This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/selpiMAtC673iTWOb2-y6QgzUug.roa
File:                     selpiMAtC673iTWOb2-y6QgzUug.roa (raw, json)
Hash identifier:          S+gkj1cHuv4jzn2Arj35/6Qs4lZjCuFq3ftU/O9rJog=
Subject key identifier:   B1:E9:69:88:C0:2D:0B:AE:F7:89:35:8E:6F:6F:B2:E9:08:33:52:E8
Certificate issuer:       /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial:       019BB7959F3149A02423BDC4B08435FE4937
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/selpiMAtC673iTWOb2-y6QgzUug.roa
Signing time:             Tue 13 Jan 2026 13:39:54 +0000
ROA not before:           Tue 13 Jan 2026 13:39:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205513
IP address blocks:        62.73.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:b7:95:9f:31:49:a0:24:23:bd:c4:b0:84:35:fe:49:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
        Validity
            Not Before: Jan 13 13:39:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b1e96988c02d0baef789358e6f6fb2e9083352e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:78:2d:20:d7:31:72:3d:78:17:81:13:3f:01:
                    f9:d5:e4:50:ce:aa:e4:3d:1e:70:97:9d:90:ad:0e:
                    25:34:a7:08:f8:3e:40:c6:2a:f3:16:47:ba:d3:ed:
                    8f:16:19:50:70:4a:63:01:02:1f:2d:30:0c:d0:ad:
                    96:3e:78:a1:38:a3:75:9e:8b:11:7c:ab:6f:22:8f:
                    f8:24:d3:ec:93:6d:27:96:17:a2:9e:82:d3:1f:05:
                    c3:f3:fc:d4:08:8b:b4:d6:10:ee:fa:5d:5c:13:8a:
                    9f:e4:5c:5e:13:d9:b5:c9:b4:50:cd:3b:90:b9:0b:
                    f5:da:6f:1f:76:a3:21:2b:1c:52:7a:03:90:12:c2:
                    43:f5:10:33:89:2c:32:3e:1e:20:73:c3:ff:3c:98:
                    3b:bc:8d:1d:4d:08:37:b7:d2:c4:ce:e8:20:0a:10:
                    1d:cb:c0:24:18:d1:3d:db:80:a0:a2:bd:a7:e5:e7:
                    c7:21:6d:cb:f0:ff:b7:d5:1b:e6:79:3a:bd:18:c2:
                    74:d4:0a:4a:1c:97:87:df:f7:9b:96:ce:0d:c0:96:
                    10:c5:e1:04:82:d4:57:ed:a9:2c:c0:41:46:12:13:
                    e4:61:25:97:2a:03:4c:da:d8:bc:db:c2:fb:48:25:
                    6b:6b:66:4d:08:76:03:be:cc:df:82:d0:9d:04:ff:
                    b6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E9:69:88:C0:2D:0B:AE:F7:89:35:8E:6F:6F:B2:E9:08:33:52:E8
            X509v3 Authority Key Identifier:
                keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/selpiMAtC673iTWOb2-y6QgzUug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.73.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:1c:8f:6a:0c:5a:77:95:69:ce:7f:39:fc:10:66:79:ef:4f:
         9b:45:07:c3:34:82:a1:55:36:b2:c1:c2:18:44:20:00:94:80:
         a4:0d:3a:68:e9:8e:2d:bd:0c:01:0e:08:77:91:29:2d:59:26:
         1b:ad:84:f8:da:b1:3b:94:f3:99:5a:57:5e:87:34:36:bf:57:
         95:ed:39:cb:68:82:2c:09:80:bb:ff:ab:34:af:de:03:1c:32:
         11:75:0a:4e:71:fa:52:1e:84:18:bc:ac:95:bb:66:21:67:17:
         c1:0c:22:c7:aa:62:fc:82:be:fc:dc:58:70:c7:46:44:59:7a:
         ca:2b:d7:15:90:dd:20:a4:43:72:66:36:cb:22:4f:67:76:1d:
         cb:7d:3d:3f:c5:50:1c:40:35:dc:a1:0f:e6:9a:38:ca:02:a5:
         54:73:d6:8a:26:41:62:1f:c5:28:5e:7a:b8:6e:59:c7:dc:3e:
         f3:64:db:0c:2a:1c:82:b2:13:c0:96:b6:18:c0:7f:18:ef:05:
         93:cb:97:83:f9:2d:46:b8:fc:67:2e:11:ea:c2:4e:a7:63:2d:
         6d:bc:e1:a9:a1:f4:10:df:1d:ec:73:fb:dc:f3:c6:66:3a:e8:
         dc:bb:50:f6:38:79:88:4c:a5:56:e2:91:d6:a3:5c:ed:be:b0:
         4c:70:45:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:51:04 2026 by rpki-client