This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/9a7DiM85xWW0SUOHj55_qdtGlrM.roa
File:                     9a7DiM85xWW0SUOHj55_qdtGlrM.roa (raw, json)
Hash identifier:          /wdQL253QIgX63BRfrM9hjhyJ7le6nAjEl2iFxxdTHQ=
Subject key identifier:   F5:AE:C3:88:CF:39:C5:65:B4:49:43:87:8F:9E:7F:A9:DB:46:96:B3
Certificate issuer:       /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial:       019B7C1155D088877679B436A2569608A721
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/9a7DiM85xWW0SUOHj55_qdtGlrM.roa
Signing time:             Fri 02 Jan 2026 00:17:49 +0000
ROA not before:           Fri 02 Jan 2026 00:17:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     24580
IP address blocks:        62.81.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:11:55:d0:88:87:76:79:b4:36:a2:56:96:08:a7:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
        Validity
            Not Before: Jan  2 00:17:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f5aec388cf39c565b44943878f9e7fa9db4696b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f0:93:24:74:48:80:95:db:82:c5:0e:58:94:
                    aa:77:18:3a:8d:d9:88:08:6b:73:dd:1c:6c:75:a4:
                    00:93:7f:63:b3:84:3e:2e:f6:95:19:6b:fd:6b:4f:
                    93:c7:34:9c:7a:da:fd:13:7a:7c:3e:4a:85:38:a8:
                    69:10:5c:5f:96:fe:55:bd:e1:ad:81:65:1f:d3:28:
                    62:a8:b1:93:dc:cf:cf:01:79:9d:b7:13:4c:c2:65:
                    a1:1e:8e:2e:5c:57:f8:03:ba:4a:4e:17:cd:24:85:
                    4a:b8:05:36:c4:c4:f5:c9:95:e6:ef:5b:53:65:1d:
                    a7:19:bd:17:96:ee:9d:c6:95:7c:ff:36:9e:fc:0c:
                    4b:75:e9:57:4d:be:0b:3c:97:68:d7:15:ba:b3:78:
                    60:fd:0f:12:cb:bf:ca:fe:43:fb:79:e9:fe:30:93:
                    79:18:78:29:37:56:f7:c6:7e:20:c9:9b:1d:c2:bb:
                    f9:26:24:fb:dc:3d:7d:83:fc:a5:b1:0c:55:f1:57:
                    40:b1:ee:bb:41:16:d4:05:57:3a:ec:58:c5:f2:0b:
                    6e:6f:7b:f9:05:86:9a:60:a7:45:e7:30:a7:66:b8:
                    d6:23:c1:e1:69:97:e9:55:a8:34:05:c7:cb:2c:63:
                    87:65:d8:90:36:26:49:f8:b9:64:37:d0:16:11:d6:
                    07:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AE:C3:88:CF:39:C5:65:B4:49:43:87:8F:9E:7F:A9:DB:46:96:B3
            X509v3 Authority Key Identifier:
                keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/9a7DiM85xWW0SUOHj55_qdtGlrM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.81.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:1d:78:b6:07:39:04:ff:a1:39:af:7a:4c:c4:86:61:3d:92:
         2b:3b:aa:55:3d:82:ca:d0:dc:31:d5:d7:30:02:18:c6:3e:2a:
         84:24:cb:f6:d6:93:e0:ae:dc:96:e4:5b:cb:02:cf:be:40:6b:
         52:2a:67:69:83:2b:07:cf:70:16:14:6c:7d:f0:75:33:a6:b7:
         26:68:83:ca:0f:09:25:94:41:a0:e1:a2:d2:47:36:12:7d:a1:
         fb:eb:02:6d:62:e3:d1:8c:a5:0d:21:3a:48:b5:b1:a8:04:10:
         a8:64:fb:e1:c4:07:40:af:6a:55:ba:10:ad:e8:2d:8f:b0:92:
         e6:8e:c1:54:a4:38:3d:bb:c6:9c:39:e5:f7:f3:33:0c:ca:e8:
         6b:9b:32:7f:b0:a7:7e:c7:f5:d1:df:1f:95:f7:70:27:de:41:
         61:db:c5:74:ab:0f:58:09:15:f7:bf:c5:80:a9:14:2a:df:c5:
         93:e1:f9:a4:5d:55:f8:5b:34:38:c0:14:4f:36:7b:90:84:bd:
         67:d1:d7:3b:35:a1:b4:cf:52:18:c9:02:9a:e3:0a:d4:26:31:
         e7:d2:79:b9:6a:e5:f4:9a:5c:3c:8a:de:24:a8:4d:39:e1:0f:
         a4:e7:0b:56:5c:67:ea:16:61:b2:60:ca:d7:6f:45:2f:5c:95:
         ba:bd:d1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:42:39 2026 by rpki-client