This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/964LELy2stqCoYD99B0rvUPIxLE.roa
File:                     964LELy2stqCoYD99B0rvUPIxLE.roa (raw, json)
Hash identifier:          cUgAR2ekMUeiHx5IYdH/7/0z9V4+c7ULEuUWIDkNY1I=
Subject key identifier:   F7:AE:0B:10:BC:B6:B2:DA:82:A1:80:FD:F4:1D:2B:BD:43:C8:C4:B1
Certificate issuer:       /CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Certificate serial:       019B7C7FBB0AED80259480B2FF4390765027
Authority key identifier: EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/964LELy2stqCoYD99B0rvUPIxLE.roa
Signing time:             Fri 02 Jan 2026 02:18:24 +0000
ROA not before:           Fri 02 Jan 2026 02:18:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212377
IP address blocks:        62.36.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:bb:0a:ed:80:25:94:80:b2:ff:43:90:76:50:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
        Validity
            Not Before: Jan  2 02:18:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f7ae0b10bcb6b2da82a180fdf41d2bbd43c8c4b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e8:ff:7b:dc:d4:64:56:97:da:e5:45:46:9d:
                    34:20:2a:e2:85:88:70:79:ec:b1:65:d3:09:20:b8:
                    dc:90:7a:f6:98:3d:c0:25:ff:7e:97:a4:c4:25:c8:
                    46:0d:21:36:6c:1e:74:8f:6d:81:0d:b6:c3:37:5d:
                    23:2e:ac:db:28:06:68:90:8e:37:38:6b:81:a6:4c:
                    cf:52:12:7e:8d:89:e2:f6:fb:55:27:a4:f4:d7:4c:
                    c7:d6:8b:ee:00:5a:bb:0d:b9:d0:55:60:d7:a4:95:
                    55:08:46:3d:52:a8:8b:e9:79:98:44:91:d1:03:55:
                    86:71:51:8c:d9:a5:4f:71:58:8b:c9:4a:3e:e0:26:
                    62:45:e2:6b:95:b8:3c:9f:49:d7:01:73:94:c4:8b:
                    ac:e0:1c:c1:14:ab:f1:bb:76:ad:a4:14:e9:2e:44:
                    6c:10:a8:3c:d7:ac:b3:99:e6:0b:7d:22:10:f7:78:
                    0f:c4:e3:c3:be:09:58:50:e2:38:ae:62:f1:4d:c8:
                    26:a5:2c:16:e5:46:e3:bd:ae:66:24:42:c9:0d:bc:
                    99:bc:12:3d:c1:7b:8d:80:53:80:24:6b:4a:14:3e:
                    e4:c8:e9:00:37:dc:ea:b5:58:78:79:1b:2c:c0:15:
                    8d:a7:dc:96:dd:19:16:6f:9a:c8:6e:f5:e8:cb:30:
                    98:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AE:0B:10:BC:B6:B2:DA:82:A1:80:FD:F4:1D:2B:BD:43:C8:C4:B1
            X509v3 Authority Key Identifier:
                keyid:EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/964LELy2stqCoYD99B0rvUPIxLE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.36.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:fc:9a:56:cf:77:f3:1d:65:84:55:98:bc:d3:68:ff:9d:40:
         bf:0b:e9:e9:8a:33:3d:14:86:80:6c:dd:4e:37:1e:fa:3b:d2:
         17:dd:07:05:ad:9c:ac:04:f6:ca:ea:ad:f6:18:4f:7c:45:26:
         6c:32:2c:23:53:c1:fb:19:9d:e2:3d:40:e9:b8:99:76:b1:57:
         a9:30:07:6d:ae:5d:3d:6c:be:38:d4:95:e5:36:3a:5e:09:87:
         d4:bf:9f:df:30:29:32:75:85:a8:e0:1d:dd:06:bd:b3:96:45:
         56:dd:4f:69:0b:29:f4:86:ae:fa:d5:98:f4:d5:91:ca:15:37:
         ad:0e:7d:01:78:66:97:d8:81:6d:df:fd:ff:2a:a1:64:18:2f:
         0c:d6:79:df:8d:7d:bf:61:ae:01:58:bf:5f:6b:2c:5e:64:42:
         72:a9:c6:1e:f1:b8:24:7a:4e:24:d9:a1:35:2e:44:09:bc:8a:
         ce:f3:1b:72:5a:d0:82:28:ea:c3:f3:56:a5:4c:d6:ce:00:2a:
         e7:d7:4a:cc:db:a7:e8:f9:40:eb:ae:38:e0:75:5b:29:9c:87:
         9a:12:72:2c:67:01:56:28:25:5c:c3:c5:a7:6a:12:70:23:6f:
         6e:75:0c:e3:5c:42:fa:ae:f3:94:38:00:8a:c8:43:1d:02:f1:
         77:45:88:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:38:50 2026 by rpki-client