This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/rPeHpkNFS9kEFpsnykEnotf7jXE.roa
File:                     rPeHpkNFS9kEFpsnykEnotf7jXE.roa (raw, json)
Hash identifier:          eZp0lSKLfyBFr6s5vUk7AbSXibpK0v262LVjOUTkF5s=
Subject key identifier:   AC:F7:87:A6:43:45:4B:D9:04:16:9B:27:CA:41:27:A2:D7:FB:8D:71
Certificate issuer:       /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial:       019B7F14B3C0BE069DFA1F16C03FF4BA6A29
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/rPeHpkNFS9kEFpsnykEnotf7jXE.roa
Signing time:             Fri 02 Jan 2026 14:20:21 +0000
ROA not before:           Fri 02 Jan 2026 14:20:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50049
IP address blocks:        62.50.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:b3:c0:be:06:9d:fa:1f:16:c0:3f:f4:ba:6a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
        Validity
            Not Before: Jan  2 14:20:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=acf787a643454bd904169b27ca4127a2d7fb8d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:78:32:ad:48:e4:1f:00:0e:7d:4d:18:27:54:
                    63:fa:98:72:40:7e:1d:1e:c5:96:01:92:b8:30:e2:
                    79:bc:d9:9e:ab:9e:ec:27:25:35:16:26:2b:ba:98:
                    00:6a:82:2d:cd:3d:71:ab:05:da:13:83:ed:77:31:
                    58:6f:33:5d:48:27:21:db:38:18:a4:56:a6:e5:bd:
                    3c:a7:f0:9d:33:c0:f3:a9:06:75:f0:24:ac:65:4c:
                    69:c2:a4:e3:2e:b8:61:3f:6f:09:da:8c:da:66:fa:
                    21:ec:45:f1:44:96:80:e0:34:d0:3d:c7:fd:0c:a9:
                    1f:b6:ed:55:7a:72:c4:c9:77:06:4b:2f:a5:95:a4:
                    54:b5:a9:5c:63:a9:f3:5f:f3:51:19:7d:93:fc:e6:
                    72:98:f8:27:a8:12:23:0c:32:7c:dd:71:a8:e5:91:
                    0e:ec:79:23:bc:f5:d1:18:45:3c:d1:96:b0:98:6a:
                    f1:12:4d:7b:89:76:3e:10:78:39:e9:66:90:03:60:
                    4a:13:cc:2b:3f:56:6c:de:85:27:dc:8b:5d:81:f0:
                    04:df:1d:6a:60:fc:fd:0e:75:dc:32:2c:12:fd:33:
                    6c:bd:6a:14:48:73:5a:01:ad:c1:38:f6:9b:ae:1b:
                    4e:9b:19:05:98:d7:7a:89:37:25:cb:7b:e1:e0:00:
                    66:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F7:87:A6:43:45:4B:D9:04:16:9B:27:CA:41:27:A2:D7:FB:8D:71
            X509v3 Authority Key Identifier:
                keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/rPeHpkNFS9kEFpsnykEnotf7jXE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.50.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:6a:d6:ae:f6:98:62:8d:e7:3e:76:ca:59:2e:a8:bf:10:c8:
         e4:b6:74:09:b6:67:30:09:ba:ed:2b:c9:dd:23:04:f0:90:77:
         dd:ac:07:93:82:f3:9d:12:45:d4:32:d8:c6:f5:6e:f8:a9:32:
         2f:a1:67:80:17:76:91:1d:c8:21:4f:6c:02:ce:cd:3d:8c:97:
         94:08:a4:f3:cd:68:2b:9b:72:a2:c2:0e:3e:0b:5f:4a:e1:f9:
         51:78:4c:d6:74:77:1a:cd:b6:26:80:69:6e:29:48:8d:5a:39:
         40:f3:ec:02:8e:92:6b:9d:e0:70:97:fd:27:32:49:13:9a:b5:
         f7:04:d1:3c:2a:35:ee:35:fe:03:21:90:9c:d9:d3:03:32:9f:
         34:93:15:43:33:c9:ed:6f:b8:b3:d5:1a:d9:3a:ff:f2:a2:b1:
         89:e1:e4:b6:2a:5d:f1:ad:4e:70:d5:24:aa:b1:04:2d:63:d0:
         a8:be:48:68:8b:6d:4e:4b:53:7e:a2:05:94:b4:eb:85:0e:d8:
         d7:b0:fd:66:04:d5:de:0d:1d:84:cb:91:a7:b6:f1:7f:7a:87:
         cd:cb:0f:c3:0a:e9:41:c9:ae:dd:cd:5d:7b:8d:f4:4b:a5:ee:
         79:c6:51:3c:93:4c:6b:d7:8d:c4:22:5a:b9:04:d2:cc:3f:87:
         35:27:5b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:52:49 2026 by rpki-client