This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/k5sEgRhceCZcI9iXBGP9pqEJxRk.roa
File:                     k5sEgRhceCZcI9iXBGP9pqEJxRk.roa (raw, json)
Hash identifier:          tPcC23jabsO/HaEh9FaehTyQBFjn5NH1jZecfICVZK0=
Subject key identifier:   93:9B:04:81:18:5C:78:26:5C:23:D8:97:04:63:FD:A6:A1:09:C5:19
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       019B09693B593F7D5FD710A2AA6E177A28A3
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/k5sEgRhceCZcI9iXBGP9pqEJxRk.roa
Signing time:             Wed 10 Dec 2025 17:57:29 +0000
ROA not before:           Wed 10 Dec 2025 17:57:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     9304
IP address blocks:        62.72.168.0/24 maxlen: 24
                          62.72.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 07:05:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:09:69:3b:59:3f:7d:5f:d7:10:a2:aa:6e:17:7a:28:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Dec 10 17:57:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=939b0481185c78265c23d8970463fda6a109c519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c9:90:03:68:8d:35:10:59:8a:34:c1:9c:a8:
                    14:3d:c1:53:f7:7c:15:43:6c:21:f9:a1:6b:0e:97:
                    10:d1:0b:3b:d4:c9:7e:43:d9:45:08:59:98:cc:cb:
                    82:76:32:8e:c8:27:e5:7a:af:21:9f:01:9d:da:ae:
                    6a:62:e0:f7:2b:4e:a0:82:ea:fc:a7:9b:dd:38:6b:
                    55:78:5e:b2:30:04:53:89:c1:e0:bc:79:c0:23:ce:
                    33:4a:cd:07:8c:bc:4a:b6:55:74:30:ee:f3:c6:51:
                    13:c9:cd:4f:e7:d9:06:41:77:37:33:f1:6d:06:35:
                    3d:1b:a2:79:a3:5f:d5:e5:03:04:4c:d8:dc:3d:17:
                    72:c9:8c:0c:54:99:e8:58:62:d6:0c:6b:b9:78:2b:
                    bf:2e:0e:57:9f:90:ed:49:aa:63:4c:db:0f:bc:4e:
                    43:00:e5:dc:97:e6:d2:10:52:8b:bb:af:7f:da:a6:
                    eb:4d:73:72:2b:d1:5f:ba:81:c0:cd:5a:ae:0e:3f:
                    2b:d2:a5:c0:87:d7:86:a7:ca:e0:7e:c9:b6:ad:41:
                    81:0c:fc:8f:22:8a:5c:4a:92:81:b6:d2:5a:f8:f3:
                    af:6d:5c:bb:cb:a8:6d:5d:cf:08:67:bc:22:50:27:
                    db:a5:23:d8:f0:55:30:ee:13:83:0e:6c:ca:17:9e:
                    c8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9B:04:81:18:5C:78:26:5C:23:D8:97:04:63:FD:A6:A1:09:C5:19
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/k5sEgRhceCZcI9iXBGP9pqEJxRk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.168.0/24
                  62.72.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:dc:ee:c8:17:d7:6f:27:7a:3e:9f:af:73:5d:e8:37:53:98:
         22:db:f3:4b:52:de:12:68:3e:a4:fa:ed:64:76:79:85:a9:7d:
         b4:9f:7e:f9:6d:cc:db:54:dd:ad:9b:f2:f0:e6:56:b9:d2:ef:
         5e:26:db:c2:62:7c:7f:a0:cb:02:0a:83:2f:85:23:2e:9c:53:
         05:3f:b8:f0:c8:8e:84:a0:72:dd:0e:f8:d6:3b:8c:e5:16:19:
         40:d6:76:14:5d:bf:d3:9e:e6:3a:3d:39:85:34:a0:e5:c6:84:
         72:c2:a8:a2:86:f0:ae:6e:bc:32:e8:ed:40:ef:a6:74:6c:ce:
         ea:1b:31:04:ea:eb:c3:6f:b8:ab:1a:e4:a8:c2:da:1c:9d:0f:
         e8:54:66:f8:d8:f0:76:e9:1e:06:a8:7c:a4:b0:9d:de:8b:05:
         62:7a:73:d5:40:01:17:08:a9:e2:38:e4:ad:97:ff:1f:b6:19:
         56:96:d3:48:a9:99:83:1f:24:15:09:bb:33:1d:69:64:ee:b4:
         0b:a8:95:f8:6d:d8:e1:22:3a:a9:a2:49:05:bc:a6:ee:01:45:
         be:34:91:17:a8:93:3d:66:d9:de:43:e3:e1:e9:f8:d8:33:b0:
         a4:ed:7a:ef:6f:e1:63:e4:8a:e2:a7:0e:fa:45:5d:47:5c:7e:
         b6:6e:94:da
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZsJaTtZP31f1xCiqm4XeiijMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjUxMjEwMTc1NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzliMDQ4MTE4NWM3ODI2NWMyM2Q4OTcwNDYzZmRhNmExMDljNTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsmQA2iNNRBZijTBnKgUPcFT93wV
Q2wh+aFrDpcQ0Qs71Ml+Q9lFCFmYzMuCdjKOyCfleq8hnwGd2q5qYuD3K06ggur8
p5vdOGtVeF6yMARTicHgvHnAI84zSs0HjLxKtlV0MO7zxlETyc1P59kGQXc3M/Ft
BjU9G6J5o1/V5QMETNjcPRdyyYwMVJnoWGLWDGu5eCu/Lg5Xn5DtSapjTNsPvE5D
AOXcl+bSEFKLu69/2qbrTXNyK9FfuoHAzVquDj8r0qXAh9eGp8rgfsm2rUGBDPyP
IopcSpKBttJa+POvbVy7y6htXc8IZ7wiUCfbpSPY8FUw7hODDmzKF57I6wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJObBIEYXHgmXCPYlwRj/aahCcUZMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvazVzRWdSaGNlQ1pjSTlpWEJHUDlwcUVKeFJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPkioAwQA
PkiuMA0GCSqGSIb3DQEBCwUAA4IBAQBh3O7IF9dvJ3o+n69zXeg3U5gi2/NLUt4S
aD6k+u1kdnmFqX20n375bczbVN2tm/Lw5la50u9eJtvCYnx/oMsCCoMvhSMunFMF
P7jwyI6EoHLdDvjWO4zlFhlA1nYUXb/TnuY6PTmFNKDlxoRywqiihvCubrwy6O1A
76Z0bM7qGzEE6uvDb7irGuSowtocnQ/oVGb42PB26R4GqHyksJ3eiwVienPVQAEX
CKniOOStl/8fthlWltNIqZmDHyQVCbszHWlk7rQLqJX4bdjhIjqpokkFvKbuAUW+
NJEXqJM9ZtneQ+Ph6fjYM7Ck7Xrvb+Fj5Iripw76RV1HXH62bpTa
-----END CERTIFICATE-----
Generated at Mon Dec 15 14:54:37 2025 by rpki-client