This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/D8eGC5ZKAox_KeaP1UljsqAMI3M.roa
File:                     D8eGC5ZKAox_KeaP1UljsqAMI3M.roa (raw, json)
Hash identifier:          dnNXrXfTnRxGm38nI41pfB3chpp2nN/b3F7qqu7zeoE=
Subject key identifier:   0F:C7:86:0B:96:4A:02:8C:7F:29:E6:8F:D5:49:63:B2:A0:0C:23:73
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       019B7CEDF0D4C4417A492828CE74483B4FF5
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/D8eGC5ZKAox_KeaP1UljsqAMI3M.roa
Signing time:             Fri 02 Jan 2026 04:18:46 +0000
ROA not before:           Fri 02 Jan 2026 04:18:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     401937
IP address blocks:        62.72.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:f0:d4:c4:41:7a:49:28:28:ce:74:48:3b:4f:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan  2 04:18:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0fc7860b964a028c7f29e68fd54963b2a00c2373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:55:f0:37:a5:ad:36:5c:41:c5:33:b7:53:f9:
                    a5:a0:fc:f3:4f:e7:1f:b5:3d:a4:40:27:97:d1:63:
                    9f:88:f2:39:ad:04:80:cf:cc:f0:b2:53:b0:db:2a:
                    ed:a6:9b:a4:b2:6b:6e:aa:34:ed:a8:5a:66:59:5b:
                    72:52:a4:b2:b3:49:8b:73:81:ae:dc:50:d1:d1:17:
                    20:05:20:80:9e:4a:bf:7d:2a:a0:0c:bb:0d:7a:27:
                    0f:a7:35:2a:97:73:4c:d8:55:bb:16:7e:27:72:a5:
                    1a:3a:89:46:1f:27:ee:ca:09:04:17:15:42:52:e2:
                    73:91:00:86:64:43:da:fd:74:3f:42:f0:4a:78:1a:
                    48:9d:a6:13:02:21:4f:56:63:99:df:99:3c:a9:42:
                    93:a5:49:34:2b:51:35:08:28:6c:14:50:8b:67:41:
                    27:d3:58:05:a6:37:c1:63:12:01:15:fb:ce:73:7f:
                    f3:ad:7f:e7:80:33:07:72:1d:ee:1f:5f:ac:c2:5a:
                    2a:25:70:bb:ea:89:fc:8b:53:94:8e:ba:a0:22:ed:
                    69:fd:4f:7a:e6:c2:08:4b:34:54:79:9e:28:a6:5d:
                    43:6d:bc:f7:4f:51:64:af:7b:0e:4e:e2:08:d3:fb:
                    a3:25:d8:79:f5:eb:0f:7c:07:29:93:ad:af:cd:5e:
                    58:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C7:86:0B:96:4A:02:8C:7F:29:E6:8F:D5:49:63:B2:A0:0C:23:73
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/D8eGC5ZKAox_KeaP1UljsqAMI3M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:ae:3f:2c:25:35:20:1e:28:0b:2e:4f:cb:2e:af:aa:d0:e1:
         e4:19:3c:9a:f3:c3:31:52:b6:f4:80:cf:a4:a7:6e:67:ad:89:
         89:79:7c:b8:79:b6:a8:b6:b0:72:bd:83:01:9b:85:97:40:98:
         f0:ab:45:24:ed:a7:d9:d5:23:bd:39:f9:72:c9:b3:95:ca:75:
         94:7c:8a:2b:f6:0c:0a:e2:4e:1f:c1:22:ed:b7:26:14:9a:f3:
         48:a4:7a:9f:d0:57:e9:a4:2b:cc:7e:fc:ac:22:9b:fe:45:5e:
         f8:57:f4:29:cc:99:b5:64:fc:3e:6a:e6:f0:e6:c6:ac:00:c8:
         ba:0e:17:48:4d:05:76:08:db:2d:92:7a:95:3c:e3:1c:9f:ef:
         a5:06:89:f5:21:a4:ef:e2:be:6b:34:ff:fc:68:b7:04:fa:06:
         c5:74:23:5b:20:9a:eb:82:16:92:1a:b2:7f:7c:b1:89:1e:2b:
         09:4a:a9:ba:0f:93:43:f0:80:53:ec:d3:3c:b4:e7:7f:49:0c:
         4a:37:62:f5:a8:73:60:c0:af:fa:08:27:e8:f2:45:9c:9f:53:
         15:2d:f7:e1:8f:9d:0f:1f:80:86:8a:46:1e:03:ff:cb:b1:f6:
         9e:37:36:6e:c2:99:18:21:90:30:7e:4f:f0:87:90:75:d4:67:
         98:2e:b7:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt87fDUxEF6SSgoznRIO0/1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjYwMTAyMDQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmM3ODYwYjk2NGEwMjhjN2YyOWU2OGZkNTQ5NjNiMmEwMGMyMzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFXwN6WtNlxBxTO3U/mloPzzT+cf
tT2kQCeX0WOfiPI5rQSAz8zwslOw2yrtppuksmtuqjTtqFpmWVtyUqSys0mLc4Gu
3FDR0RcgBSCAnkq/fSqgDLsNeicPpzUql3NM2FW7Fn4ncqUaOolGHyfuygkEFxVC
UuJzkQCGZEPa/XQ/QvBKeBpInaYTAiFPVmOZ35k8qUKTpUk0K1E1CChsFFCLZ0En
01gFpjfBYxIBFfvOc3/zrX/ngDMHch3uH1+swloqJXC76on8i1OUjrqgIu1p/U96
5sIISzRUeZ4opl1Dbbz3T1Fkr3sOTuII0/ujJdh59esPfAcpk62vzV5YWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA/HhguWSgKMfynmj9VJY7KgDCNzMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvRDhlR0M1WktBb3hfS2VhUDFVbGpzcUFNSTNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPki3MA0G
CSqGSIb3DQEBCwUAA4IBAQASrj8sJTUgHigLLk/LLq+q0OHkGTya88MxUrb0gM+k
p25nrYmJeXy4ebaotrByvYMBm4WXQJjwq0Uk7afZ1SO9OflyybOVynWUfIor9gwK
4k4fwSLttyYUmvNIpHqf0FfppCvMfvysIpv+RV74V/QpzJm1ZPw+aubw5sasAMi6
DhdITQV2CNstknqVPOMcn++lBon1IaTv4r5rNP/8aLcE+gbFdCNbIJrrghaSGrJ/
fLGJHisJSqm6D5ND8IBT7NM8tOd/SQxKN2L1qHNgwK/6CCfo8kWcn1MVLffhj50P
H4CGikYeA//LsfaeNzZuwpkYIZAwfk/wh5B11GeYLrf9
-----END CERTIFICATE-----
Generated at Fri Jan 2 17:57:27 2026 by rpki-client