This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/AfJ31M1mdM2BcUs04G4JrC1slog.roa
File:                     AfJ31M1mdM2BcUs04G4JrC1slog.roa (raw, json)
Hash identifier:          /d5FHSDqjTxqeXiQmWuusQl5177RW6vIPYsMu8uMIys=
Subject key identifier:   01:F2:77:D4:CD:66:74:CD:81:71:4B:34:E0:6E:09:AC:2D:6C:96:88
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       019BD15E07E82221CCFB24C9E094E126E682
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/AfJ31M1mdM2BcUs04G4JrC1slog.roa
Signing time:             Sun 18 Jan 2026 13:49:19 +0000
ROA not before:           Sun 18 Jan 2026 13:49:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        62.72.162.0/23 maxlen: 23
                          62.72.164.0/22 maxlen: 22
                          62.72.164.0/23 maxlen: 23
                          62.72.187.0/24 maxlen: 24
                          62.72.191.0/24 maxlen: 24
                          81.21.1.0/24 maxlen: 24
                          81.21.2.0/23 maxlen: 23
                          81.21.4.0/22 maxlen: 24
                          81.21.7.0/24 maxlen: 24
                          176.57.56.0/24 maxlen: 24
                          176.57.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 15:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d1:5e:07:e8:22:21:cc:fb:24:c9:e0:94:e1:26:e6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan 18 13:49:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=01f277d4cd6674cd81714b34e06e09ac2d6c9688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cb:7f:05:c1:eb:45:e6:b4:6a:6f:92:9c:e3:
                    d0:80:20:0f:04:5d:dc:b7:75:cd:6d:19:3a:96:c0:
                    b6:0f:d8:60:42:d2:20:a0:08:45:92:55:fb:34:4a:
                    92:97:3d:f4:12:3e:54:f7:da:07:87:0a:2c:93:36:
                    a7:91:5d:9e:b3:62:38:e2:af:0d:4f:5f:36:87:55:
                    6b:23:29:b5:23:b0:0b:76:c4:9c:13:84:02:b4:d8:
                    c3:6f:b5:b9:43:7e:76:98:cf:9a:bd:91:74:af:4e:
                    eb:b1:fb:5a:0a:fe:0a:47:b4:da:71:e3:df:59:df:
                    cf:43:40:f8:9c:17:53:9f:38:5f:06:40:7c:d5:40:
                    3f:f7:aa:d3:22:a2:c8:cf:5b:dc:d3:d5:d2:77:19:
                    f5:71:9b:21:d5:80:f8:52:31:45:9e:4a:e7:01:49:
                    e5:bf:bc:bd:60:05:94:0d:f4:c9:d3:e1:40:3c:32:
                    c2:f1:6b:d7:d9:9e:84:d6:fb:4d:9a:70:a5:19:d1:
                    fd:dd:30:77:f6:39:5b:f6:e4:7c:c0:6d:69:ff:3c:
                    24:67:df:76:2b:5c:02:9a:63:c6:b2:78:56:36:16:
                    00:9a:65:52:ba:2a:6e:9f:2c:8c:79:aa:8c:cd:be:
                    55:d4:24:d3:7b:81:f9:a0:e4:d0:c3:43:88:44:93:
                    dc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F2:77:D4:CD:66:74:CD:81:71:4B:34:E0:6E:09:AC:2D:6C:96:88
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/AfJ31M1mdM2BcUs04G4JrC1slog.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.162.0-62.72.167.255
                  62.72.187.0/24
                  62.72.191.0/24
                  81.21.1.0-81.21.7.255
                  176.57.56.0/24
                  176.57.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:79:b7:f7:b6:c9:fe:ad:3b:94:81:42:77:53:5c:a3:9e:59:
         9b:16:a6:d3:27:22:94:e9:68:d1:a8:88:ce:00:80:66:c4:ff:
         2c:38:fb:8c:e1:eb:52:6f:56:e2:08:d4:99:0d:16:bb:b1:6e:
         be:cb:e0:58:7b:53:e6:4a:09:06:cd:2d:3e:9b:68:a0:9c:ba:
         ab:b8:60:d9:57:2b:74:94:e7:cc:96:f9:33:3b:0b:3e:8c:7c:
         dd:5f:38:b4:e1:23:73:03:34:74:72:c2:04:41:b9:77:90:d9:
         36:ed:a8:f6:bd:17:a7:ea:75:6e:db:b1:40:31:86:a8:57:56:
         f9:02:ea:f4:0a:dc:7d:8f:ca:93:32:cf:9e:3c:77:59:72:49:
         98:b0:b9:e0:0a:6a:30:f2:bf:e7:e9:8b:51:00:8b:21:2f:9c:
         b9:03:86:8e:5f:6d:23:9b:cc:7c:cd:15:48:99:45:12:0f:64:
         41:24:92:18:b5:d1:6c:ce:f2:33:cf:71:2c:16:5f:9c:d4:69:
         b3:39:81:17:2a:0d:38:5e:4c:80:4f:92:23:6b:5e:9e:7f:d4:
         44:05:e1:88:b1:61:8f:b2:08:67:5c:34:10:01:67:0a:df:bd:
         f1:ea:c3:4a:29:75:32:06:bd:b5:bc:78:32:a5:52:0f:bd:86:
         51:55:bb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 01:50:10 2026 by rpki-client