This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/81F_eaaYYwg-TBBVI21_-TaNtg8.roa
File:                     81F_eaaYYwg-TBBVI21_-TaNtg8.roa (raw, json)
Hash identifier:          JIil97IYlVS9Me8r6kdazWxkET1WTS6YlZIPPN8PnVc=
Subject key identifier:   F3:51:7F:79:A6:98:63:08:3E:4C:10:55:23:6D:7F:F9:36:8D:B6:0F
Certificate issuer:       /CN=f818dec325784010774820090e8e0a083ddddbdc
Certificate serial:       019B7F83F1B41F25A46E90D8D8C8433E2A27
Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/81F_eaaYYwg-TBBVI21_-TaNtg8.roa
Signing time:             Fri 02 Jan 2026 16:21:52 +0000
ROA not before:           Fri 02 Jan 2026 16:21:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     5618
IP address blocks:        62.193.3.0/24 maxlen: 24
                          62.193.4.0/24 maxlen: 24
                          62.193.5.0/24 maxlen: 24
                          62.193.6.0/24 maxlen: 24
                          62.193.7.0/24 maxlen: 24
                          62.193.8.0/24 maxlen: 24
                          62.193.12.0/23 maxlen: 23
                          62.193.13.0/24 maxlen: 24
                          62.193.14.0/23 maxlen: 23
                          62.193.14.0/24 maxlen: 24
                          62.193.15.0/24 maxlen: 24
                          62.193.16.0/24 maxlen: 24
                          62.193.17.0/24 maxlen: 24
                          62.193.18.0/24 maxlen: 24
                          62.193.20.0/24 maxlen: 24
                          62.193.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:f1:b4:1f:25:a4:6e:90:d8:d8:c8:43:3e:2a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc
        Validity
            Not Before: Jan  2 16:21:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f3517f79a69863083e4c1055236d7ff9368db60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:75:ce:ff:7f:d5:17:ac:ab:ba:39:cd:c4:f7:
                    88:f8:92:ba:5b:18:23:9d:39:61:fe:85:e1:82:a2:
                    c4:fb:bb:60:1f:85:ea:71:23:fa:97:0a:30:26:b2:
                    74:11:52:cc:ba:9b:e6:e8:ab:04:18:a4:78:b5:20:
                    bd:46:12:c0:f4:f3:cf:8c:6f:d9:4a:77:66:3a:95:
                    85:1b:77:1a:35:65:c0:4b:32:a4:c4:99:03:3f:8e:
                    22:4d:49:e4:70:3c:6e:05:86:98:cd:50:d2:19:77:
                    85:4b:57:cd:b0:e5:38:a4:db:ee:27:b6:27:5f:58:
                    64:9c:01:f5:37:01:f4:24:bb:84:90:6e:92:05:72:
                    97:12:51:82:ec:a2:5a:60:66:c2:35:3d:6d:4b:02:
                    f4:05:80:b1:50:b9:8a:b4:bb:6f:be:1c:ce:52:88:
                    21:c4:b1:3f:9b:35:d8:d2:c9:6e:f6:4c:b4:d2:4f:
                    eb:0b:be:ba:1d:42:cd:09:d4:0f:3b:94:cf:ad:b7:
                    11:3d:b6:8a:13:49:92:97:ad:b5:27:7c:7d:af:94:
                    27:17:05:5c:fb:d1:0b:18:6e:fc:14:5b:49:f1:28:
                    8f:5e:4a:30:75:ec:3d:55:13:76:a4:31:b1:8b:04:
                    e2:c6:b9:31:0c:05:81:1f:3f:fd:24:39:a6:a2:4d:
                    f2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:51:7F:79:A6:98:63:08:3E:4C:10:55:23:6D:7F:F9:36:8D:B6:0F
            X509v3 Authority Key Identifier:
                keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/81F_eaaYYwg-TBBVI21_-TaNtg8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.193.3.0-62.193.8.255
                  62.193.12.0-62.193.18.255
                  62.193.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:19:b4:8f:f1:d4:74:dd:67:c3:7c:55:ba:d8:a3:68:04:0d:
         71:3d:fe:a6:f8:bb:ea:d8:cd:c5:2b:6a:76:10:f2:85:3b:b8:
         f5:0b:95:1d:ea:7e:91:a7:93:ae:d6:df:9f:f4:29:c5:6f:32:
         5d:3d:67:0a:9e:8d:1c:ae:84:a4:5f:45:05:a5:03:b0:12:9d:
         54:80:59:b6:58:53:81:e4:8b:45:45:dc:42:83:73:7c:13:41:
         ac:e9:cd:f8:21:05:a0:cd:ac:5d:d0:73:01:24:e7:fc:4e:15:
         30:a9:98:d2:92:e7:7f:e9:0b:14:fd:37:b5:f9:fa:52:00:b4:
         c0:c8:0c:0f:5e:36:52:6a:a6:c3:e9:35:a4:d8:63:87:16:68:
         f9:96:7b:99:b3:20:7b:d0:c7:47:aa:ec:d9:d0:27:66:7d:41:
         b9:d5:9c:e9:36:6d:42:fd:d7:8b:0d:62:06:b4:2f:a2:44:8d:
         44:3c:e9:11:31:69:ac:99:12:ab:16:ba:e1:e8:10:8b:41:48:
         68:13:1a:6b:fe:94:52:1f:9c:00:45:16:b4:a6:74:ff:c2:63:
         67:29:47:4b:1d:8f:bc:83:6b:de:57:c3:2c:fe:f6:65:19:04:
         2d:71:3c:f7:90:88:eb:50:32:33:48:d0:82:2f:19:08:b2:9d:
         0c:86:7b:38
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZt/g/G0HyWkbpDY2MhDPionMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MThkZWMzMjU3ODQwMTA3NzQ4MjAwOTBlOGUwYTA4M2Rk
ZGRiZGMwHhcNMjYwMTAyMTYyMTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzUxN2Y3OWE2OTg2MzA4M2U0YzEwNTUyMzZkN2ZmOTM2OGRiNjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnXO/3/VF6yrujnNxPeI+JK6Wxgj
nTlh/oXhgqLE+7tgH4XqcSP6lwowJrJ0EVLMupvm6KsEGKR4tSC9RhLA9PPPjG/Z
SndmOpWFG3caNWXASzKkxJkDP44iTUnkcDxuBYaYzVDSGXeFS1fNsOU4pNvuJ7Yn
X1hknAH1NwH0JLuEkG6SBXKXElGC7KJaYGbCNT1tSwL0BYCxULmKtLtvvhzOUogh
xLE/mzXY0slu9ky00k/rC766HULNCdQPO5TPrbcRPbaKE0mSl621J3x9r5QnFwVc
+9ELGG78FFtJ8SiPXkowdew9VRN2pDGxiwTixrkxDAWBHz/9JDmmok3yvwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFPNRf3mmmGMIPkwQVSNtf/k2jbYPMB8GA1UdIwQY
MBaAFPgY3sMleEAQd0ggCQ6OCgg93dvcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1CamV3eVY0UUJCM1NDQUpEbzRLQ0QzZDI5dy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvMjk1OWZiLTg4ZjYtNDliNS1iYjAw
LTgzYTBkOWVmZWMyZC8xLzgxRl9lYWFZWXdnLVRCQlZJMjFfLVRhTnRnOC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNjkvMjk1OWZiLTg4ZjYtNDliNS1iYjAwLTgzYTBkOWVmZWMy
ZC8xLzEtQmpld3lWNFFCQjNTQ0FKRG80S0NEM2QyOXcuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwOwYIKwYBBQUHAQcBAf8ELDAqMCgEAgABMCIwDAMEAD7B
AwMEAD7BCDAMAwQCPsEMAwQAPsESAwQBPsEUMA0GCSqGSIb3DQEBCwUAA4IBAQCI
GbSP8dR03WfDfFW62KNoBA1xPf6m+Lvq2M3FK2p2EPKFO7j1C5Ud6n6Rp5Ou1t+f
9CnFbzJdPWcKno0croSkX0UFpQOwEp1UgFm2WFOB5ItFRdxCg3N8E0Gs6c34IQWg
zaxd0HMBJOf8ThUwqZjSkud/6QsU/Te1+fpSALTAyAwPXjZSaqbD6TWk2GOHFmj5
lnuZsyB70MdHquzZ0CdmfUG51ZzpNm1C/deLDWIGtC+iRI1EPOkRMWmsmRKrFrrh
6BCLQUhoExpr/pRSH5wARRa0pnT/wmNnKUdLHY+8g2veV8Ms/vZlGQQtcTz3kIjr
UDIzSNCCLxkIsp0Mhns4
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:12:06 2026 by rpki-client