This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/KAtyNFRu0nGkFIQ31UZVhuZVup8.roa
File:                     KAtyNFRu0nGkFIQ31UZVhuZVup8.roa (raw, json)
Hash identifier:          YYWx9qqk5yZ7cfiJEDfLmx13WTy9RC2Y4Yty+5dwt2A=
Subject key identifier:   28:0B:72:34:54:6E:D2:71:A4:14:84:37:D5:46:55:86:E6:55:BA:9F
Certificate issuer:       /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Certificate serial:       019B78343B133A4200277875DABB4AF0A8F2
Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/KAtyNFRu0nGkFIQ31UZVhuZVup8.roa
Signing time:             Thu 01 Jan 2026 06:17:27 +0000
ROA not before:           Thu 01 Jan 2026 06:17:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8495
IP address blocks:        62.116.150.0/23 maxlen: 24
                          62.116.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 00:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:3b:13:3a:42:00:27:78:75:da:bb:4a:f0:a8:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
        Validity
            Not Before: Jan  1 06:17:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=280b7234546ed271a4148437d5465586e655ba9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2f:55:31:b8:cf:38:a1:09:f5:b2:e2:9f:be:
                    cf:c7:05:a1:38:7b:dc:76:41:6e:65:56:3e:5b:2b:
                    02:d1:c5:67:10:94:63:e5:3a:cd:06:74:0d:75:15:
                    76:dc:ac:6b:a8:d7:12:61:77:37:17:d1:de:d6:51:
                    bd:89:b7:2d:35:bb:27:98:85:49:05:50:cb:ae:21:
                    8d:39:ec:b5:a8:55:08:58:e1:47:ae:9b:3e:55:a2:
                    24:d0:12:1f:a9:a2:5f:85:3e:7b:1a:69:91:e5:19:
                    c4:ed:c8:88:a9:e1:f9:3c:21:36:ee:86:9a:75:18:
                    33:14:ad:cc:e8:7d:16:5e:09:c6:4c:96:a0:78:16:
                    c1:a0:b9:59:5b:55:69:e6:9f:b1:21:43:51:38:7d:
                    1b:f1:70:41:8e:c8:73:b7:41:f7:0a:e2:c5:54:b5:
                    6c:c1:3a:ac:f2:68:6d:5b:11:5d:b3:e4:a6:c0:fa:
                    ed:a0:5c:d0:50:c1:e6:69:e8:01:84:23:d4:46:40:
                    f6:d5:2e:a3:71:08:0a:49:cc:48:fd:f1:4a:ce:f6:
                    a3:16:9f:e8:c1:fc:04:02:56:81:a0:81:05:55:8c:
                    c8:0d:b1:e2:a7:f0:20:f3:a5:71:a5:e6:be:69:ec:
                    70:3d:f5:ca:d6:dc:f0:0b:fe:a3:88:10:42:78:39:
                    b1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0B:72:34:54:6E:D2:71:A4:14:84:37:D5:46:55:86:E6:55:BA:9F
            X509v3 Authority Key Identifier:
                keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/KAtyNFRu0nGkFIQ31UZVhuZVup8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.116.150.0-62.116.153.255

    Signature Algorithm: sha256WithRSAEncryption
         24:aa:7b:8f:7b:65:3d:54:36:cd:36:46:77:e4:32:56:9f:a7:
         02:9d:5d:95:13:56:e8:b7:7f:bb:c5:2b:d9:7c:4e:27:ba:1b:
         49:64:23:44:c8:db:6d:2a:66:4d:3f:d5:7a:e7:53:5f:11:ca:
         4a:59:15:50:a7:3b:32:c5:93:26:58:0b:d0:d9:66:7c:9a:c9:
         6f:b1:e8:e4:92:64:08:c5:54:ed:02:6c:76:f2:be:e8:75:74:
         8e:db:05:8d:d6:19:cf:4a:fc:63:e8:ba:12:86:90:1b:a0:6b:
         99:9f:b0:bd:b2:bd:4e:84:80:4e:ec:7e:e4:a2:22:68:3b:76:
         86:09:a7:a1:be:85:6e:7a:ef:b7:ce:58:6f:2f:02:6e:e7:76:
         21:86:ea:72:8b:9c:c4:78:c3:b6:99:cf:d1:6b:55:99:42:ab:
         2c:b8:26:44:10:fc:2a:66:42:7b:61:56:59:a4:5f:9e:4a:89:
         83:b7:fe:a5:08:81:1f:0b:30:08:7d:d9:b2:4b:0b:68:f2:6a:
         ab:e0:5b:a6:21:8f:75:4b:9e:0a:f4:10:3c:20:70:97:fd:75:
         04:49:d7:d4:df:a3:98:d0:49:33:f2:1a:22:a4:d1:07:48:f6:
         19:cc:8a:42:11:1a:92:36:ab:54:20:08:a1:59:5f:2a:76:20:
         4e:8c:0e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:54:42 2026 by rpki-client