This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/F0ko9p_dX45_UL03Ktzd4OR6o48.roa
File:                     F0ko9p_dX45_UL03Ktzd4OR6o48.roa (raw, json)
Hash identifier:          ZDeUYGOkL0wPqfJ87AM7peZBWAW9itv89MZgmrjEPPM=
Subject key identifier:   17:49:28:F6:9F:DD:5F:8E:7F:50:BD:37:2A:DC:DD:E0:E4:7A:A3:8F
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       019B7CEDDBB4B08F3B5991EA387BB87AD3B6
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/F0ko9p_dX45_UL03Ktzd4OR6o48.roa
Signing time:             Fri 02 Jan 2026 04:18:41 +0000
ROA not before:           Fri 02 Jan 2026 04:18:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     11426
IP address blocks:        62.72.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:db:b4:b0:8f:3b:59:91:ea:38:7b:b8:7a:d3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan  2 04:18:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=174928f69fdd5f8e7f50bd372adcdde0e47aa38f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a1:f2:9e:80:63:c1:c8:16:35:d4:34:4a:e1:
                    11:c9:67:db:f9:54:4c:4d:3a:79:38:45:93:69:1c:
                    59:cd:e0:6e:d9:ad:58:ca:cc:03:db:88:6d:23:4e:
                    f7:7d:63:e1:d7:82:bb:3b:23:a2:29:7f:ea:5a:cf:
                    51:64:2d:12:a2:8c:ab:06:d9:e3:20:b8:db:1b:bb:
                    72:a3:df:cd:e1:7a:9d:8f:5e:7f:72:6b:81:47:c8:
                    c5:6f:fe:38:27:48:58:64:c9:68:fd:c9:a6:fb:da:
                    e7:d5:3a:71:9e:c4:7a:1e:a1:50:d0:f2:00:10:1e:
                    0d:f5:8b:a9:c1:a5:67:dd:5f:fd:39:fe:87:d2:75:
                    ab:09:c4:b5:f9:58:9a:04:27:f0:4e:73:05:bb:5b:
                    7c:91:1d:00:d4:23:5b:97:94:22:44:34:95:b2:93:
                    3c:32:a5:d1:a2:a3:eb:e8:95:1b:2d:18:e2:9d:af:
                    13:3c:89:a5:c9:b2:64:a7:a7:66:dd:d6:1f:38:8f:
                    43:8f:fb:bb:d7:e9:c0:f0:70:bf:a7:12:33:31:65:
                    7b:b1:d7:40:ea:b2:7a:79:20:28:d5:5e:f3:66:36:
                    49:3f:d7:19:f7:ec:c6:d8:94:33:1d:f2:c6:cf:52:
                    dc:8c:79:6c:87:59:fd:28:9c:d9:ae:df:88:fc:b7:
                    57:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:49:28:F6:9F:DD:5F:8E:7F:50:BD:37:2A:DC:DD:E0:E4:7A:A3:8F
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/F0ko9p_dX45_UL03Ktzd4OR6o48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:32:13:e8:b9:20:8d:80:19:76:45:e1:2e:f1:fa:00:30:ab:
         5a:d8:6c:9e:d5:35:34:e7:e2:e2:33:14:0b:77:8d:b1:82:1c:
         a0:2a:e0:59:5a:63:40:f3:6e:f8:7c:be:0e:70:2f:cc:72:d6:
         37:6b:91:3d:39:cc:07:21:5d:21:9a:61:88:0a:8b:b5:50:f6:
         5f:2b:3a:1b:f7:70:6a:a7:8c:3e:38:17:57:43:a5:dd:52:c3:
         f7:5d:a3:be:22:79:ee:fa:4b:0a:70:0e:35:22:45:96:b1:65:
         8a:f2:11:7a:6d:45:44:cf:55:19:c8:c1:94:37:68:11:98:1d:
         75:76:c4:dc:f3:b5:af:7c:9a:25:ec:74:55:a6:15:c6:16:3d:
         03:2e:f7:5b:50:c8:09:b7:88:6a:f4:9a:e8:31:97:a3:48:ee:
         67:3e:8a:50:47:74:ba:b2:3c:64:94:30:89:e6:73:68:36:8e:
         40:09:fa:07:23:2b:1b:1c:13:54:f3:5c:12:2d:5a:36:cf:dd:
         7b:c7:a5:a8:b5:07:fb:9b:dd:fd:5d:c7:7d:b9:63:66:b8:a6:
         10:75:71:68:d1:a8:be:b1:a5:6d:af:78:ce:9a:61:7e:5f:ce:
         be:68:9b:63:d7:64:fd:e6:6b:8b:59:70:f9:a2:0b:29:04:da:
         5f:b0:f3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 17:57:29 2026 by rpki-client