This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/73_5iYSlORzbOfiNfRDM2uh_ESw.roa
File:                     73_5iYSlORzbOfiNfRDM2uh_ESw.roa (raw, json)
Hash identifier:          gN0crtYE8dtVNz0uFqXz4FUyiQSrGkSquVtc62m7sx8=
Subject key identifier:   EF:7F:F9:89:84:A5:39:1C:DB:39:F8:8D:7D:10:CC:DA:E8:7F:11:2C
Certificate issuer:       /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial:       019B77C746C50803DEE7BBA41B96801D2507
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/73_5iYSlORzbOfiNfRDM2uh_ESw.roa
Signing time:             Thu 01 Jan 2026 04:18:27 +0000
ROA not before:           Thu 01 Jan 2026 04:18:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199009
IP address blocks:        62.76.130.0/24 maxlen: 24
                          62.76.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:46:c5:08:03:de:e7:bb:a4:1b:96:80:1d:25:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
        Validity
            Not Before: Jan  1 04:18:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ef7ff98984a5391cdb39f88d7d10ccdae87f112c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:df:50:e3:91:10:9e:67:bb:b9:4a:82:da:10:
                    53:e0:77:54:84:ef:a2:f2:e5:3e:f2:73:d1:01:b4:
                    30:ea:df:bd:ab:7e:0c:36:40:bc:0d:8f:3c:a2:33:
                    27:9a:6c:de:30:e4:5d:2f:74:9c:30:43:ca:8a:de:
                    91:93:53:60:36:9e:80:33:3d:8d:45:d1:f6:5a:14:
                    17:f3:4f:63:1b:c7:72:c7:8e:3f:60:46:99:ed:fd:
                    14:6a:55:45:93:3b:fb:14:9b:4f:04:d0:5b:24:28:
                    f2:37:7d:b6:5a:10:d7:b5:27:68:8d:d1:68:5b:a3:
                    84:df:cb:a4:9e:49:6f:2e:a1:29:94:73:ee:1d:69:
                    b7:de:b1:9a:3f:64:3d:28:30:97:4a:f0:ca:48:48:
                    82:63:1a:4f:7f:14:1e:0a:08:7c:7d:25:25:98:3e:
                    51:1f:7d:d3:8d:f0:8d:6a:58:26:dd:99:f2:d5:4e:
                    d7:ab:61:97:25:ca:f8:b2:66:db:aa:97:a2:0a:8e:
                    80:0b:2c:50:d9:4d:95:f2:20:99:6d:0c:7b:63:f9:
                    cb:79:c1:f7:db:b6:47:24:c5:5c:63:59:8c:71:64:
                    bf:2a:4f:75:f9:6e:b5:3e:18:20:0d:06:8e:2b:75:
                    c3:dc:55:fd:85:fb:df:f0:4a:c5:a0:1a:06:f0:a5:
                    ad:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7F:F9:89:84:A5:39:1C:DB:39:F8:8D:7D:10:CC:DA:E8:7F:11:2C
            X509v3 Authority Key Identifier:
                keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/73_5iYSlORzbOfiNfRDM2uh_ESw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:2f:53:f2:eb:cd:9d:83:82:5e:08:95:2a:41:10:68:8a:b5:
         43:01:d3:14:fd:79:bb:79:fc:b1:5b:c1:af:9d:61:68:d6:b2:
         f1:67:62:42:12:9f:65:bc:96:ba:21:ac:a1:5e:92:26:45:d0:
         fb:b5:58:ff:fe:16:11:91:74:d2:f5:fe:0e:56:a7:8c:57:7e:
         3b:1e:3e:7f:0a:0c:71:03:9f:00:c6:1c:23:33:e2:e3:bd:ca:
         96:89:b9:94:d7:66:61:8c:5b:be:de:6b:dd:65:67:5a:ff:9b:
         25:1c:4d:2d:f5:82:a0:d1:8c:08:23:f8:10:a6:0d:19:b6:58:
         70:1a:b9:19:73:b6:6b:3e:9e:ce:af:c5:8d:74:fd:38:33:bc:
         8e:f3:87:20:82:81:61:57:28:ab:93:5b:29:18:58:26:1d:53:
         7a:ed:39:14:4c:00:14:c8:c1:44:f6:88:67:eb:27:4b:58:96:
         57:53:cb:7e:0b:a8:41:33:a2:6e:54:44:c0:f2:1b:46:c2:24:
         ec:63:cf:8c:2f:69:ec:37:ad:e2:cf:e4:c1:10:9a:0e:63:f8:
         ad:8a:ed:a5:57:ab:0f:d8:d1:21:67:57:86:f1:37:0a:89:b4:
         f7:ab:b9:a3:b0:5b:43:6b:e6:f0:18:f0:60:9d:9b:e2:05:7c:
         25:53:79:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3x0bFCAPe57ukG5aAHSUHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx
NjQ2NGEwHhcNMjYwMTAxMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjdmZjk4OTg0YTUzOTFjZGIzOWY4OGQ3ZDEwY2NkYWU4N2YxMTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp99Q45EQnme7uUqC2hBT4HdUhO+i
8uU+8nPRAbQw6t+9q34MNkC8DY88ojMnmmzeMORdL3ScMEPKit6Rk1NgNp6AMz2N
RdH2WhQX809jG8dyx44/YEaZ7f0UalVFkzv7FJtPBNBbJCjyN322WhDXtSdojdFo
W6OE38uknklvLqEplHPuHWm33rGaP2Q9KDCXSvDKSEiCYxpPfxQeCgh8fSUlmD5R
H33TjfCNalgm3Zny1U7Xq2GXJcr4smbbqpeiCo6ACyxQ2U2V8iCZbQx7Y/nLecH3
27ZHJMVcY1mMcWS/Kk91+W61PhggDQaOK3XD3FX9hfvf8ErFoBoG8KWtGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO9/+YmEpTkc2zn4jX0QzNrofxEsMB8GA1UdIwQY
MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt
OWU5YTFlMDM3MzhlLzEvNzNfNWlZU2xPUnpiT2ZpTmZSRE0ydWhfRVN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl
LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBPkyCMA0G
CSqGSIb3DQEBCwUAA4IBAQAoL1Py682dg4JeCJUqQRBoirVDAdMU/Xm7efyxW8Gv
nWFo1rLxZ2JCEp9lvJa6IayhXpImRdD7tVj//hYRkXTS9f4OVqeMV347Hj5/Cgxx
A58AxhwjM+LjvcqWibmU12ZhjFu+3mvdZWda/5slHE0t9YKg0YwII/gQpg0Ztlhw
GrkZc7ZrPp7Or8WNdP04M7yO84cggoFhVyirk1spGFgmHVN67TkUTAAUyMFE9ohn
6ydLWJZXU8t+C6hBM6JuVETA8htGwiTsY8+ML2nsN63iz+TBEJoOY/itiu2lV6sP
2NEhZ1eG8TcKibT3q7mjsFtDa+bwGPBgnZviBXwlU3kr
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:15:19 2026 by rpki-client