This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/F5CDm-53LIJ_4iz4q2Jk5Ks1ia8.roa
File:                     F5CDm-53LIJ_4iz4q2Jk5Ks1ia8.roa (raw, json)
Hash identifier:          TnXZ6sXkq1L/F7NbU7nJvXMy4BMntFILnKsOddag7Sw=
Subject key identifier:   17:90:83:9B:EE:77:2C:82:7F:E2:2C:F8:AB:62:64:E4:AB:35:89:AF
Certificate issuer:       /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial:       019B7DCA32FC5D3B55234664414DB5D2EFE3
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/F5CDm-53LIJ_4iz4q2Jk5Ks1ia8.roa
Signing time:             Fri 02 Jan 2026 08:19:21 +0000
ROA not before:           Fri 02 Jan 2026 08:19:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60490
IP address blocks:        62.113.66.0/24 maxlen: 24
                          62.113.67.0/24 maxlen: 24
                          62.113.71.0/24 maxlen: 24
                          62.113.72.0/24 maxlen: 24
                          62.113.76.0/24 maxlen: 24
                          91.185.95.0/24 maxlen: 24
                          176.109.64.0/23 maxlen: 23
                          176.109.64.0/24 maxlen: 24
                          176.109.65.0/24 maxlen: 24
                          176.109.67.0/24 maxlen: 24
                          176.109.70.0/24 maxlen: 24
                          178.236.25.0/24 maxlen: 24
                          194.150.88.0/24 maxlen: 24
                          194.150.89.0/24 maxlen: 24
                          194.150.90.0/24 maxlen: 24
                          194.150.91.0/24 maxlen: 24
                          2a02:28:7::/48 maxlen: 48
                          2a02:2a:1000::/36 maxlen: 48
                          2a02:2a:1000::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:32:fc:5d:3b:55:23:46:64:41:4d:b5:d2:ef:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
        Validity
            Not Before: Jan  2 08:19:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1790839bee772c827fe22cf8ab6264e4ab3589af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7b:23:1e:fc:a1:7b:83:1e:e0:59:dd:39:70:
                    96:d9:1d:23:d2:f4:ca:a6:d7:b8:4f:5b:ae:be:6d:
                    0f:5c:08:e4:49:be:c3:bd:fe:dc:e7:7b:a4:02:a8:
                    01:dd:eb:9a:70:71:0c:f6:48:f0:77:32:cb:8c:9d:
                    5b:16:cf:f0:38:d3:83:02:e6:63:bb:ed:37:01:1a:
                    06:95:15:84:04:b3:4f:a5:09:4a:ad:67:77:4c:87:
                    1b:72:8b:85:a9:27:3b:6b:35:26:78:d7:9d:49:22:
                    68:04:cd:1a:b2:86:11:c2:da:d8:fd:e5:93:b5:82:
                    45:ea:ac:d8:a0:b4:62:1b:d7:45:1b:1d:08:db:8c:
                    ce:36:22:2f:6b:25:f5:61:6a:08:08:a3:0e:be:6e:
                    9f:b5:8c:a3:46:3f:da:42:a7:73:ed:90:95:96:c0:
                    7a:3f:e5:4e:91:a8:fd:96:d0:49:08:d7:4e:e3:5a:
                    55:9f:36:3d:9a:32:96:0c:66:99:9e:de:7c:d9:85:
                    30:e9:01:08:7a:7a:4b:7a:dd:b3:d0:c6:a0:c5:f7:
                    af:d5:25:8b:e6:d2:80:57:2a:d7:ad:bf:d7:dd:42:
                    ca:5a:4e:f8:c4:b2:e7:bc:04:1f:9a:05:61:af:08:
                    09:56:e7:8b:d8:c0:d3:b4:89:50:59:a9:a2:6f:a5:
                    96:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:90:83:9B:EE:77:2C:82:7F:E2:2C:F8:AB:62:64:E4:AB:35:89:AF
            X509v3 Authority Key Identifier:
                keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/F5CDm-53LIJ_4iz4q2Jk5Ks1ia8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.113.66.0/23
                  62.113.71.0-62.113.72.255
                  62.113.76.0/24
                  91.185.95.0/24
                  176.109.64.0/23
                  176.109.67.0/24
                  176.109.70.0/24
                  178.236.25.0/24
                  194.150.88.0/22
                IPv6:
                  2a02:28:7::/48
                  2a02:2a:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         14:e3:98:81:76:6e:38:7c:d5:7c:49:b5:8f:a5:2b:11:99:ac:
         a4:9d:17:f8:ab:3a:fa:79:41:09:52:6c:cb:93:ff:0c:46:4b:
         5b:4c:54:0b:e7:d1:74:2e:c8:06:1b:46:62:d8:9d:51:17:62:
         53:9a:f5:b5:ab:73:85:8e:5a:25:a9:4c:d3:48:9c:75:de:b5:
         ee:2b:78:89:be:8c:f1:87:12:f3:34:07:6a:f0:93:85:89:d2:
         e0:4a:ec:b0:41:ae:83:ff:95:70:5c:ac:74:40:1c:5d:ae:21:
         bc:75:20:83:d6:b3:99:37:dd:7b:27:f6:90:9d:91:a5:4c:e4:
         d1:ed:2a:48:dc:59:50:63:44:19:bc:8a:df:07:00:41:4a:64:
         d9:53:d3:ea:08:0e:c2:bb:64:71:3e:02:53:49:0e:c4:6e:a3:
         37:de:d8:ad:96:38:5a:36:44:e3:6b:67:1f:31:8e:e1:14:80:
         37:f0:a3:a8:45:d0:e6:f8:16:92:32:73:07:52:a2:76:a7:a5:
         6d:a2:92:af:50:d0:0a:47:3c:7b:8f:33:a7:6d:b6:87:46:d0:
         fc:ce:b4:da:bf:6c:33:01:26:31:93:0d:c9:81:fa:d1:7a:5b:
         da:1f:dc:1d:e1:5e:cc:4b:b9:97:d2:84:ad:8c:66:14:50:ed:
         d6:92:17:52
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgISAZt9yjL8XTtVI0ZkQU210u/jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl
NmI3ZTUwHhcNMjYwMTAyMDgxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzkwODM5YmVlNzcyYzgyN2ZlMjJjZjhhYjYyNjRlNGFiMzU4OWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHsjHvyhe4Me4FndOXCW2R0j0vTK
pte4T1uuvm0PXAjkSb7Dvf7c53ukAqgB3euacHEM9kjwdzLLjJ1bFs/wONODAuZj
u+03ARoGlRWEBLNPpQlKrWd3TIcbcouFqSc7azUmeNedSSJoBM0asoYRwtrY/eWT
tYJF6qzYoLRiG9dFGx0I24zONiIvayX1YWoICKMOvm6ftYyjRj/aQqdz7ZCVlsB6
P+VOkaj9ltBJCNdO41pVnzY9mjKWDGaZnt582YUw6QEIenpLet2z0Magxfev1SWL
5tKAVyrXrb/X3ULKWk74xLLnvAQfmgVhrwgJVueL2MDTtIlQWamib6WWTwIDAQAB
o4ICWjCCAlYwHQYDVR0OBBYEFBeQg5vudyyCf+Is+KtiZOSrNYmvMB8GA1UdIwQY
MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt
NDI4NDU4Njc5Y2U0LzEvRjVDRG0tNTNMSUpfNGl6NHEySms1S3MxaWE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0
LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBEBAIAATA+AwQBPnFCMAwD
BAA+cUcDBAA+cUgDBAA+cUwDBABbuV8DBAGwbUADBACwbUMDBACwbUYDBACy7BkD
BALCllgwFwQCAAIwEQMHACoCACgABwMGBCoCACoQMA0GCSqGSIb3DQEBCwUAA4IB
AQAU45iBdm44fNV8SbWPpSsRmayknRf4qzr6eUEJUmzLk/8MRktbTFQL59F0LsgG
G0Zi2J1RF2JTmvW1q3OFjlolqUzTSJx13rXuK3iJvozxhxLzNAdq8JOFidLgSuyw
Qa6D/5VwXKx0QBxdriG8dSCD1rOZN917J/aQnZGlTOTR7SpI3FlQY0QZvIrfBwBB
SmTZU9PqCA7Cu2RxPgJTSQ7EbqM33titljhaNkTja2cfMY7hFIA38KOoRdDm+BaS
MnMHUqJ2p6VtopKvUNAKRzx7jzOnbbaHRtD8zrTav2wzASYxkw3JgfrRelvaH9wd
4V7MS7mX0oStjGYUUO3WkhdS
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:19 2026 by rpki-client