This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/E11knFk0gckPfde_6h3IuK8P4LE.roa
File:                     E11knFk0gckPfde_6h3IuK8P4LE.roa (raw, json)
Hash identifier:          +B12oAANa/hqjobZjc2ZLivelQzH1SahC1DEv/hXMOc=
Subject key identifier:   13:5D:64:9C:59:34:81:C9:0F:7D:D7:BF:EA:1D:C8:B8:AF:0F:E0:B1
Certificate issuer:       /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial:       019B7C12474C12715B09738BC1DF219ECAC0
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/E11knFk0gckPfde_6h3IuK8P4LE.roa
Signing time:             Fri 02 Jan 2026 00:18:51 +0000
ROA not before:           Fri 02 Jan 2026 00:18:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62419
IP address blocks:        62.201.192.0/24 maxlen: 24
                          62.201.202.0/24 maxlen: 24
                          62.201.237.0/24 maxlen: 24
                          62.201.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:47:4c:12:71:5b:09:73:8b:c1:df:21:9e:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
        Validity
            Not Before: Jan  2 00:18:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=135d649c593481c90f7dd7bfea1dc8b8af0fe0b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:8d:81:62:4d:e7:6b:9d:ca:14:01:cd:79:06:
                    08:8d:62:00:e8:3e:07:04:28:1f:87:0a:d0:18:66:
                    3b:c1:46:fa:8f:a1:ae:a6:a8:f4:6a:b0:37:2d:82:
                    f3:85:c9:c0:6a:c1:6a:e8:9b:88:80:ad:ea:8d:12:
                    9a:f1:bf:41:0f:a9:59:82:b3:49:b2:bb:38:1d:b8:
                    4f:24:80:d8:8a:80:4f:98:cb:a8:0c:38:e2:25:e8:
                    27:e2:ec:4b:58:18:6b:ac:af:c3:78:c6:1c:f5:38:
                    88:81:80:c4:5a:c5:46:b7:b8:98:d0:03:a7:b1:3c:
                    96:ef:ac:ca:a3:89:fe:7b:76:b7:2a:fb:d3:53:85:
                    bd:bd:62:e4:df:c8:d4:fa:70:57:b4:3a:9b:f5:22:
                    df:97:f5:7f:cb:aa:b2:9c:6f:8b:77:d5:e8:be:a8:
                    5d:d1:04:26:5a:9d:13:58:a8:48:80:25:fc:b2:24:
                    ea:ee:36:bc:d9:9a:fa:54:19:1e:88:d7:f6:11:f4:
                    b1:91:2b:b8:dd:82:d6:b8:7d:b5:34:e5:bb:21:f8:
                    8b:a6:2e:e3:75:9f:6c:f8:ab:66:24:1d:79:f1:39:
                    22:18:62:76:85:a8:83:a8:47:27:68:4d:9b:af:24:
                    a5:14:94:5a:f5:63:ff:ed:2d:75:2a:0b:59:d6:fa:
                    fc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5D:64:9C:59:34:81:C9:0F:7D:D7:BF:EA:1D:C8:B8:AF:0F:E0:B1
            X509v3 Authority Key Identifier:
                keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/E11knFk0gckPfde_6h3IuK8P4LE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.201.192.0/24
                  62.201.202.0/24
                  62.201.237.0/24
                  62.201.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:0b:94:4a:ab:8e:d4:1f:bc:a8:4b:9e:d0:89:47:d9:16:cd:
         37:fe:08:27:e1:1a:6d:97:1f:49:47:3d:fe:b2:6a:0d:18:e7:
         9c:d7:6b:fb:ef:e8:0d:58:60:87:54:fd:83:c2:26:16:03:ee:
         b8:90:79:1a:2d:f0:39:5b:bc:1b:32:ed:53:61:7b:1d:9b:b8:
         b0:4e:80:31:e5:90:11:d1:86:51:00:2a:77:b3:00:46:55:16:
         40:24:83:73:7c:82:c2:71:bf:82:13:3d:a5:d7:d9:af:9f:86:
         0a:39:98:a8:b0:d7:33:0f:d1:57:38:00:27:6a:fa:59:11:3d:
         f4:bf:a2:75:bb:f2:f0:80:44:cc:47:d3:26:ba:03:22:cf:01:
         51:e5:38:18:ed:aa:09:2d:87:92:ae:dc:21:29:13:9e:0a:55:
         30:9b:b3:e2:6e:27:b5:7d:31:06:f5:85:30:b4:f5:ed:0c:27:
         9c:df:a6:ac:84:7d:56:21:3f:2c:f4:38:92:98:74:21:ee:43:
         bc:ea:0e:fb:e5:02:47:db:86:bb:4c:89:99:a4:65:13:44:a0:
         67:ca:eb:64:5f:86:e9:c9:bc:f2:ff:1d:b3:f2:f1:65:c9:49:
         da:c7:e5:22:0d:3d:2a:d4:d0:b7:59:8c:dd:a2:aa:d4:b5:4d:
         3b:55:67:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 04:28:29 2026 by rpki-client