This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/cVr-fEUUj4vCfyaYRplwJdgq1Vk.roa
File:                     cVr-fEUUj4vCfyaYRplwJdgq1Vk.roa (raw, json)
Hash identifier:          cDeIAyZFNXxKhHCEs2s3M9gLXPPEsB3tzaSl7EEOmiU=
Subject key identifier:   71:5A:FE:7C:45:14:8F:8B:C2:7F:26:98:46:99:70:25:D8:2A:D5:59
Certificate issuer:       /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial:       019B337B6514666F7D2604791BA0F838F498
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/cVr-fEUUj4vCfyaYRplwJdgq1Vk.roa
Signing time:             Thu 18 Dec 2025 22:01:23 +0000
ROA not before:           Thu 18 Dec 2025 22:01:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        85.115.208.0/23 maxlen: 24
                          85.115.210.0/23 maxlen: 24
                          85.115.210.0/24 maxlen: 24
                          213.145.66.0/24 maxlen: 24
                          213.145.68.0/23 maxlen: 23
                          213.145.70.0/23 maxlen: 24
                          213.145.72.0/21 maxlen: 24
                          213.145.82.0/24 maxlen: 24
                          213.145.84.0/23 maxlen: 23
                          213.145.84.0/24 maxlen: 24
                          213.145.86.0/23 maxlen: 23
                          213.145.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:7b:65:14:66:6f:7d:26:04:79:1b:a0:f8:38:f4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
        Validity
            Not Before: Dec 18 22:01:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=715afe7c45148f8bc27f269846997025d82ad559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fe:93:56:02:e3:1c:61:04:8f:d3:75:19:8e:
                    c3:53:28:0e:bb:de:7b:03:f0:36:0b:e2:37:83:8b:
                    1c:c3:2b:63:de:9d:20:59:81:8a:2a:a7:a6:77:74:
                    9d:c1:3f:38:e9:8b:c3:85:a3:83:45:51:a2:ce:91:
                    fd:d7:64:89:7f:ad:2b:6c:d2:3d:5e:61:70:74:db:
                    ca:58:2d:2c:01:7c:b6:c6:6f:2a:94:fc:a6:18:85:
                    52:4f:31:8b:72:a9:d7:01:0e:19:46:71:2e:f2:06:
                    99:34:b6:f8:d5:5a:53:2d:20:02:a9:5d:4c:2d:3b:
                    2e:b2:71:55:e8:28:8a:76:29:c3:30:61:f6:6c:9f:
                    89:cc:da:c6:76:8e:7f:72:46:e7:fb:ae:d1:93:68:
                    97:ad:bc:bc:26:7e:0a:89:c9:1b:24:fa:dc:d6:81:
                    7d:0c:d5:d1:2d:c6:66:dc:1e:d0:e5:02:74:fe:d6:
                    27:cb:90:f1:49:fb:d0:13:f2:66:31:7e:05:5a:17:
                    86:d1:bc:7e:79:c8:40:50:e2:c3:75:25:73:f0:57:
                    00:f0:e9:f7:96:ab:ac:12:1a:58:6b:75:62:69:84:
                    08:f7:ec:9a:c7:7e:47:92:b9:ac:dd:9e:cb:3e:d5:
                    71:3b:c0:a2:03:dc:fe:94:bc:5b:0d:33:af:8a:32:
                    0d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5A:FE:7C:45:14:8F:8B:C2:7F:26:98:46:99:70:25:D8:2A:D5:59
            X509v3 Authority Key Identifier:
                keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/cVr-fEUUj4vCfyaYRplwJdgq1Vk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.115.208.0/22
                  213.145.66.0/24
                  213.145.68.0-213.145.79.255
                  213.145.82.0/24
                  213.145.84.0-213.145.89.255

    Signature Algorithm: sha256WithRSAEncryption
         7f:95:be:ca:14:87:49:16:a0:9d:4c:61:91:10:e7:96:60:33:
         7e:ee:4b:99:40:93:c2:d9:e0:1b:fb:6d:7c:b7:05:89:79:a5:
         ff:b6:d0:ed:b9:f0:25:96:9d:e6:c0:4d:ee:ff:e0:4b:45:1a:
         07:31:24:fd:67:c4:e0:85:8a:23:67:a0:e1:1d:f9:47:c5:4f:
         5f:a9:fb:57:0b:af:71:df:51:05:57:68:bd:c2:26:05:90:1f:
         38:f6:2f:85:98:99:15:90:04:4f:07:9d:c3:95:8b:c8:0e:15:
         df:bb:0d:82:60:27:22:af:60:4d:0f:56:93:61:90:a6:4b:52:
         9c:b4:bd:5b:6a:34:f5:16:53:72:e1:21:3f:3f:44:f6:a1:fc:
         d3:22:62:04:db:ec:2b:f2:f6:18:4a:49:1d:c7:b3:6b:5e:a0:
         fe:aa:79:d6:56:72:5a:34:d1:6b:12:04:d2:7b:3d:3e:0c:1a:
         4a:0c:eb:da:91:5e:54:ea:af:17:77:ce:44:7c:66:d7:70:7a:
         f1:27:fe:f7:a8:71:b1:71:71:0e:0c:37:30:12:b7:9a:75:6d:
         93:91:49:cb:99:a8:82:9f:0c:b9:a6:05:85:20:61:15:e5:44:
         67:93:3d:b8:6f:0d:dd:c1:58:d6:86:b6:f4:4f:80:bc:e5:df:
         46:3c:6e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:19:38 2025 by rpki-client