This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/pG4SaDGL8oxVWM_lX5MVvm8Qcaw.roa
File:                     pG4SaDGL8oxVWM_lX5MVvm8Qcaw.roa (raw, json)
Hash identifier:          Odu/JQE+NuqQnFtuUP1vj2iDoVgw37fFgQfUJkGsevc=
Subject key identifier:   A4:6E:12:68:31:8B:F2:8C:55:58:CF:E5:5F:93:15:BE:6F:10:71:AC
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       019B501D34CB034B7EF7569625F940A29745
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/pG4SaDGL8oxVWM_lX5MVvm8Qcaw.roa
Signing time:             Wed 24 Dec 2025 11:27:29 +0000
ROA not before:           Wed 24 Dec 2025 11:27:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        62.72.161.0/24 maxlen: 24
                          62.72.162.0/23 maxlen: 23
                          62.72.164.0/22 maxlen: 22
                          62.72.164.0/23 maxlen: 23
                          62.72.170.0/24 maxlen: 24
                          62.72.171.0/24 maxlen: 24
                          62.72.187.0/24 maxlen: 24
                          62.72.191.0/24 maxlen: 24
                          81.21.1.0/24 maxlen: 24
                          81.21.2.0/23 maxlen: 23
                          81.21.4.0/22 maxlen: 24
                          176.57.56.0/24 maxlen: 24
                          176.57.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:50:1d:34:cb:03:4b:7e:f7:56:96:25:f9:40:a2:97:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Dec 24 11:27:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a46e1268318bf28c5558cfe55f9315be6f1071ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:44:7b:1e:eb:e0:61:13:2e:12:45:40:95:a4:
                    ad:54:ee:8a:68:61:ac:34:f3:a0:d5:53:be:3b:94:
                    a5:12:a8:e6:e4:bc:ae:e2:c6:ae:bb:f3:a0:2a:30:
                    50:80:2e:f8:9c:0d:ee:75:2e:f1:06:c1:d3:80:7f:
                    ea:05:8f:8b:ce:12:de:02:7f:6e:cc:1e:07:6a:ab:
                    cc:6b:8e:ee:64:a6:57:72:bd:53:ff:1a:25:51:67:
                    f4:ec:fb:82:a8:1b:3b:26:15:a6:ed:c4:38:e7:f0:
                    f0:4e:f2:23:66:03:3c:f5:5f:ed:e8:14:76:9c:bb:
                    93:fb:68:99:dc:12:f3:6b:21:b7:47:32:ff:23:35:
                    98:b8:7d:b3:2b:2e:5d:de:a3:c5:58:2b:82:a2:3a:
                    b6:56:dc:6f:88:05:d9:bc:5d:8d:4e:39:08:69:b9:
                    7b:75:07:df:63:18:00:e7:ef:b8:73:61:7f:0f:9e:
                    5a:5e:f7:6b:18:8e:14:30:bd:0e:27:b5:29:5a:b4:
                    ab:b9:52:37:10:de:47:e8:43:6f:2d:f6:3a:6c:a1:
                    0c:0c:c6:37:f3:09:b0:43:44:e5:75:af:b2:f6:7d:
                    fe:3f:18:76:f0:12:77:63:32:3a:65:36:c5:e8:79:
                    72:fa:dd:9d:fb:e2:4b:14:f7:c6:3a:78:04:91:13:
                    bc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6E:12:68:31:8B:F2:8C:55:58:CF:E5:5F:93:15:BE:6F:10:71:AC
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/pG4SaDGL8oxVWM_lX5MVvm8Qcaw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.161.0-62.72.167.255
                  62.72.170.0/23
                  62.72.187.0/24
                  62.72.191.0/24
                  81.21.1.0-81.21.7.255
                  176.57.56.0/24
                  176.57.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:38:a3:82:9e:16:a4:fd:2a:77:16:f5:9e:54:12:29:7a:43:
         61:f7:05:74:73:d9:59:16:9f:ff:b2:17:7d:1c:b9:b7:fe:12:
         40:bf:c4:ed:e6:43:31:f8:e3:94:da:41:b5:06:1a:b2:f8:aa:
         61:b0:9b:83:16:bb:67:4c:bf:74:3d:90:ad:f2:30:54:86:7c:
         c4:aa:ad:ee:35:5a:5f:2e:01:d2:3c:c2:73:72:e5:5e:b3:04:
         f1:c2:71:69:81:18:9a:7f:cd:31:66:3a:8a:f4:a2:a3:b2:a9:
         62:20:04:9c:4b:11:3f:f3:72:8d:c2:e3:ac:5a:b9:e3:92:f4:
         c0:d0:98:02:c4:1b:be:9b:5f:c2:ba:bf:a4:11:72:a9:ec:c3:
         88:6e:12:84:92:a3:c2:22:6d:56:a7:0b:89:3c:e7:46:d3:a5:
         a4:ab:2f:42:5b:f5:09:da:57:65:6f:27:1b:70:9c:25:c6:eb:
         19:c3:6f:a7:b8:38:83:08:93:a1:1f:9a:ec:be:89:c6:30:f1:
         66:7e:e9:16:8e:2e:6b:a7:8d:34:bb:69:b6:64:57:bb:14:a5:
         69:46:73:46:ee:d5:4e:42:aa:b5:17:71:cd:4d:59:7a:21:11:
         58:ac:fd:e2:ab:ca:e9:e4:da:69:ac:b9:f5:fc:17:03:18:b9:
         ee:a9:b9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 00:46:20 2025 by rpki-client