This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS62425.roa
File:                     AS62425.roa (raw, json)
Hash identifier:          h46na8JTaJ6aaUxrz3vnghhyhoTmCLSJ8HpJtxsrG/w=
Subject key identifier:   B1:71:0F:79:3F:3D:F2:2B:60:E3:72:97:70:39:A8:BC:60:F0:F0:C8
Certificate issuer:       /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial:       49645445735BECBE613F5F65D251D3C6B8396684
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS62425.roa
Signing time:             Wed 28 Jan 2026 07:10:50 +0000
ROA not before:           Wed 28 Jan 2026 07:05:50 +0000
ROA not after:            Wed 27 Jan 2027 07:10:50 +0000
asID:                     62425
IP address blocks:        185.231.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 14:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:64:54:45:73:5b:ec:be:61:3f:5f:65:d2:51:d3:c6:b8:39:66:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
        Validity
            Not Before: Jan 28 07:05:50 2026 GMT
            Not After : Jan 27 07:10:50 2027 GMT
        Subject: CN=B1710F793F3DF22B60E372977039A8BC60F0F0C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c2:c2:db:e8:ec:d3:d9:d7:f1:91:0b:da:c9:
                    84:18:9b:19:a8:2d:60:ab:5a:9e:cd:3e:b4:71:f2:
                    14:22:0b:f3:c7:37:7d:b5:c4:12:2b:9c:89:19:c0:
                    c3:f3:36:bb:ae:5c:9a:67:7c:9e:70:80:fb:2b:98:
                    a1:0f:44:ed:59:99:98:93:9e:ee:23:b2:92:b5:8f:
                    b5:91:a6:c3:c3:b5:1a:b4:5c:3b:3d:80:e3:d2:f8:
                    3c:ee:4e:c1:c0:18:52:e3:a9:a1:6c:ec:f1:bc:b4:
                    5c:21:5e:f8:9d:f7:49:3c:26:0a:1e:0e:d4:4c:55:
                    82:6b:28:61:27:c0:9f:4d:e0:cf:43:c6:d5:22:a4:
                    44:ee:8f:e4:26:9e:6c:c4:1c:ea:35:ee:c5:1b:a8:
                    04:61:78:ab:03:a4:30:4d:63:f1:09:42:56:3b:6a:
                    d0:3f:8b:cb:14:e3:6b:63:27:79:5f:ea:be:c7:93:
                    85:69:14:cb:5b:85:2b:cd:b0:e2:a0:18:59:e5:13:
                    1d:46:5b:8f:8e:be:f0:b6:b8:f0:c2:98:1d:57:bc:
                    5b:33:9f:d0:77:2e:12:c5:6a:e7:f8:7b:53:56:12:
                    28:60:e9:c9:21:06:73:f8:26:1c:c3:e5:44:d0:98:
                    be:da:e7:b5:2a:1b:9a:6d:a9:da:a8:3a:a0:4a:8b:
                    5b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:71:0F:79:3F:3D:F2:2B:60:E3:72:97:70:39:A8:BC:60:F0:F0:C8
            X509v3 Authority Key Identifier:
                keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS62425.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.231.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:80:e5:d0:ed:7d:1e:6b:f9:d8:d7:24:b1:ee:b9:02:52:c1:
         69:c7:8f:1c:51:99:e8:c6:ee:b5:d7:bd:55:c7:6b:9a:9a:d9:
         70:ef:79:6f:64:0f:b1:7e:3c:2f:bd:78:76:a1:5e:a5:da:18:
         7c:a3:52:24:f1:cd:45:88:d0:52:7f:56:b4:62:3c:3a:53:7a:
         97:44:2e:6d:41:ea:0d:34:47:82:10:94:70:bd:d6:1e:52:0e:
         63:86:f6:c2:e8:7e:58:a1:d5:03:d6:bd:18:f7:59:ba:92:b5:
         f7:38:1b:a1:68:b4:0d:18:81:80:5f:2e:71:cc:26:b8:74:be:
         c8:d8:62:0e:11:72:aa:62:e5:af:9a:8f:e9:02:0f:f4:0c:84:
         23:36:f2:30:19:b0:e2:9a:1c:0e:00:87:d1:11:e4:79:13:49:
         97:d4:cd:c2:f4:40:60:62:7e:3f:85:ee:bc:ea:f7:ac:10:b0:
         33:3f:59:96:0a:eb:4d:2b:ad:2e:69:e0:87:b2:7d:19:39:87:
         98:ef:4c:76:51:1d:08:66:17:80:db:b7:52:96:a6:92:6c:54:
         38:c4:43:df:65:1a:aa:05:4a:8a:66:96:96:72:4a:32:c3:7d:
         a4:a8:18:66:76:97:dd:81:99:74:b6:83:93:41:22:a0:64:b3:
         64:00:2c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:36:54 2026 by rpki-client