This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/7eIzHvINnFqHZBOWvru0J6FjDb8.roa
File:                     7eIzHvINnFqHZBOWvru0J6FjDb8.roa (raw, json)
Hash identifier:          Dv2FZyAGPdsQN62gOmL7jMpfdjwxeMKFTL1oAf/BKfc=
Subject key identifier:   ED:E2:33:1E:F2:0D:9C:5A:87:64:13:96:BE:BB:B4:27:A1:63:0D:BF
Certificate issuer:       /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial:       019B7C7FDE67C5BFC8EF4A28D86030AE85D6
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/7eIzHvINnFqHZBOWvru0J6FjDb8.roa
Signing time:             Fri 02 Jan 2026 02:18:33 +0000
ROA not before:           Fri 02 Jan 2026 02:18:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15670
IP address blocks:        62.177.128.0/17 maxlen: 24
                          62.177.128.0/24 maxlen: 24
                          62.177.133.0/24 maxlen: 24
                          62.177.136.0/22 maxlen: 24
                          62.177.144.0/24 maxlen: 24
                          62.177.146.0/23 maxlen: 24
                          62.177.148.0/24 maxlen: 24
                          62.177.150.0/23 maxlen: 24
                          62.177.152.0/21 maxlen: 24
                          62.177.160.0/21 maxlen: 24
                          62.177.168.0/24 maxlen: 24
                          62.177.170.0/23 maxlen: 24
                          62.177.172.0/22 maxlen: 24
                          62.177.176.0/20 maxlen: 24
                          62.177.192.0/18 maxlen: 24
                          82.204.0.0/17 maxlen: 24
                          82.204.0.0/18 maxlen: 24
                          82.204.10.0/24 maxlen: 24
                          82.204.28.0/22 maxlen: 24
                          82.204.48.0/20 maxlen: 24
                          82.204.64.0/19 maxlen: 24
                          82.204.68.0/23 maxlen: 24
                          82.204.120.0/22 maxlen: 24
                          82.204.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 02:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:de:67:c5:bf:c8:ef:4a:28:d8:60:30:ae:85:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
        Validity
            Not Before: Jan  2 02:18:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ede2331ef20d9c5a87641396bebbb427a1630dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fa:af:52:f1:a4:23:70:da:b1:9b:1e:14:64:
                    56:c2:0e:63:b4:5b:b3:64:42:f5:a5:88:7c:8a:68:
                    2f:99:af:ee:9f:3f:68:d6:61:26:cd:f3:0b:97:0a:
                    f4:14:a0:d9:3a:0c:2a:27:7f:5d:9f:e4:52:99:78:
                    21:93:f4:92:b3:e9:70:88:9d:9a:89:64:b3:77:b0:
                    e6:0a:43:08:55:8e:08:da:9a:cb:d7:01:4a:73:c8:
                    8a:0e:49:68:30:a8:c5:99:e5:18:d4:4e:77:b3:76:
                    f9:e8:0a:c0:01:cb:b8:79:e6:97:c2:54:7a:f8:eb:
                    76:41:af:0c:57:d4:27:8c:dd:95:b0:70:4b:dc:fa:
                    9f:1b:b8:91:5c:33:bb:58:b2:ab:d7:95:ab:f4:e1:
                    26:c2:15:c5:aa:5c:23:4a:e9:b3:3b:1b:46:f7:a0:
                    6a:25:4a:91:d6:92:72:ea:ab:4d:29:84:fa:bf:47:
                    51:91:b0:1f:43:bf:9a:c1:44:a3:9e:d9:25:4e:5e:
                    62:c0:39:32:36:ec:7a:88:cf:4a:91:a9:51:d5:fe:
                    c2:12:81:1b:89:c2:f7:be:fd:39:80:e9:cd:e3:02:
                    93:ac:e9:ef:0f:cb:ed:da:4a:14:6a:fd:dd:4a:ba:
                    75:6e:bc:8a:79:c5:45:20:ae:dd:08:b0:c0:3c:56:
                    5e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E2:33:1E:F2:0D:9C:5A:87:64:13:96:BE:BB:B4:27:A1:63:0D:BF
            X509v3 Authority Key Identifier:
                keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/7eIzHvINnFqHZBOWvru0J6FjDb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.177.128.0/17
                  82.204.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         18:f2:eb:24:37:60:0a:a1:26:e8:18:b1:96:72:d3:60:08:48:
         a0:57:bd:d8:65:51:4d:ab:15:fd:84:ed:86:5a:b0:57:d5:41:
         57:c0:f4:39:29:b3:37:f2:58:35:8c:34:a6:78:8f:c4:07:80:
         72:e7:41:80:97:73:08:70:06:da:db:73:29:f1:74:a5:01:65:
         86:3e:b9:08:de:43:f4:90:1f:f8:6b:3c:f6:10:0c:c1:b0:98:
         31:37:7a:3d:b2:3c:1e:ea:ee:85:c0:0f:27:58:1c:ca:7d:bb:
         bb:82:23:e5:0a:0f:d3:2f:89:b9:a2:a6:cd:40:0a:5f:2c:f7:
         30:d8:3a:c4:de:a7:b0:5b:62:f8:a5:91:f1:b2:27:a6:dc:08:
         85:3d:a2:65:83:6e:ab:59:4b:2a:2d:bb:01:c1:6a:07:8e:fd:
         4d:87:84:4a:45:7b:4a:5b:e5:d6:a3:0c:48:53:8c:5d:f2:e6:
         b3:ea:a8:1d:8b:c0:36:3d:c8:ce:fb:2d:20:13:5e:0a:ee:d6:
         20:a6:d2:cb:fd:75:4a:c2:e5:51:51:df:44:01:87:60:3c:e7:
         10:00:2e:a8:90:ab:37:20:e1:4a:10:10:9f:89:0b:1d:63:f9:
         3f:fd:c2:a8:a1:f3:47:1e:24:ce:0d:12:a5:40:b5:93:fb:ee:
         22:f1:28:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 11:09:42 2026 by rpki-client