This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/AtK_HmjBgTQxL2dvI2bWhaSZhlY.roa
File:                     AtK_HmjBgTQxL2dvI2bWhaSZhlY.roa (raw, json)
Hash identifier:          pfhtQVDPYLieoSGMbHBUbh6+wfbqsfaBIqLKNtiv5Zw=
Subject key identifier:   02:D2:BF:1E:68:C1:81:34:31:2F:67:6F:23:66:D6:85:A4:99:86:56
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       019B7CEDEAA5713622AEC4EDF765CFF3841F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/AtK_HmjBgTQxL2dvI2bWhaSZhlY.roa
Signing time:             Fri 02 Jan 2026 04:18:45 +0000
ROA not before:           Fri 02 Jan 2026 04:18:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211373
IP address blocks:        62.72.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:ea:a5:71:36:22:ae:c4:ed:f7:65:cf:f3:84:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan  2 04:18:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=02d2bf1e68c18134312f676f2366d685a4998656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8f:8c:0a:24:28:5a:5a:d5:65:19:46:fb:72:
                    ea:ad:dd:4d:c6:ee:da:b8:78:8a:c9:24:7f:ed:f5:
                    54:33:52:82:98:c9:5c:95:71:3f:24:81:13:1c:45:
                    46:fe:e3:da:55:61:c1:15:17:9b:8a:61:75:2a:fd:
                    9e:39:c5:e5:6c:0c:b1:5b:97:e3:c3:2b:39:fe:15:
                    de:be:16:e0:4d:b4:63:2f:20:52:43:d5:9c:9d:0c:
                    0d:8b:2d:bd:3c:b8:56:16:97:6d:f7:1e:7f:28:b6:
                    c9:42:cf:50:3c:bd:6b:c9:c4:9a:8e:0e:f0:3f:e2:
                    13:4d:c7:07:93:d2:a8:f6:0e:02:8c:b4:be:79:15:
                    22:2d:d3:d0:5b:52:77:8e:34:7c:d8:55:a8:f4:0e:
                    c2:c9:c6:53:cc:39:7a:cb:67:2b:60:e8:ba:6c:b7:
                    05:cf:9c:6b:12:9d:cf:e3:ec:83:2d:11:8a:e5:9c:
                    e3:fa:9b:b0:20:1d:55:a0:e6:0b:64:a1:01:cd:8e:
                    dc:80:9c:f5:f3:e9:d3:62:84:b4:b9:ff:75:37:73:
                    37:9b:89:6b:fa:ba:4b:f5:39:24:39:f1:f0:24:d2:
                    85:f1:3e:e7:8e:04:aa:3e:ca:1a:10:90:a2:c0:48:
                    0b:c8:59:f8:ed:86:f6:1b:72:db:57:9f:97:c1:45:
                    c4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D2:BF:1E:68:C1:81:34:31:2F:67:6F:23:66:D6:85:A4:99:86:56
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/AtK_HmjBgTQxL2dvI2bWhaSZhlY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:5d:2b:be:28:01:a9:c0:bb:2a:00:74:c4:34:9d:b5:48:47:
         7c:a2:f1:b6:3a:8a:78:3a:3a:a0:c1:10:62:49:e3:47:01:2f:
         ca:4c:87:d2:e4:57:c4:a5:1b:01:fe:6f:06:14:e7:03:38:4a:
         ea:7d:df:9d:e3:6d:6c:58:d8:34:ea:a8:ff:df:eb:57:f0:35:
         6e:28:31:d4:b3:e9:50:b6:d7:50:af:09:bd:f0:dc:62:79:85:
         77:7b:f5:9d:86:13:51:43:12:24:91:68:70:91:73:dd:f7:ee:
         82:d6:5c:a2:5f:e5:31:1e:41:69:69:51:67:aa:a4:50:fd:e3:
         61:ed:bf:f4:1d:4e:c3:dd:2d:a7:13:8d:15:1c:5f:60:22:ac:
         1e:e7:df:af:6b:74:46:6b:62:9f:14:42:81:9c:93:d8:70:cb:
         22:50:0d:1f:2f:92:a0:bd:be:e0:3f:47:41:05:1e:52:b6:03:
         14:b8:ac:7f:03:fe:a8:24:bc:08:b6:32:f5:ff:fc:bd:23:ac:
         3b:49:60:77:56:ca:1c:c7:fe:44:3b:51:c1:dd:ef:de:30:9c:
         9c:33:98:3e:d8:d5:50:4f:73:71:d2:27:73:fa:f7:6b:bd:e6:
         e8:7d:8f:98:dc:3c:a8:39:d3:e5:96:b4:a8:ad:c0:4a:f7:93:
         91:3c:25:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 17:50:52 2026 by rpki-client