This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/12q1s_G31uUn0SyCzMZOb0Lb7Os.roa
File:                     12q1s_G31uUn0SyCzMZOb0Lb7Os.roa (raw, json)
Hash identifier:          0HHvTgEOIShOT5NhgvkKT6saM1AFBY38TFOnyHkIJ1c=
Subject key identifier:   D7:6A:B5:B3:F1:B7:D6:E5:27:D1:2C:82:CC:C6:4E:6F:42:DB:EC:EB
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       019C2CD8365EB142000498C18ECFBAE5A368
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/12q1s_G31uUn0SyCzMZOb0Lb7Os.roa
Signing time:             Thu 05 Feb 2026 08:08:13 +0000
ROA not before:           Thu 05 Feb 2026 08:08:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50670
IP address blocks:        62.72.161.0/24 maxlen: 24
                          62.72.162.0/24 maxlen: 24
                          62.72.170.0/24 maxlen: 24
                          62.72.171.0/24 maxlen: 24
                          81.21.8.0/22 maxlen: 22
                          81.21.8.0/24 maxlen: 24
                          81.21.9.0/24 maxlen: 24
                          81.21.10.0/24 maxlen: 24
                          81.21.11.0/24 maxlen: 24
                          81.21.12.0/24 maxlen: 24
                          81.21.13.0/24 maxlen: 24
                          81.21.14.0/24 maxlen: 24
                          81.21.15.0/24 maxlen: 24
                          109.237.192.0/20 maxlen: 24
                          109.237.192.0/24 maxlen: 24
                          109.237.193.0/24 maxlen: 24
                          109.237.194.0/24 maxlen: 24
                          109.237.195.0/24 maxlen: 24
                          109.237.196.0/24 maxlen: 24
                          109.237.197.0/24 maxlen: 24
                          109.237.198.0/24 maxlen: 24
                          109.237.199.0/24 maxlen: 24
                          109.237.200.0/24 maxlen: 24
                          109.237.201.0/24 maxlen: 24
                          109.237.202.0/24 maxlen: 24
                          109.237.203.0/24 maxlen: 24
                          109.237.204.0/24 maxlen: 24
                          109.237.205.0/24 maxlen: 24
                          109.237.206.0/24 maxlen: 24
                          109.237.207.0/24 maxlen: 24
                          176.241.64.0/21 maxlen: 24
                          176.241.64.0/24 maxlen: 24
                          176.241.65.0/24 maxlen: 24
                          176.241.66.0/24 maxlen: 24
                          176.241.67.0/24 maxlen: 24
                          176.241.68.0/24 maxlen: 24
                          176.241.69.0/24 maxlen: 24
                          176.241.70.0/24 maxlen: 24
                          176.241.71.0/24 maxlen: 24
                          178.20.184.0/21 maxlen: 24
                          178.20.184.0/24 maxlen: 24
                          178.20.185.0/24 maxlen: 24
                          178.20.186.0/24 maxlen: 24
                          178.20.187.0/24 maxlen: 24
                          178.20.188.0/24 maxlen: 24
                          178.20.189.0/24 maxlen: 24
                          178.20.190.0/24 maxlen: 24
                          178.20.191.0/24 maxlen: 24
                          185.51.212.0/22 maxlen: 22
                          185.51.212.0/24 maxlen: 24
                          185.51.213.0/24 maxlen: 24
                          185.51.214.0/24 maxlen: 24
                          185.51.215.0/24 maxlen: 24
                          185.193.176.0/22 maxlen: 22
                          185.193.176.0/24 maxlen: 24
                          185.193.177.0/24 maxlen: 24
                          185.193.178.0/24 maxlen: 24
                          185.193.179.0/24 maxlen: 24
                          2a01:1d0::/29 maxlen: 29
                          2a01:1d0::/32 maxlen: 32
                          2a0a:2740::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2c:d8:36:5e:b1:42:00:04:98:c1:8e:cf:ba:e5:a3:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Feb  5 08:08:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d76ab5b3f1b7d6e527d12c82ccc64e6f42dbeceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3e:86:ff:51:07:0e:8b:9d:b5:24:95:ca:4e:
                    cc:03:95:02:ed:e3:81:5e:30:45:41:8d:6e:07:bf:
                    ea:ea:32:16:c2:ec:09:7e:96:d1:8d:61:7b:b4:65:
                    30:eb:43:9a:a6:40:e6:4d:48:a1:9d:59:2c:9e:bf:
                    33:d1:8a:a6:0e:a6:94:f0:20:67:ea:d7:22:97:21:
                    1b:22:c4:d8:37:c5:20:3e:cc:b7:fd:9f:ed:4d:b0:
                    b2:46:cc:73:c5:53:43:23:81:9d:81:56:e4:18:fd:
                    35:9c:8b:46:fa:b8:ab:89:d8:74:9f:5f:40:66:0e:
                    c0:63:09:f1:fe:38:12:ea:f2:fc:98:17:29:94:62:
                    6c:60:f4:38:28:a2:ae:82:c9:92:6d:06:49:3a:92:
                    06:b9:2d:91:40:ff:5c:e9:97:84:6a:7e:b1:eb:b4:
                    d6:7b:7e:b4:d3:5a:a3:6e:c5:f1:25:75:2c:2a:07:
                    93:c6:58:67:31:83:51:0b:07:62:a6:40:e8:3e:d3:
                    85:d3:3a:14:41:f0:92:a5:5b:28:3f:0e:ed:c1:3a:
                    2b:9f:df:8b:8d:86:f7:5d:ed:6a:01:2f:f1:eb:d6:
                    d9:8d:26:6e:da:ae:66:18:be:90:64:5e:e4:9d:28:
                    8e:ea:92:6f:93:71:a7:44:0f:3f:61:ee:e6:79:eb:
                    c5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6A:B5:B3:F1:B7:D6:E5:27:D1:2C:82:CC:C6:4E:6F:42:DB:EC:EB
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/12q1s_G31uUn0SyCzMZOb0Lb7Os.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.161.0-62.72.162.255
                  62.72.170.0/23
                  81.21.8.0/21
                  109.237.192.0/20
                  176.241.64.0/21
                  178.20.184.0/21
                  185.51.212.0/22
                  185.193.176.0/22
                IPv6:
                  2a01:1d0::/29
                  2a0a:2740::/29

    Signature Algorithm: sha256WithRSAEncryption
         68:b9:dc:9c:16:dd:e5:4e:6c:50:09:6b:e0:e3:57:cd:d0:62:
         d5:8b:92:77:df:35:eb:ef:27:16:51:b0:66:ff:30:bb:66:97:
         c2:13:1a:f1:04:16:14:8e:6e:44:a6:f7:8f:e2:16:e7:47:c9:
         23:8d:d3:92:8a:5f:16:0d:39:4c:0e:d9:ea:27:9c:66:a0:e2:
         73:c1:74:cd:76:25:34:78:33:99:e0:9e:c7:8f:59:06:64:0e:
         da:47:1e:ba:f9:92:c0:45:be:b4:b4:96:89:91:17:6f:9e:13:
         c8:82:af:b5:4d:42:a8:cc:89:06:4b:ed:d1:10:0e:8b:9b:af:
         31:79:26:4b:ef:58:a3:3c:e6:61:a8:9b:87:5b:83:02:fa:bd:
         22:4c:7c:e6:00:de:9f:6d:1c:14:f5:f6:0f:af:75:14:e9:9d:
         e2:e6:17:95:cb:9d:b9:c3:c1:d9:d6:58:53:80:92:c8:9b:a2:
         eb:d2:20:33:45:cb:5b:f8:cf:4d:fa:44:db:f3:98:f4:9a:81:
         6f:36:dd:1b:8b:a7:ff:a9:c9:3a:c7:86:02:5b:8b:74:1f:89:
         21:aa:ac:cd:48:59:07:30:27:83:43:ea:a2:c7:26:ee:ec:39:
         51:da:a2:b4:1b:cd:29:8e:7a:e2:8c:bf:9e:93:97:a4:d5:5d:
         48:6e:03:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 13:14:31 2026 by rpki-client