This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/AJR3ZjQEw3xNx2603rNxTvz_xuo.roa
File:                     AJR3ZjQEw3xNx2603rNxTvz_xuo.roa (raw, json)
Hash identifier:          ZoHn9/Htdy70PIhm8Yqh59EOA15hHtjIaEGcVEgZgoM=
Subject key identifier:   00:94:77:66:34:04:C3:7C:4D:C7:6E:B4:DE:B3:71:4E:FC:FF:C6:EA
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       019B7CEDEE89921B94477DEFDE5E032D7FE4
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/AJR3ZjQEw3xNx2603rNxTvz_xuo.roa
Signing time:             Fri 02 Jan 2026 04:18:46 +0000
ROA not before:           Fri 02 Jan 2026 04:18:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214143
IP address blocks:        62.72.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:ee:89:92:1b:94:47:7d:ef:de:5e:03:2d:7f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan  2 04:18:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=009477663404c37c4dc76eb4deb3714efcffc6ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:33:94:ab:6a:2f:e5:c8:1c:cf:4d:5d:b4:c7:
                    cf:33:75:c5:5b:de:bd:f7:1c:18:92:8a:a0:ae:80:
                    2f:a8:5c:11:4f:9b:3d:62:1a:6a:73:a3:d9:b6:c8:
                    14:32:e0:b8:dc:dc:23:29:e1:af:e9:80:b3:f6:22:
                    d5:14:f1:f1:b2:3f:21:1f:fb:94:ce:ce:8a:85:c4:
                    57:27:85:41:7c:2b:db:94:6d:f3:78:21:dc:e3:16:
                    2e:52:67:e9:14:8f:b7:88:0a:3c:8a:ae:5d:15:29:
                    48:17:f0:bc:d6:ca:9b:06:4a:96:95:1d:f5:e3:c2:
                    9e:07:42:d5:8a:5c:54:27:07:9e:e7:61:8c:2f:3a:
                    bd:94:40:ca:6b:4e:f2:7e:d5:34:35:1a:f8:ab:1f:
                    1a:07:49:54:5b:95:99:dc:b5:ac:f6:69:b7:2e:ae:
                    07:8d:64:4f:77:6a:2e:51:fd:37:9d:91:1b:c7:e3:
                    12:b3:a4:a6:c9:64:ec:62:35:a4:66:c2:5e:44:ca:
                    75:02:0c:ab:e3:a8:11:09:1f:7d:19:fb:54:c9:2e:
                    47:e3:6c:b5:1b:64:1e:c3:96:be:73:84:2d:bf:e9:
                    8a:aa:84:2a:db:a1:4b:9a:ba:77:19:90:4f:2c:41:
                    3f:9b:1b:6e:ca:13:21:fe:6d:3a:1c:72:b9:d2:c9:
                    aa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:94:77:66:34:04:C3:7C:4D:C7:6E:B4:DE:B3:71:4E:FC:FF:C6:EA
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/AJR3ZjQEw3xNx2603rNxTvz_xuo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:d0:6c:35:79:52:0f:d4:fa:a0:a6:0f:e7:f7:9e:7e:a9:66:
         67:8a:fc:d4:59:2c:31:88:ee:8e:0d:b0:68:44:ce:f0:ab:7c:
         fe:b6:e1:18:da:45:fd:a9:ab:2d:f0:d3:53:12:2f:e7:0a:78:
         d3:17:40:08:8b:6a:b8:ee:73:bf:36:c4:54:7b:f9:a4:a4:1b:
         46:5c:1f:c0:12:4d:55:f1:41:d6:06:78:a9:9e:4a:24:fd:bf:
         52:d6:fe:c7:94:e4:d5:81:32:d3:19:b1:74:47:7a:e4:d6:ab:
         f4:8b:c3:72:6b:8f:51:ef:5c:ab:80:46:ac:9a:45:bc:49:e6:
         36:28:59:78:d6:6a:55:ba:fc:de:7a:3c:22:58:e3:bf:7f:29:
         7d:e5:b9:9f:30:43:b2:b5:6a:33:29:79:70:3d:7d:7c:f8:1c:
         9f:8f:2f:54:1a:23:04:cc:5c:f5:95:80:9d:5f:9a:52:3c:7a:
         58:b2:eb:ea:0c:e5:57:fa:6b:9d:26:a3:3a:57:b2:b6:29:89:
         36:86:95:3b:4c:6a:2d:ed:8a:4a:7e:98:89:ec:c9:ee:6e:36:
         3f:ae:f9:51:eb:3b:12:b6:d3:93:b2:f7:22:a8:cd:c7:87:ee:
         04:db:4c:68:6b:d2:17:5d:a6:b0:80:d3:34:ae:b1:55:c6:cc:
         d4:2b:8c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 17:52:41 2026 by rpki-client