This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/F0Z52UmMaz0Zr_icW11QSdAEWdQ.roa
File:                     F0Z52UmMaz0Zr_icW11QSdAEWdQ.roa (raw, json)
Hash identifier:          WDFvV6xOZUuT0B8rBULRFjBt1ejg/v+aHvSLJWrvZe0=
Subject key identifier:   17:46:79:D9:49:8C:6B:3D:19:AF:F8:9C:5B:5D:50:49:D0:04:59:D4
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       019C2F23116DFBBE7158B08AF69C60685153
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/F0Z52UmMaz0Zr_icW11QSdAEWdQ.roa
Signing time:             Thu 05 Feb 2026 18:49:13 +0000
ROA not before:           Thu 05 Feb 2026 18:49:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203273
IP address blocks:        62.60.152.0/23 maxlen: 24
                          62.60.154.0/23 maxlen: 24
                          62.60.172.0/22 maxlen: 24
                          62.60.216.0/23 maxlen: 24
                          62.60.235.0/24 maxlen: 24
                          62.60.240.0/22 maxlen: 24
                          62.60.244.0/22 maxlen: 24
                          62.60.248.0/24 maxlen: 24
                          62.60.249.0/24 maxlen: 24
                          62.60.250.0/23 maxlen: 24
                          62.60.251.0/24 maxlen: 24
                          213.176.74.0/23 maxlen: 24
                          213.176.92.0/22 maxlen: 24
                          213.176.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2f:23:11:6d:fb:be:71:58:b0:8a:f6:9c:60:68:51:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Feb  5 18:49:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=174679d9498c6b3d19aff89c5b5d5049d00459d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0d:f4:06:76:9c:b4:02:97:f2:41:0e:08:40:
                    7d:f0:6c:9a:21:c5:d2:fe:3e:58:c8:fa:53:56:93:
                    b3:4a:09:b9:08:97:85:d6:7f:5e:ac:6b:4c:a8:d7:
                    3d:65:cc:66:7c:ce:c3:49:d0:eb:cf:ee:f7:22:b3:
                    2c:c2:c1:81:48:fe:0c:66:f1:e6:1d:99:04:de:92:
                    bc:49:f8:e0:ea:a6:2e:0a:f9:b6:2f:3d:81:66:6e:
                    d3:0c:9e:e4:db:d9:67:57:d8:7d:06:c3:db:ce:3e:
                    77:73:5f:67:48:8f:b9:83:1c:a3:90:e4:60:b5:ce:
                    e7:1e:d7:98:e2:66:37:68:13:95:f4:30:a3:5c:d7:
                    eb:c3:08:72:56:cb:99:0a:b0:cd:aa:e4:f1:2d:81:
                    a1:e9:98:0e:3e:de:45:37:74:9f:e6:ea:06:74:44:
                    25:a2:6d:1c:ff:3d:35:62:5b:31:77:5a:9d:88:7d:
                    3a:93:7f:d5:38:df:34:89:7f:e6:14:2f:8b:18:bc:
                    50:01:25:d6:da:88:6f:d8:c4:58:ce:04:e8:2c:61:
                    e9:aa:ba:61:0c:84:49:6d:64:46:92:e3:6e:9e:f0:
                    53:55:65:36:a2:7e:83:11:04:4a:9b:c9:f9:7e:3a:
                    e2:f9:7e:49:c1:55:d9:56:6f:70:56:6a:32:b1:c6:
                    7b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:46:79:D9:49:8C:6B:3D:19:AF:F8:9C:5B:5D:50:49:D0:04:59:D4
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/F0Z52UmMaz0Zr_icW11QSdAEWdQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.152.0/22
                  62.60.172.0/22
                  62.60.216.0/23
                  62.60.235.0/24
                  62.60.240.0-62.60.251.255
                  213.176.74.0/23
                  213.176.92.0/22
                  213.176.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:48:bb:60:f7:e0:3b:4d:5a:66:0e:3c:81:ac:54:6a:51:54:
         b5:08:37:34:6f:34:db:dc:ec:8e:5b:f0:fa:c0:ea:76:8f:db:
         bf:77:6d:6a:53:1e:b5:80:ba:de:99:0d:1d:f4:0a:32:80:f4:
         a9:80:4e:17:dd:e9:13:ba:aa:37:ce:46:0a:62:77:b2:e9:29:
         a7:24:71:61:6b:a9:1d:61:28:71:de:f1:5c:5a:a8:9a:d6:19:
         02:2a:90:a3:2b:64:8d:19:a2:e8:5e:19:f8:6e:0a:f1:6a:63:
         06:2c:81:95:54:4f:6a:22:1a:f8:f6:8c:ea:7c:1c:54:7d:68:
         c3:0e:73:04:3f:bc:b8:5c:90:0b:e9:8d:3e:d3:03:1b:eb:3b:
         bc:0c:af:38:7b:66:9d:a9:35:88:43:b7:b2:9e:d7:13:bd:9a:
         c7:2f:b1:aa:14:63:64:18:a5:90:f9:ec:02:f2:4a:56:85:eb:
         ea:fe:d9:71:be:f0:73:25:f7:39:c1:3a:4f:81:45:8f:9a:71:
         14:15:4e:3e:83:fd:8a:47:4a:38:ab:5c:38:04:c3:a0:8f:64:
         77:2b:c5:63:a5:5e:61:cf:5d:31:0a:55:dd:81:1c:ed:70:00:
         40:01:4c:9d:99:1b:82:41:11:6a:00:e7:9d:ac:dd:dd:37:3f:
         91:40:4b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:15:44 2026 by rpki-client