This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/_0yShHb3_Lvo8oOIhf1dP9etifM.roa
File:                     _0yShHb3_Lvo8oOIhf1dP9etifM.roa (raw, json)
Hash identifier:          C5c+j5BtUc+Edi1FogFMem4oHE95WUZxlK525NIu8Uk=
Subject key identifier:   FF:4C:92:84:76:F7:FC:BB:E8:F2:83:88:85:FD:5D:3F:D7:AD:89:F3
Certificate issuer:       /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial:       019B76EBA4C0DD4AFE5FAAF0AE3083FB3BD9
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/_0yShHb3_Lvo8oOIhf1dP9etifM.roa
Signing time:             Thu 01 Jan 2026 00:18:33 +0000
ROA not before:           Thu 01 Jan 2026 00:18:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199598
IP address blocks:        62.228.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:a4:c0:dd:4a:fe:5f:aa:f0:ae:30:83:fb:3b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
        Validity
            Not Before: Jan  1 00:18:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ff4c928476f7fcbbe8f2838885fd5d3fd7ad89f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:39:9e:8e:66:2f:c6:a6:10:30:8a:ad:0a:
                    47:da:28:85:46:f9:d3:e9:4a:f0:80:1c:20:ec:2b:
                    be:ff:23:bb:4f:1e:5d:29:8e:ad:f9:c5:3b:bb:53:
                    c5:3f:96:17:5e:26:73:bc:ce:06:64:cd:f4:95:8b:
                    1a:af:c9:eb:39:60:63:79:21:0b:c3:95:20:9b:04:
                    01:0f:11:7c:8b:b1:fe:25:c5:1c:22:2f:d1:31:26:
                    34:4b:2e:25:85:40:65:05:78:71:42:52:49:fb:87:
                    e8:13:b8:fd:a9:ef:70:81:d0:fd:c8:0c:5e:af:77:
                    ab:45:a0:82:60:6e:03:d3:91:e3:11:de:32:3e:39:
                    fe:3d:b7:e6:f8:9b:db:0e:7e:c9:c0:ed:ae:20:ec:
                    4a:60:94:8d:0f:6e:22:cb:0b:55:a1:7c:f3:08:ff:
                    b3:f4:a9:6c:d5:7f:28:9a:88:85:0c:6f:bd:04:bb:
                    66:09:3f:73:67:06:ca:99:9d:3d:aa:61:19:13:f2:
                    da:a6:e6:13:27:b2:95:ae:52:65:e8:0b:80:e1:6a:
                    60:24:00:7f:3e:13:c9:46:fd:62:be:17:69:9d:45:
                    c2:1c:63:99:93:59:81:d5:1c:02:fb:18:fe:6e:af:
                    dc:98:24:7b:29:0f:e2:40:51:a1:b0:36:81:52:ca:
                    62:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4C:92:84:76:F7:FC:BB:E8:F2:83:88:85:FD:5D:3F:D7:AD:89:F3
            X509v3 Authority Key Identifier:
                keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/_0yShHb3_Lvo8oOIhf1dP9etifM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.228.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:af:de:07:ed:e0:7c:b9:55:cb:4a:ca:f4:be:92:7e:2e:cf:
         12:16:90:06:6b:64:17:64:8c:a2:54:01:19:5d:01:cb:df:83:
         e4:87:69:80:5f:95:67:8a:80:9f:03:d2:d8:7c:31:4d:70:4b:
         fe:80:5a:c4:88:7a:aa:df:62:d8:5d:1b:ea:b4:44:fa:57:8c:
         7a:41:b9:e4:55:ab:38:02:68:23:8e:07:53:b0:f2:05:ea:f1:
         33:de:1e:b3:53:c9:37:b7:af:74:4b:79:7c:cb:21:20:9d:96:
         d2:25:2f:54:b7:39:df:7e:93:25:0a:8f:fa:53:5a:f1:4d:d9:
         9a:c3:03:f4:d3:89:d2:4c:15:24:b9:0a:89:2f:85:74:53:30:
         fc:3d:b2:68:7b:11:c8:87:09:ff:80:bb:d8:17:0f:b4:3e:a1:
         18:66:3c:0f:29:16:30:40:49:47:50:42:14:13:0b:f5:ef:d6:
         06:d8:60:45:53:bc:e5:5a:be:45:d7:8f:46:c6:d2:b9:00:3e:
         81:7c:d4:b3:02:00:19:9a:97:5b:5b:fb:32:9e:ba:40:80:dc:
         3d:42:7f:78:54:4d:19:b8:73:6a:5c:5b:3b:b2:b6:94:61:c6:
         fd:f4:15:7f:3c:04:b1:7c:ba:08:26:c2:7e:30:26:9c:cd:69:
         22:55:1a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:59:57 2026 by rpki-client