:120::/48
                  2a13:e100:323::/48
                  2a13:e102:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:29:02:26:98:2a:af:bc:12:a6:e4:8a:ed:12:a1:a5:4a:72:
         3d:c1:af:3f:e7:f4:3a:85:e4:a6:5f:63:f3:89:9e:de:d3:eb:
         30:b9:ac:64:f1:83:f1:ff:fa:1b:a5:02:78:d8:d2:9f:c5:d1:
         d8:12:23:b7:d1:fa:d6:2a:9a:6b:b2:d8:bf:db:57:e2:84:cb:
         0a:e8:bd:15:b7:4d:b3:c7:60:86:5a:53:7c:bb:24:99:5d:67:
         62:91:45:27:20:d3:20:4d:95:81:63:de:4f:c8:29:fc:3a:d7:
         01:35:0d:d1:48:4d:06:40:eb:e7:e0:d2:0a:e8:16:fc:d6:fe:
         c7:0a:59:9b:7d:07:be:7d:f4:22:34:7b:de:a7:2c:59:0f:4e:
         d9:76:b4:20:5b:38:2e:5f:0f:58:1e:27:ec:c5:f2:ed:00:fd:
         da:76:da:3b:2a:01:22:41:80:67:21:3b:f0:11:c6:b9:3b:bb:
         61:b6:de:53:54:44:78:3d:3e:3b:4f:17:be:4f:fb:b1:62:3a:
         80:b4:21:aa:a5:39:35:c1:2d:0b:9e:dc:61:03:1b:c6:83:c2:
         a3:9e:cf:a0:53:af:62:2f:96:ce:fa:ae:bb:24:80:e0:df:15:
         a1:cf:ee:58:6a:13:85:d9:fc:e2:5d:a2:62:eb:e8:44:1f:7d:
         c5:84:4b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:17:27 2025 by rpki-client