This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/d5ojSCO2XWOUScC3WS5D23IooRs.roa
File:                     d5ojSCO2XWOUScC3WS5D23IooRs.roa (raw, json)
Hash identifier:          7eZ8u0e5OUrm/MeYD7JMiVS/XTBb4EBj4ndoARguS9Q=
Subject key identifier:   77:9A:23:48:23:B6:5D:63:94:49:C0:B7:59:2E:43:DB:72:28:A1:1B
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       019B63F66174F14AF33C49BA85CFB84A4F5C
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/d5ojSCO2XWOUScC3WS5D23IooRs.roa
Signing time:             Sun 28 Dec 2025 07:57:29 +0000
ROA not before:           Sun 28 Dec 2025 07:57:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        62.72.161.0/24 maxlen: 24
                          62.72.162.0/23 maxlen: 23
                          62.72.162.0/24 maxlen: 24
                          62.72.164.0/22 maxlen: 22
                          62.72.164.0/23 maxlen: 23
                          62.72.170.0/24 maxlen: 24
                          62.72.171.0/24 maxlen: 24
                          62.72.187.0/24 maxlen: 24
                          62.72.191.0/24 maxlen: 24
                          81.21.1.0/24 maxlen: 24
                          81.21.2.0/23 maxlen: 23
                          81.21.4.0/22 maxlen: 24
                          176.57.56.0/24 maxlen: 24
                          176.57.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 31 Dec 2025 13:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:63:f6:61:74:f1:4a:f3:3c:49:ba:85:cf:b8:4a:4f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Dec 28 07:57:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=779a234823b65d639449c0b7592e43db7228a11b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:57:c4:61:ad:5e:a3:2f:86:7f:71:d7:90:ed:
                    b8:24:05:59:c6:3d:5f:f7:7d:71:51:2b:54:6d:1c:
                    40:00:b8:3c:f1:c4:c6:84:ce:e7:69:67:cf:09:4a:
                    d7:d0:27:0e:93:44:a9:0d:c7:4c:37:d0:3d:c1:ae:
                    ff:16:07:95:b0:29:11:e9:c9:e1:e6:fb:ff:c1:a5:
                    f8:f1:74:12:51:cc:a9:67:f2:18:a9:23:e9:ec:c9:
                    f5:0f:5c:dc:e0:95:e8:d5:12:c1:13:9a:7a:f7:ae:
                    df:40:63:d0:09:64:68:83:ed:42:ab:57:df:37:7e:
                    03:c2:1c:c2:48:74:f6:1e:c1:3f:13:4d:86:03:df:
                    a6:ec:87:19:b7:41:1a:00:1b:1d:78:9a:dd:e4:50:
                    ca:26:78:75:89:4d:d4:44:bd:1b:73:18:ae:84:a2:
                    ef:64:bd:0c:24:c9:f3:6f:95:af:b9:ed:7d:67:ce:
                    fb:38:52:57:22:fc:bf:6f:5c:46:23:5c:6e:51:d5:
                    d1:fb:85:44:7f:f2:3f:68:4f:24:e5:66:72:7c:2c:
                    08:06:6c:9e:f0:e4:3c:15:53:97:2b:4c:40:ba:d9:
                    ca:6c:ea:46:29:17:d6:b1:41:24:eb:13:3e:48:88:
                    30:28:b8:ac:58:0d:72:8f:13:65:32:84:31:63:2c:
                    9a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9A:23:48:23:B6:5D:63:94:49:C0:B7:59:2E:43:DB:72:28:A1:1B
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/d5ojSCO2XWOUScC3WS5D23IooRs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.161.0-62.72.167.255
                  62.72.170.0/23
                  62.72.187.0/24
                  62.72.191.0/24
                  81.21.1.0-81.21.7.255
                  176.57.56.0/24
                  176.57.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:12:a9:9e:6b:41:9e:0f:29:b7:af:4a:36:07:74:a5:6f:46:
         32:65:7b:b2:1f:9e:d7:20:ce:f0:9f:37:a2:d8:db:79:87:20:
         2c:44:71:2a:12:fe:91:37:f6:de:9a:9f:20:60:f6:94:76:18:
         ba:0b:1c:d3:be:63:e1:1d:74:51:0d:b7:4a:60:2f:46:ef:b2:
         eb:cd:a0:15:4e:a5:17:81:39:0a:48:66:30:81:c1:6e:4e:b9:
         b3:ea:9c:a2:12:11:9e:76:f2:fd:c8:bd:df:b3:e0:08:1e:46:
         aa:b8:29:ba:04:fc:ee:96:92:96:a6:cc:b7:16:63:54:b6:f3:
         4a:a1:f1:88:00:06:22:4b:81:29:76:92:9e:cf:36:8b:88:4f:
         a2:05:57:d9:b0:76:5e:b9:aa:8c:4b:98:61:93:86:38:ff:31:
         82:73:2b:b8:f1:6e:f4:36:19:2f:c3:da:67:dc:12:e2:2a:ec:
         ad:46:68:c8:42:50:ff:19:4a:b3:3a:67:0a:a6:fa:25:5f:0c:
         41:c5:ee:21:20:b2:17:8f:c5:aa:cc:24:93:93:28:35:da:27:
         c4:15:6f:a2:02:76:b7:47:a2:74:8d:5b:93:77:51:9c:8e:20:
         2c:aa:2b:4d:aa:e9:f5:5b:d0:f8:3f:45:79:62:8f:92:41:b7:
         8c:aa:b6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 21:05:17 2025 by rpki-client