This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/7W24_Rf5Ko2iEUxEGRog5wJv6lg.roa
File:                     7W24_Rf5Ko2iEUxEGRog5wJv6lg.roa (raw, json)
Hash identifier:          dJfyXH3Ih6KNLcTIHiS1qro2e4tZl7n+nF8SgkkUKW8=
Subject key identifier:   ED:6D:B8:FD:17:F9:2A:8D:A2:11:4C:44:19:1A:20:E7:02:6F:EA:58
Certificate issuer:       /CN=aaa972ac3cc10f716ca4985045a5f0824b60ca1f
Certificate serial:       019B78353F6F4912542C8B350E2FA9413F69
Authority key identifier: AA:A9:72:AC:3C:C1:0F:71:6C:A4:98:50:45:A5:F0:82:4B:60:CA:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/7W24_Rf5Ko2iEUxEGRog5wJv6lg.roa
Signing time:             Thu 01 Jan 2026 06:18:34 +0000
ROA not before:           Thu 01 Jan 2026 06:18:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47131
IP address blocks:        62.182.232.0/21 maxlen: 21
                          62.182.235.0/24 maxlen: 24
                          62.182.236.0/24 maxlen: 24
                          62.182.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:3f:6f:49:12:54:2c:8b:35:0e:2f:a9:41:3f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaa972ac3cc10f716ca4985045a5f0824b60ca1f
        Validity
            Not Before: Jan  1 06:18:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ed6db8fd17f92a8da2114c44191a20e7026fea58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f9:92:4a:ef:4f:4d:67:a7:66:8b:fe:18:86:
                    52:71:e0:c4:02:9e:6a:06:d3:f0:d0:76:60:53:73:
                    68:30:01:7d:a2:d6:76:81:bf:03:92:7d:8b:a5:b0:
                    f7:96:ae:59:7a:9f:2b:b8:a2:aa:0d:4d:68:90:8c:
                    fc:96:ac:a2:42:19:11:5b:a3:d0:9e:75:ae:3a:e6:
                    7d:8d:11:cb:47:09:fa:5f:bd:2a:e9:51:ef:a7:fc:
                    f1:23:04:51:c3:8d:8f:1d:c9:1b:0c:e2:1b:dd:1e:
                    5b:4d:92:f4:4d:94:74:35:f4:68:81:2d:be:7b:e8:
                    28:56:24:e8:f4:de:80:12:31:a0:f6:9e:97:ac:de:
                    f7:43:e0:a9:08:e4:18:8d:6e:69:a3:75:4f:6d:56:
                    95:c2:b7:1e:d0:2a:b5:2e:6f:27:a4:11:9e:51:53:
                    13:db:f1:fb:07:70:da:fc:f2:4f:30:77:b8:70:89:
                    29:4f:0c:d0:fb:44:4e:1e:4a:7d:95:44:2b:0f:0a:
                    db:ba:f0:32:73:8c:7b:d3:b5:9b:35:7e:c6:20:dc:
                    3d:0d:90:d8:43:a3:de:e7:c9:fc:e5:80:c2:7c:b9:
                    74:d4:8e:58:bc:54:0c:b1:c6:82:1b:19:2e:84:42:
                    84:cd:fb:a7:81:37:4e:31:8a:fb:ce:e9:8d:be:31:
                    f6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6D:B8:FD:17:F9:2A:8D:A2:11:4C:44:19:1A:20:E7:02:6F:EA:58
            X509v3 Authority Key Identifier:
                keyid:AA:A9:72:AC:3C:C1:0F:71:6C:A4:98:50:45:A5:F0:82:4B:60:CA:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/7W24_Rf5Ko2iEUxEGRog5wJv6lg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.182.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:d2:bc:a5:cd:f3:9e:b0:bd:f5:3f:9e:58:17:4c:50:06:ed:
         ae:16:60:a9:14:43:8f:4e:3e:0a:c0:28:82:5c:ec:50:89:b7:
         cf:74:e4:4f:4c:c2:fb:31:d7:8d:19:73:0b:c0:60:52:2a:27:
         97:e3:b7:b9:24:16:5f:b6:68:14:38:05:dc:27:01:4c:1c:1e:
         da:e4:cc:b9:9b:12:64:55:e8:ac:51:93:c1:46:b2:6c:c0:87:
         77:f5:2d:9f:71:cc:16:64:c9:a8:d9:7f:c5:d6:b0:5c:d0:74:
         cf:cd:3d:59:35:35:bb:32:7f:7b:67:e7:e7:16:50:d2:c1:c1:
         62:de:08:08:d8:a1:6a:31:f6:b4:80:8a:03:68:45:a0:07:a6:
         ee:83:c9:cf:3e:af:ff:69:a7:26:ce:2a:66:3f:63:4e:1c:b2:
         f3:b8:21:80:96:94:51:53:ae:7d:dc:f2:6e:e7:5e:c7:97:f7:
         61:8a:19:11:40:74:e8:b6:71:a4:9a:d3:b7:72:d4:0b:ef:a9:
         ea:43:25:2e:05:5c:17:53:07:ab:5c:64:7b:71:e1:7c:db:09:
         06:59:be:33:74:cb:b8:92:07:42:3b:03:fb:58:2f:73:98:18:
         58:f7:c0:4c:c6:ba:7e:5a:61:f9:ec:8a:3c:62:65:1c:de:7e:
         07:0f:df:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4NT9vSRJULIs1Di+pQT9pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYTk3MmFjM2NjMTBmNzE2Y2E0OTg1MDQ1YTVmMDgyNGI2
MGNhMWYwHhcNMjYwMTAxMDYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDZkYjhmZDE3ZjkyYThkYTIxMTRjNDQxOTFhMjBlNzAyNmZlYTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvmSSu9PTWenZov+GIZSceDEAp5q
BtPw0HZgU3NoMAF9otZ2gb8Dkn2LpbD3lq5Zep8ruKKqDU1okIz8lqyiQhkRW6PQ
nnWuOuZ9jRHLRwn6X70q6VHvp/zxIwRRw42PHckbDOIb3R5bTZL0TZR0NfRogS2+
e+goViTo9N6AEjGg9p6XrN73Q+CpCOQYjW5po3VPbVaVwrce0Cq1Lm8npBGeUVMT
2/H7B3Da/PJPMHe4cIkpTwzQ+0ROHkp9lUQrDwrbuvAyc4x707WbNX7GINw9DZDY
Q6Pe58n85YDCfLl01I5YvFQMscaCGxkuhEKEzfungTdOMYr7zumNvjH2rQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO1tuP0X+SqNohFMRBkaIOcCb+pYMB8GA1UdIwQY
MBaAFKqpcqw8wQ9xbKSYUEWl8IJLYMofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXFseXJEekJEM0ZzcEpoUVJhWHdna3RneWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kMDlmYjktZjNmYS00NWI4LWE1Y2Qt
NzdiNDg5MjQ5ZmE0LzEvN1cyNF9SZjVLbzJpRVV4RUdSb2c1d0p2NmxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kMDlmYjktZjNmYS00NWI4LWE1Y2QtNzdiNDg5MjQ5ZmE0
LzEvcXFseXJEekJEM0ZzcEpoUVJhWHdna3RneWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDPrboMA0G
CSqGSIb3DQEBCwUAA4IBAQB60rylzfOesL31P55YF0xQBu2uFmCpFEOPTj4KwCiC
XOxQibfPdORPTML7MdeNGXMLwGBSKieX47e5JBZftmgUOAXcJwFMHB7a5My5mxJk
VeisUZPBRrJswId39S2fccwWZMmo2X/F1rBc0HTPzT1ZNTW7Mn97Z+fnFlDSwcFi
3ggI2KFqMfa0gIoDaEWgB6bug8nPPq//aacmzipmP2NOHLLzuCGAlpRRU6593PJu
517Hl/dhihkRQHTotnGkmtO3ctQL76nqQyUuBVwXUwerXGR7ceF82wkGWb4zdMu4
kgdCOwP7WC9zmBhY98BMxrp+WmH57Io8YmUc3n4HD99t
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:01:30 2026 by rpki-client