This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/Xe0J2fy4oVg3QXL7klruWZtuHvw.roa
File:                     Xe0J2fy4oVg3QXL7klruWZtuHvw.roa (raw, json)
Hash identifier:          YXUiQPNKd3l5WjbM/fjv6lhaHwQbFJ0v83be14OVndw=
Subject key identifier:   5D:ED:09:D9:FC:B8:A1:58:37:41:72:FB:92:5A:EE:59:9B:6E:1E:FC
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019B7E39189A92437F160F2D521AC0643414
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/Xe0J2fy4oVg3QXL7klruWZtuHvw.roa
Signing time:             Fri 02 Jan 2026 10:20:29 +0000
ROA not before:           Fri 02 Jan 2026 10:20:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     25098
IP address blocks:        62.68.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 00:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:39:18:9a:92:43:7f:16:0f:2d:52:1a:c0:64:34:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Jan  2 10:20:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5ded09d9fcb8a158374172fb925aee599b6e1efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:e2:3b:83:2c:ae:ac:00:84:b5:2b:a0:0f:
                    13:32:cd:a9:14:53:a9:1a:5a:cf:48:8b:56:76:43:
                    a2:72:8d:4e:e6:2c:01:13:30:0c:04:0c:06:29:46:
                    29:79:36:6d:08:9b:db:2f:90:9c:37:0b:ca:3d:7e:
                    b6:23:19:7d:4a:b0:0d:ff:ea:f5:54:de:57:1f:19:
                    51:03:5f:50:64:cb:dd:d8:bd:75:06:1e:e2:bc:d9:
                    9e:fe:9c:16:ae:d0:83:45:c8:58:90:06:dd:94:01:
                    28:3c:db:ae:6d:3c:d4:33:4b:ac:ba:6b:ae:48:4b:
                    c1:ed:5c:f1:ba:9f:b8:3f:b5:47:81:c7:f9:21:46:
                    ab:17:37:1f:08:bb:02:1d:04:a5:30:cc:04:87:ab:
                    de:1a:c8:ca:20:2e:bd:73:94:d6:1b:4b:25:7a:2e:
                    53:bd:75:92:a7:b1:7f:71:82:7d:09:a1:63:1f:36:
                    8f:37:d0:ce:75:62:be:af:7a:cf:23:4b:37:f0:92:
                    bb:9f:d5:9b:60:f5:a9:c2:12:67:9a:59:a7:e6:bf:
                    c5:0a:a1:17:06:de:8b:25:9c:5f:a0:22:a2:d9:70:
                    7a:1d:e6:f7:79:58:65:41:7d:55:fa:b2:ff:b9:12:
                    77:c0:f5:48:90:9a:41:63:0a:41:bb:ba:58:b6:ed:
                    ab:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:ED:09:D9:FC:B8:A1:58:37:41:72:FB:92:5A:EE:59:9B:6E:1E:FC
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/Xe0J2fy4oVg3QXL7klruWZtuHvw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.68.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:6d:93:dc:8f:bb:a4:9f:47:61:6a:81:77:47:af:6f:8d:fd:
         40:50:b4:74:fc:c0:92:dd:31:2f:c0:0c:e8:93:38:9e:b3:12:
         69:f3:69:07:67:23:62:66:dc:6e:13:71:5c:34:12:8b:bc:9d:
         36:22:45:3b:20:73:dd:1a:68:1f:c9:08:f7:2e:1f:8e:d4:bd:
         52:02:dc:51:d0:91:59:8a:fd:0f:68:e5:5c:2e:4f:a5:6d:bf:
         5e:48:c0:95:a1:2f:ae:44:27:6f:7b:7e:1c:06:cd:6b:f9:1a:
         7a:1e:b6:9c:e4:4f:1a:af:ef:9b:9c:3f:00:ac:1e:57:78:23:
         37:2d:12:24:39:38:1f:53:b5:94:12:44:1b:ce:1a:78:19:10:
         84:c6:49:19:b1:47:cd:94:cd:22:b6:71:b4:c3:04:e3:4e:28:
         f7:7c:2e:d7:63:17:52:9d:7a:38:e2:e6:17:46:d5:18:39:83:
         f7:fa:28:12:4c:98:ed:68:09:91:0b:43:35:6a:33:85:17:f5:
         1b:35:95:08:c0:c3:fd:14:d7:ed:66:b6:8b:19:56:71:48:e3:
         0f:d1:05:fc:63:d8:e7:9d:6f:91:a9:34:ca:29:1c:72:0f:64:
         53:55:0b:ed:0a:fd:14:45:66:ab:6f:bb:4e:b4:d8:6d:04:cc:
         db:5a:4e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 09:15:05 2026 by rpki-client