This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/rjitowNgExd3EKmyTmQyMbODtUQ.roa
File:                     rjitowNgExd3EKmyTmQyMbODtUQ.roa (raw, json)
Hash identifier:          Tq2i9bTs44ic9Q8EU6ujlmcQqAWYCYHNOE79if/NLMI=
Subject key identifier:   AE:38:AD:A3:03:60:13:17:77:10:A9:B2:4E:64:32:31:B3:83:B5:44
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       019B7CEDDA9EC9071A58F8E29C86A5742562
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/rjitowNgExd3EKmyTmQyMbODtUQ.roa
Signing time:             Fri 02 Jan 2026 04:18:41 +0000
ROA not before:           Fri 02 Jan 2026 04:18:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     7018
IP address blocks:        62.72.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:da:9e:c9:07:1a:58:f8:e2:9c:86:a5:74:25:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan  2 04:18:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ae38ada3036013177710a9b24e643231b383b544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d8:c7:60:16:e4:a0:5d:81:65:08:f9:c0:23:
                    1d:8d:8b:e3:db:a5:f2:a4:a4:ba:03:ba:5e:c5:9c:
                    38:e0:5b:95:b9:d9:55:01:72:5a:3e:70:ef:99:dc:
                    1b:1e:d6:e7:84:d0:1e:1c:60:9b:20:d1:72:72:79:
                    a8:4f:b5:65:7e:90:ca:a2:74:1b:1f:da:a4:76:7a:
                    d2:0a:ba:81:41:ae:20:57:2c:63:35:fe:0c:90:91:
                    24:d3:5e:3c:53:50:19:53:67:49:75:68:47:fd:c7:
                    23:8f:dc:f0:b4:24:03:85:68:87:cc:7d:5e:71:8f:
                    97:08:b0:3b:30:5b:49:22:04:db:7a:40:86:fc:e9:
                    12:4e:43:5f:65:a8:82:21:a2:52:5f:c7:39:43:69:
                    5e:11:2a:4f:a0:3e:bf:64:0e:cf:c7:f8:17:ef:bd:
                    17:b1:1f:4e:90:69:98:e7:ac:58:17:2e:1d:2f:1a:
                    1a:13:a3:e4:9f:ab:28:6d:84:e3:be:82:ac:ab:71:
                    31:a4:2e:ea:01:1b:ef:91:ef:d5:54:43:fb:bd:a5:
                    ec:12:7e:d2:04:60:d7:9d:29:95:8b:72:89:18:9f:
                    99:7b:4a:7b:17:de:72:4b:8f:48:e2:c2:bc:50:4e:
                    0f:a0:72:5f:d5:e1:9b:e9:c0:cc:8c:93:96:26:c5:
                    3f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:38:AD:A3:03:60:13:17:77:10:A9:B2:4E:64:32:31:B3:83:B5:44
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/rjitowNgExd3EKmyTmQyMbODtUQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.72.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:15:09:05:34:4c:d0:bb:c2:d2:f5:a0:e1:99:2b:10:13:fd:
         04:a3:c7:db:51:22:ba:82:92:6a:2f:bb:25:ad:d2:fc:37:36:
         49:77:08:6b:50:34:03:76:24:d7:64:5e:a2:42:02:3f:7a:c7:
         b0:51:03:f9:c1:0f:ce:ac:15:4d:6a:85:27:9a:e2:84:88:59:
         32:de:9e:a2:ac:49:56:c1:76:36:70:71:37:ad:12:a2:fa:dd:
         b5:38:7a:80:95:d2:1f:e2:a6:0c:d8:fd:06:a8:26:ee:b7:ad:
         44:3a:4b:52:c8:71:95:85:57:74:fb:e6:54:3a:c0:b7:10:72:
         1f:fc:14:a2:cc:6e:55:ab:8f:a4:f4:a8:50:fa:6f:74:0c:13:
         31:49:8b:63:99:fd:cc:fb:75:b0:d9:27:04:21:48:e0:68:49:
         5e:52:17:11:99:70:09:66:ee:4d:80:9a:64:20:d4:f2:89:48:
         ea:a9:74:b3:f4:60:10:86:33:61:37:eb:f0:cd:77:4c:5c:95:
         c0:26:35:be:90:5f:05:07:a6:c1:16:a9:77:64:1e:31:ca:bd:
         eb:c9:88:98:16:f8:6e:3b:76:57:1b:89:a9:b4:b3:ca:5d:e1:
         6a:9e:06:a9:bf:57:67:4e:50:2b:c4:22:04:21:69:91:c3:7a:
         6e:ff:c8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 17:51:36 2026 by rpki-client