This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/kEoI4Ub4_OLWE-S0RHTXasx1pZc.roa
File:                     kEoI4Ub4_OLWE-S0RHTXasx1pZc.roa (raw, json)
Hash identifier:          bg1mLEhoNQt0f/1o3/ZGweSMPbQj7CpwZeH2NuHMIpw=
Subject key identifier:   90:4A:08:E1:46:F8:FC:E2:D6:13:E4:B4:44:74:D7:6A:CC:75:A5:97
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       019B7E38BA62A95E263893DD539E55CE0299
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/kEoI4Ub4_OLWE-S0RHTXasx1pZc.roa
Signing time:             Fri 02 Jan 2026 10:20:05 +0000
ROA not before:           Fri 02 Jan 2026 10:20:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212027
IP address blocks:        62.171.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Jan 2026 16:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:ba:62:a9:5e:26:38:93:dd:53:9e:55:ce:02:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Jan  2 10:20:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=904a08e146f8fce2d613e4b44474d76acc75a597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:65:69:ac:93:96:2c:21:e9:48:a0:ce:5c:17:
                    7e:99:17:4e:83:46:2e:cd:d6:4f:f3:5c:c9:e9:fa:
                    99:65:85:a3:96:6e:a5:d5:14:7f:f0:ff:2b:d1:b8:
                    c1:77:93:99:0d:56:ab:1a:18:96:ab:a5:f8:5e:84:
                    00:ce:fd:7f:f6:a4:b4:4a:d8:0b:ea:ae:07:d7:71:
                    14:e1:d8:dc:57:c9:61:c8:23:a3:da:11:89:d8:75:
                    53:0a:d4:f8:29:59:a5:02:85:87:c5:a6:cd:31:bf:
                    b7:5e:ff:07:be:33:2d:6c:0a:bf:41:81:c5:b2:9a:
                    35:a0:3e:9f:99:db:fc:68:ca:7c:76:ad:a2:6c:f2:
                    18:a1:ec:9c:11:6a:0e:1f:be:67:4e:d5:0f:c9:45:
                    cc:38:09:f1:87:f4:f9:e6:11:07:39:18:e6:ff:0a:
                    04:7b:a6:72:3b:aa:69:e3:6c:ca:ec:7e:fd:10:04:
                    9a:a2:b1:37:7b:56:79:fa:40:c2:d7:dc:4c:05:2b:
                    11:c2:7e:1d:ee:ef:b4:c5:b0:c6:9c:99:ab:f2:b1:
                    e8:80:45:fc:5b:2b:7b:88:63:d8:4d:cd:9e:61:37:
                    41:96:16:0d:99:e0:55:3d:b1:1d:4c:df:bf:53:1c:
                    7c:cc:75:8c:4a:a8:e8:d7:41:bf:8c:53:cf:0e:44:
                    0c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4A:08:E1:46:F8:FC:E2:D6:13:E4:B4:44:74:D7:6A:CC:75:A5:97
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/kEoI4Ub4_OLWE-S0RHTXasx1pZc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.171.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:19:c3:77:6c:2b:13:f0:bb:16:7f:fe:6d:43:54:ce:e0:62:
         6b:4a:68:02:7d:0d:e0:6b:10:73:e0:ab:75:bf:6c:ca:33:d3:
         96:0f:fd:e2:22:78:1a:90:0a:dc:39:34:a0:de:2a:05:2f:31:
         fc:a6:48:8e:6c:1a:0c:04:e4:09:1a:06:08:07:d8:3c:9d:d7:
         f7:19:4d:16:58:9b:52:cf:12:5d:cb:4c:92:f6:4e:e4:5b:74:
         db:68:8c:f5:10:06:7f:38:8a:6d:a8:51:c1:16:7d:b7:1a:14:
         76:66:99:25:f2:0e:19:7a:af:79:9a:1b:26:29:5d:ba:ac:79:
         09:d3:25:86:02:f8:ba:11:58:a7:3c:48:32:a8:df:26:7b:5f:
         a7:38:cd:38:d6:6e:c1:bb:62:06:5e:99:2b:f2:a2:42:18:25:
         bd:d0:b3:50:8a:d3:00:bf:c3:f4:0d:a2:8f:ee:6e:13:1f:18:
         1c:56:fe:ae:27:30:02:50:c7:54:3c:06:9f:75:53:78:cf:f6:
         38:f6:b6:a3:1f:fa:5c:8b:e8:f5:16:03:ef:1c:83:1f:87:7c:
         ac:57:b8:e2:7d:18:c9:b0:31:6a:ee:6b:c4:e3:4f:8d:67:30:
         79:cb:55:e2:e8:6f:fb:83:76:4f:75:18:4f:08:41:dc:ec:8d:
         b4:0c:59:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 21:09:55 2026 by rpki-client