This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/62RbiFwZ1_XOHrvMeuIO0qbkA1A.roa
File:                     62RbiFwZ1_XOHrvMeuIO0qbkA1A.roa (raw, json)
Hash identifier:          cnho+bLoMv/Bp0S5dtnd6UgwZIY4cZQKOz8bwCDVOf8=
Subject key identifier:   EB:64:5B:88:5C:19:D7:F5:CE:1E:BB:CC:7A:E2:0E:D2:A6:E4:03:50
Certificate issuer:       /CN=00e0b4eaf9c10791f353ba987de2360a138417bd
Certificate serial:       019C0A4E50FEBBC9A64F2AF41E9B870938EF
Authority key identifier: 00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/62RbiFwZ1_XOHrvMeuIO0qbkA1A.roa
Signing time:             Thu 29 Jan 2026 15:10:30 +0000
ROA not before:           Thu 29 Jan 2026 15:10:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31034
IP address blocks:        77.223.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0a:4e:50:fe:bb:c9:a6:4f:2a:f4:1e:9b:87:09:38:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e0b4eaf9c10791f353ba987de2360a138417bd
        Validity
            Not Before: Jan 29 15:10:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eb645b885c19d7f5ce1ebbcc7ae20ed2a6e40350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:ba:61:82:06:26:fb:05:38:89:c3:4c:22:
                    ef:c4:61:7b:bb:8f:74:e0:00:fa:f2:db:14:42:61:
                    55:87:3d:66:8f:db:36:84:8f:83:75:b7:aa:e4:52:
                    58:f3:f7:50:6e:89:31:c1:2a:c9:eb:34:8b:63:62:
                    20:5d:2b:7b:46:20:06:c7:58:c1:48:8c:02:c2:a6:
                    2f:20:34:d0:20:85:cb:2c:e2:1e:b3:1f:80:f6:3a:
                    74:47:96:31:8e:2e:51:54:cd:0c:9b:59:e0:e5:83:
                    e3:4a:41:db:3e:4f:1e:fe:e8:d7:ef:bc:8b:66:6a:
                    61:b5:4c:e6:9c:4b:ea:01:ab:ea:5c:fc:8c:88:e0:
                    94:92:1f:5e:78:e8:08:41:68:7b:90:3a:70:42:9c:
                    c7:ae:8c:09:32:1d:ea:d2:7a:88:09:fa:46:36:57:
                    cf:e7:3f:ba:79:c5:19:d4:7f:dd:18:8b:22:cf:82:
                    0e:39:76:4f:b9:c6:16:00:aa:36:70:20:be:32:f4:
                    81:21:9e:32:37:63:51:f7:f3:fa:66:80:76:f2:83:
                    40:d1:80:9e:d9:12:a4:48:e5:16:c1:97:fd:3b:b1:
                    8e:66:7c:cd:b2:27:cf:33:02:12:08:1a:29:92:60:
                    9c:64:95:c4:2d:dd:1a:61:41:aa:0a:d1:a6:23:f1:
                    4f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:64:5B:88:5C:19:D7:F5:CE:1E:BB:CC:7A:E2:0E:D2:A6:E4:03:50
            X509v3 Authority Key Identifier:
                keyid:00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/62RbiFwZ1_XOHrvMeuIO0qbkA1A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.223.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:33:83:51:a8:cd:fe:e4:2c:b7:16:9a:ca:86:9b:5b:f5:9d:
         65:41:0a:f2:00:ec:98:6b:4f:19:15:ae:fa:5e:9e:8c:60:84:
         0e:e7:fe:73:5c:59:a8:e5:61:89:54:1d:bf:d3:d8:a6:47:0f:
         15:47:07:06:eb:6c:09:c1:a5:e2:db:5e:cf:8a:e7:7c:b8:fe:
         87:ca:03:1c:74:45:42:a7:f3:b5:60:7a:18:84:22:26:fe:20:
         c6:a8:0f:f4:dc:57:eb:a0:55:c0:09:e8:10:06:5f:be:9c:8a:
         db:19:b9:98:0e:f7:c5:81:09:c1:80:bc:aa:7f:25:31:ba:8a:
         15:b2:71:e2:0e:75:20:4a:d8:0f:7e:af:46:41:b1:53:8b:33:
         34:cc:36:10:af:53:52:5d:e5:6b:a7:71:ee:9f:d9:af:2c:d1:
         fd:52:2b:7f:d4:92:67:48:7d:1b:86:cb:3f:22:13:79:7a:5a:
         da:a4:40:99:4a:a0:b5:56:44:07:24:fd:f8:c6:6e:77:cd:63:
         85:ef:51:c9:49:61:72:01:7d:e6:0e:fb:4e:78:2c:72:a4:b5:
         7b:6b:46:63:b7:81:58:9a:a1:92:bc:a0:e7:d6:b0:d0:26:65:
         13:e8:f8:f9:ac:d3:22:54:c7:90:d6:e3:18:3f:1e:56:7c:d2:
         d0:7f:18:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:26:15 2026 by rpki-client