This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Qu7RabHhMGXo7Jbd-buXK9tQOQ8.roa
File:                     Qu7RabHhMGXo7Jbd-buXK9tQOQ8.roa (raw, json)
Hash identifier:          Is2zqCObxzxyRTLurzDszhgJjeBbmDneFFkeCf5fwOY=
Subject key identifier:   42:EE:D1:69:B1:E1:30:65:E8:EC:96:DD:F9:BB:97:2B:DB:50:39:0F
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       019B7CEDDDCFF3BA46230E31C762E0F3102F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Qu7RabHhMGXo7Jbd-buXK9tQOQ8.roa
Signing time:             Fri 02 Jan 2026 04:18:42 +0000
ROA not before:           Fri 02 Jan 2026 04:18:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     30058
IP address blocks:        62.72.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:dd:cf:f3:ba:46:23:0e:31:c7:62:e0:f3:10:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan  2 04:18:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=42eed169b1e13065e8ec96ddf9bb972bdb50390f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:22:da:67:2b:9b:4c:1c:e8:d4:00:50:89:59:
                    91:79:d1:0f:c1:ad:bd:6b:4a:cb:67:ca:7c:08:42:
                    3b:c8:57:20:c7:9b:c8:df:19:98:b6:52:56:e7:51:
                    82:b9:95:73:0b:42:26:b6:17:e8:8a:9f:5d:cd:6a:
                    51:37:6d:d3:bf:d8:6f:fc:99:20:c7:ae:da:98:2c:
                    22:e8:9d:f8:70:ec:32:f1:69:24:3b:b3:b6:01:21:
                    32:8d:8d:d8:89:9c:f5:13:4d:ea:27:17:d5:1d:73:
                    c8:a4:1b:0e:9a:6a:c5:1c:43:c1:87:c0:d7:90:53:
                    b5:cd:fc:4b:3f:e5:3b:8a:80:ab:27:61:0f:d2:fe:
                    c7:92:f1:8e:bc:51:c0:07:c7:ff:f2:06:74:66:f0:
                    9b:2a:0b:78:97:d2:40:de:b3:10:5e:69:20:18:8b:
                    96:73:18:4c:6f:76:12:07:a8:ed:ec:62:dd:28:bd:
                    37:a3:fd:a3:e8:7a:b0:40:73:57:79:75:e7:f8:a7:
                    1e:a9:11:aa:27:e3:0c:28:b4:b6:98:0f:a9:76:75:
                    8a:74:61:cf:a2:23:e9:1b:82:86:fc:69:10:96:d1:
                    ff:86:78:a5:e7:2d:a2:5a:15:b8:32:36:80:4b:69:
                    5c:12:38:75:a3:08:e6:4b:39:2e:dd:31:41:20:e1:
                    2c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EE:D1:69:B1:E1:30:65:E8:EC:96:DD:F9:BB:97:2B:DB:50:39:0F
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Qu7RabHhMGXo7Jbd-buXK9tQOQ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:d5:61:bc:ee:74:de:a2:76:15:4d:83:ae:c7:3f:ed:30:bf:
         71:8d:09:63:22:b7:a3:14:e2:46:fb:43:14:c1:10:3b:2a:fc:
         c2:7b:df:0d:12:b7:2b:fc:93:e5:9f:c6:3a:13:19:da:32:d0:
         66:5e:fa:f6:7f:94:9b:1f:b6:07:e1:d2:bf:f3:a8:0a:92:54:
         e9:4d:16:88:72:91:af:19:71:c1:dc:bf:d7:13:51:1f:6c:68:
         50:65:7c:7a:e8:ac:3f:66:0f:fb:68:f2:31:f6:89:23:77:53:
         d9:e2:34:28:14:4e:20:18:c9:95:91:dd:b8:ce:5c:d2:91:6d:
         16:61:c1:eb:56:9b:a9:7b:e3:55:a1:b7:7f:c9:e1:28:3c:7a:
         44:58:d6:ed:d5:28:68:3f:4c:43:6a:97:10:2f:a7:6d:72:d9:
         ff:52:33:cb:4f:81:8f:27:bc:32:37:0d:04:34:5a:9e:76:4e:
         72:21:d9:53:1d:19:eb:e0:8c:a2:10:a2:43:8d:05:e8:1a:d7:
         50:e2:51:83:06:34:c9:1c:bb:a9:b4:30:14:e5:60:9d:60:a3:
         ac:5a:74:c8:a1:c2:4f:75:5f:3d:c9:ac:46:45:82:37:ad:81:
         6c:ee:8c:1f:7f:33:da:14:ae:05:33:6a:92:05:32:ef:18:e6:
         0b:b3:d0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 17:50:41 2026 by rpki-client