This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/QwWuwVkdjBz3wZdsSno-CI2Yiho.roa
File:                     QwWuwVkdjBz3wZdsSno-CI2Yiho.roa (raw, json)
Hash identifier:          xPUqXofpXXjvDkyqf3+rVR/DoKofd8E7P1jA4t/JQ60=
Subject key identifier:   43:05:AE:C1:59:1D:8C:1C:F7:C1:97:6C:4A:7A:3E:08:8D:98:8A:1A
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       019B7CEDF049FC3589F83F3FA2C25443908F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/QwWuwVkdjBz3wZdsSno-CI2Yiho.roa
Signing time:             Fri 02 Jan 2026 04:18:46 +0000
ROA not before:           Fri 02 Jan 2026 04:18:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     401838
IP address blocks:        62.72.183.0/24 maxlen: 24
                          62.72.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:f0:49:fc:35:89:f8:3f:3f:a2:c2:54:43:90:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan  2 04:18:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4305aec1591d8c1cf7c1976c4a7a3e088d988a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:62:c5:f8:22:c2:66:60:61:d9:1c:8b:bd:4d:
                    b6:83:a0:b2:53:d7:b1:51:d9:84:e9:37:df:07:18:
                    ab:b9:67:ed:9d:a0:bf:77:91:7e:f3:1a:fa:71:22:
                    e7:ca:34:00:e9:25:dd:45:5e:ea:c7:b0:26:f2:8e:
                    64:7a:58:c3:83:37:14:d0:10:9c:84:bd:05:8e:ad:
                    88:c9:a5:2b:2b:89:47:4c:ef:a3:4a:ed:75:b9:32:
                    20:77:45:6d:4a:ed:d5:bb:27:ea:1d:47:e6:91:b9:
                    2e:33:93:d4:04:c3:fe:4a:bd:77:39:44:0a:5c:6c:
                    6f:2b:2d:db:a2:fb:c2:6a:0c:55:30:08:d0:e7:a6:
                    ad:ea:7b:df:6a:b5:8a:75:1d:6b:fb:6c:47:9a:28:
                    d6:99:ac:10:6b:7c:6d:d7:e5:66:43:35:c4:76:e6:
                    48:51:a8:ca:45:b7:f2:06:33:04:c3:f6:ac:e1:1f:
                    23:74:b7:83:1c:5a:29:a3:78:82:e0:04:c7:36:e2:
                    27:38:67:c2:dc:c4:b4:f2:4f:6d:8a:7f:93:c6:d2:
                    9a:1b:53:4e:19:44:79:b9:4a:78:2f:86:bf:9c:1a:
                    7d:05:ef:b4:4e:b6:be:90:df:3b:35:87:49:43:93:
                    aa:28:2d:23:94:36:5f:56:82:6a:29:73:f6:d2:2e:
                    c6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:05:AE:C1:59:1D:8C:1C:F7:C1:97:6C:4A:7A:3E:08:8D:98:8A:1A
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/QwWuwVkdjBz3wZdsSno-CI2Yiho.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.183.0/24
                  62.72.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:ff:94:b0:ec:86:24:c1:71:e7:9c:8e:78:bf:ee:a0:bd:fa:
         5b:1e:97:aa:49:e9:d9:74:81:8f:7f:bc:35:32:55:30:f9:f1:
         15:f2:74:18:af:3e:b0:88:cc:19:74:66:d1:bf:46:c4:dc:0b:
         29:9c:60:de:1f:4d:1a:ab:39:04:cf:2a:64:92:f5:a1:4c:a4:
         1c:68:c7:b1:ba:0e:8f:02:3b:95:96:de:87:e9:4d:f7:e8:c4:
         04:c3:23:9c:cb:40:78:3d:fb:f3:51:8b:d7:17:da:55:8e:5e:
         32:ec:b0:94:bb:43:a9:99:1a:e5:c1:2c:5c:fd:6a:25:62:d8:
         55:5b:2c:0c:1b:1e:61:7b:86:a1:a6:ef:8f:1f:e5:c6:a2:b3:
         67:80:1c:b7:99:47:28:11:2d:d2:68:61:ef:6c:0d:d2:10:5a:
         fb:e7:19:36:f4:0b:f8:c7:91:f2:19:29:09:9d:e6:15:59:c9:
         5f:94:08:ec:4c:03:00:94:e4:2d:b6:62:15:08:75:d9:f8:4d:
         d8:5a:6d:b8:18:e3:37:1b:48:09:50:70:a9:f1:fe:0c:5a:98:
         33:0e:a9:af:92:ff:4a:f1:b6:da:8a:79:b3:fb:15:b2:da:08:
         44:33:30:19:f5:5e:7f:97:ff:e7:44:ac:67:64:5a:56:80:c8:
         31:a7:23:17
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt87fBJ/DWJ+D8/osJUQ5CPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjYwMTAyMDQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzA1YWVjMTU5MWQ4YzFjZjdjMTk3NmM0YTdhM2UwODhkOTg4YTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWLF+CLCZmBh2RyLvU22g6CyU9ex
UdmE6TffBxiruWftnaC/d5F+8xr6cSLnyjQA6SXdRV7qx7Am8o5keljDgzcU0BCc
hL0Fjq2IyaUrK4lHTO+jSu11uTIgd0VtSu3VuyfqHUfmkbkuM5PUBMP+Sr13OUQK
XGxvKy3bovvCagxVMAjQ56at6nvfarWKdR1r+2xHmijWmawQa3xt1+VmQzXEduZI
UajKRbfyBjMEw/as4R8jdLeDHFopo3iC4ATHNuInOGfC3MS08k9tin+TxtKaG1NO
GUR5uUp4L4a/nBp9Be+0Tra+kN87NYdJQ5OqKC0jlDZfVoJqKXP20i7GtQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEMFrsFZHYwc98GXbEp6PgiNmIoaMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvUXdXdXdWa2RqQnozd1pkc1Nuby1DSTJZaWhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPki3AwQA
Pki+MA0GCSqGSIb3DQEBCwUAA4IBAQAn/5Sw7IYkwXHnnI54v+6gvfpbHpeqSenZ
dIGPf7w1MlUw+fEV8nQYrz6wiMwZdGbRv0bE3AspnGDeH00aqzkEzypkkvWhTKQc
aMexug6PAjuVlt6H6U336MQEwyOcy0B4PfvzUYvXF9pVjl4y7LCUu0OpmRrlwSxc
/WolYthVWywMGx5he4ahpu+PH+XGorNngBy3mUcoES3SaGHvbA3SEFr75xk29Av4
x5HyGSkJneYVWclflAjsTAMAlOQttmIVCHXZ+E3YWm24GOM3G0gJUHCp8f4MWpgz
Dqmvkv9K8bbainmz+xWy2ghEMzAZ9V5/l//nRKxnZFpWgMgxpyMX
-----END CERTIFICATE-----
Generated at Fri Jan 2 17:52:23 2026 by rpki-client