This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/359PtD2aT4lYVKLtb8GpHiwDpSM.roa
File:                     359PtD2aT4lYVKLtb8GpHiwDpSM.roa (raw, json)
Hash identifier:          +hV5lfZcoxfXxvE4zajqvEY/eOPBG4IbY8Wpf+1cu3I=
Subject key identifier:   DF:9F:4F:B4:3D:9A:4F:89:58:54:A2:ED:6F:C1:A9:1E:2C:03:A5:23
Certificate issuer:       /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial:       019B76EBA918D8FDBC21EA40DED843F5DFED
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/359PtD2aT4lYVKLtb8GpHiwDpSM.roa
Signing time:             Thu 01 Jan 2026 00:18:34 +0000
ROA not before:           Thu 01 Jan 2026 00:18:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204592
IP address blocks:        62.228.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:a9:18:d8:fd:bc:21:ea:40:de:d8:43:f5:df:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
        Validity
            Not Before: Jan  1 00:18:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=df9f4fb43d9a4f895854a2ed6fc1a91e2c03a523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c9:c4:b2:3f:e8:25:97:3f:e6:42:d5:22:f7:
                    77:0a:74:ec:63:23:0d:bd:aa:bc:e2:ba:c4:d5:ec:
                    df:38:47:98:e4:dd:c6:f8:80:18:2a:11:ac:1d:d4:
                    7b:1a:56:b5:73:5e:91:9c:2f:22:47:46:34:0c:f6:
                    14:45:0b:8c:63:66:e6:bf:c6:ff:5d:70:45:a8:e2:
                    12:e8:27:ab:46:9b:6a:70:d7:4c:b3:94:71:53:85:
                    04:82:ec:6f:a4:be:59:74:60:94:14:d4:69:dd:db:
                    4a:ae:a8:b6:17:60:9c:01:73:c3:fc:f7:b6:d6:48:
                    28:e7:2b:fc:d2:28:8c:bb:92:22:78:ac:20:4a:b3:
                    cd:59:6d:b9:c0:29:0b:1b:46:a2:14:c0:c6:69:64:
                    0c:a8:ad:96:64:f3:dc:fa:9e:d0:b5:94:a4:5c:42:
                    bc:b2:8b:fb:ea:93:68:e9:4e:7c:f4:1a:17:0a:c9:
                    8d:52:c7:ef:fe:c4:5f:10:06:95:70:eb:23:ef:10:
                    6f:c7:ef:90:b5:c9:04:59:f1:50:bc:e5:94:4f:0f:
                    51:92:6e:be:0a:18:f0:41:95:9e:c6:37:7a:3b:0c:
                    13:38:d5:d7:23:ae:c3:8c:41:b2:8e:17:9c:d0:59:
                    0d:de:97:66:93:62:74:58:31:8f:19:84:46:6e:d7:
                    8b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9F:4F:B4:3D:9A:4F:89:58:54:A2:ED:6F:C1:A9:1E:2C:03:A5:23
            X509v3 Authority Key Identifier:
                keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/359PtD2aT4lYVKLtb8GpHiwDpSM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.228.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:49:a1:3d:47:64:aa:43:1c:a7:4f:dd:cd:a4:66:a7:fe:4f:
         3a:dc:c8:c1:e7:22:70:cc:b3:a3:4c:d1:02:6a:cf:fc:4e:9b:
         29:76:02:e4:f6:dc:d8:0a:1f:5f:ee:c9:42:2d:a9:8a:b7:f6:
         e4:97:9d:19:dd:c7:bf:22:30:40:d8:96:e9:89:61:f5:76:3b:
         ac:1e:a1:c5:e6:94:75:da:31:51:34:06:5c:8d:00:38:d1:e3:
         59:85:76:72:47:45:f5:cf:3d:f6:aa:72:79:30:d1:f1:74:9e:
         c2:48:05:dd:69:83:7a:5d:1d:c4:ab:01:0e:f0:6f:80:a2:b9:
         12:e3:be:46:6d:27:1b:b4:dc:18:7f:e2:91:ba:af:0a:6b:84:
         e6:a4:60:5e:ef:72:ce:6b:66:69:e7:7f:a2:f5:32:08:9a:82:
         7b:0e:3c:e0:b9:85:b9:b4:02:61:70:8f:7a:a5:28:bc:1b:7f:
         02:3c:9e:ff:5d:3e:52:4a:de:37:4c:bd:43:40:63:ec:7d:c7:
         27:9a:9f:64:85:4c:16:70:58:8f:59:e3:7b:9c:9b:8b:89:95:
         3f:5c:45:a1:f7:48:20:d7:c4:29:d1:1b:ab:11:ae:f1:e3:1e:
         cb:1e:e3:11:cb:bf:23:7c:f8:74:4a:c4:72:6a:63:4b:6e:ed:
         44:f4:33:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:07:07 2026 by rpki-client