This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/jmLtJUxHPxpB7box3rNypwD46s0.roa
File:                     jmLtJUxHPxpB7box3rNypwD46s0.roa (raw, json)
Hash identifier:          ioSXmdZQKPgQzhxeOsda7o3/dqgp5Z2LIfjrfCe2EH0=
Subject key identifier:   8E:62:ED:25:4C:47:3F:1A:41:ED:BA:31:DE:B3:72:A7:00:F8:EA:CD
Certificate issuer:       /CN=9de783e9acd56992f5835fb4882183500ca03c83
Certificate serial:       019B77C69C1754612E1A522ECBC3673B3F7B
Authority key identifier: 9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/jmLtJUxHPxpB7box3rNypwD46s0.roa
Signing time:             Thu 01 Jan 2026 04:17:43 +0000
ROA not before:           Thu 01 Jan 2026 04:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        62.182.168.0/21 maxlen: 21
                          62.182.168.0/24 maxlen: 24
                          62.182.169.0/24 maxlen: 24
                          62.182.170.0/24 maxlen: 24
                          62.182.171.0/24 maxlen: 24
                          62.182.172.0/24 maxlen: 24
                          62.182.173.0/24 maxlen: 24
                          62.182.174.0/24 maxlen: 24
                          62.182.175.0/24 maxlen: 24
                          83.97.96.0/21 maxlen: 21
                          83.97.96.0/24 maxlen: 24
                          83.97.97.0/24 maxlen: 24
                          83.97.98.0/24 maxlen: 24
                          83.97.99.0/24 maxlen: 24
                          83.97.100.0/24 maxlen: 24
                          83.97.101.0/24 maxlen: 24
                          83.97.102.0/24 maxlen: 24
                          83.97.103.0/24 maxlen: 24
                          89.47.52.0/24 maxlen: 24
                          89.47.252.0/24 maxlen: 24
                          91.202.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:9c:17:54:61:2e:1a:52:2e:cb:c3:67:3b:3f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de783e9acd56992f5835fb4882183500ca03c83
        Validity
            Not Before: Jan  1 04:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8e62ed254c473f1a41edba31deb372a700f8eacd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e0:13:01:1e:48:37:e2:0b:69:2a:9d:80:28:
                    fa:32:be:c0:d2:93:3b:92:4f:f2:ba:f8:b7:c2:2d:
                    9b:80:2c:73:84:44:16:91:27:e0:11:63:3f:15:c6:
                    6e:04:81:57:6a:3c:9f:c7:1e:b6:e6:b7:98:a5:3c:
                    b6:ce:d9:3e:f6:59:17:6d:9f:c3:68:75:99:25:f1:
                    03:91:70:98:62:b5:6a:0c:a9:cc:71:60:24:49:41:
                    fe:df:d1:de:12:3b:88:f4:0a:fc:4a:fb:68:aa:d9:
                    06:62:9f:fa:ff:13:fd:12:bc:a8:61:e5:1a:f8:fa:
                    cd:4c:89:cd:03:8a:a2:e5:26:4f:89:ab:6f:01:ca:
                    4b:2d:f6:23:a7:e2:07:66:f5:48:34:38:38:1b:70:
                    4c:bb:b3:e8:1e:bb:1b:4d:ee:6a:f1:1a:10:91:b0:
                    c7:dc:61:61:bc:fd:2b:e5:ca:c1:df:4a:0d:c3:9c:
                    0a:1f:5e:92:f5:67:fb:74:84:74:f6:ca:04:5b:8f:
                    f4:be:6d:7e:54:dc:c7:6e:ba:74:1a:bd:38:7c:a3:
                    e3:92:7f:d4:7c:15:54:49:5d:73:cf:72:e7:9f:ad:
                    95:a7:a9:4f:53:88:64:2a:fa:a8:99:ae:09:d9:9a:
                    1a:2e:20:30:4f:a4:b6:00:ec:57:e8:6b:6e:b3:9f:
                    74:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:62:ED:25:4C:47:3F:1A:41:ED:BA:31:DE:B3:72:A7:00:F8:EA:CD
            X509v3 Authority Key Identifier:
                keyid:9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/jmLtJUxHPxpB7box3rNypwD46s0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.182.168.0/21
                  83.97.96.0/21
                  89.47.52.0/24
                  89.47.252.0/24
                  91.202.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:99:e2:f0:b0:32:38:dc:70:e0:a0:1b:a3:eb:c2:38:ee:39:
         39:33:5f:3a:00:cc:77:ef:53:32:0e:5b:f3:88:02:50:e9:6b:
         dd:e6:58:08:2b:b8:41:48:70:1b:7d:5b:10:4a:93:13:4c:c3:
         44:95:77:82:b3:51:0b:57:5a:f5:04:74:88:0b:ad:ed:20:ba:
         b0:16:25:65:ad:1a:62:72:ba:2f:2b:f7:f3:07:30:5a:cd:a6:
         c4:c6:7d:ba:b7:ff:89:de:77:be:3e:c3:b3:4e:43:58:b4:d6:
         9a:1c:41:75:01:a3:8a:2a:8a:ff:72:8c:a7:ae:fd:22:ec:ee:
         d6:21:47:33:75:01:f3:47:41:89:91:53:42:ac:96:a6:ce:35:
         cb:a0:a2:50:37:d1:fe:11:91:16:cc:19:58:56:da:d0:f3:03:
         38:24:1e:e4:68:90:41:e2:37:53:56:21:d5:5b:e2:c5:90:ca:
         7d:66:e5:9c:15:3f:b3:fb:d0:23:8f:a4:b5:dc:6c:02:17:fe:
         2e:ec:ca:b3:0f:e7:52:c4:4d:5c:e5:22:68:44:a3:d7:9e:de:
         8b:66:2a:63:35:70:99:64:fe:5f:2e:bd:92:1b:94:b2:63:fb:
         fb:cc:bc:a4:1a:9c:7a:07:8b:fe:83:21:6e:c3:3e:15:7c:62:
         c5:e5:c5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:29:40 2026 by rpki-client