This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/13fsdNbOXAchalOwmEbNfHfqCJc.roa
File:                     13fsdNbOXAchalOwmEbNfHfqCJc.roa (raw, json)
Hash identifier:          621q3LROOmz+26C3baN1nFldj6CbmaJCoub9IuD0vmg=
Subject key identifier:   D7:77:EC:74:D6:CE:5C:07:21:6A:53:B0:98:46:CD:7C:77:EA:08:97
Certificate issuer:       /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
Certificate serial:       019B12D5A597FA63EE03C4CA539F5C779C10
Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/13fsdNbOXAchalOwmEbNfHfqCJc.roa
Signing time:             Fri 12 Dec 2025 13:52:29 +0000
ROA not before:           Fri 12 Dec 2025 13:52:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     50949
IP address blocks:        62.181.48.0/24 maxlen: 24
                          62.181.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:12:d5:a5:97:fa:63:ee:03:c4:ca:53:9f:5c:77:9c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2
        Validity
            Not Before: Dec 12 13:52:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d777ec74d6ce5c07216a53b09846cd7c77ea0897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f2:eb:e5:26:d0:2a:ae:02:80:bf:e1:5e:fd:
                    d0:97:9a:5e:43:1a:d0:80:84:c9:7b:41:95:6d:1c:
                    5f:25:45:31:8e:5a:33:bc:66:21:58:66:40:52:f0:
                    57:c9:39:7d:a0:87:f8:54:01:bd:97:c8:0a:13:b7:
                    7a:c9:11:94:13:d1:fb:d9:1c:4c:73:b2:bb:eb:bc:
                    48:77:0e:6b:b4:c8:fc:25:4a:3a:07:38:de:20:83:
                    6b:06:f4:9b:9b:e4:32:c9:ec:d3:eb:6e:fe:71:81:
                    c3:e0:68:8e:81:43:da:c2:c5:87:0e:a6:38:22:c5:
                    89:fa:cc:87:ec:a9:61:1a:7a:54:32:c6:6a:9a:36:
                    2a:7d:ea:64:9b:b7:e9:c4:fe:23:9e:66:d0:93:ed:
                    a4:fb:5b:9d:b2:fb:b5:1d:cb:c4:3e:f7:99:90:b9:
                    15:d5:d5:3d:2f:e4:ed:1f:80:78:6f:05:d7:05:bb:
                    31:b1:6c:ec:81:ed:ae:6e:87:86:da:ac:35:f8:bc:
                    5c:63:e5:cb:64:fd:a1:6f:9b:9e:50:ba:73:15:f3:
                    47:7d:fa:83:79:02:44:03:a0:70:eb:c0:b6:81:cf:
                    4f:7e:0b:32:3c:4f:bd:39:7e:c6:29:5b:94:dc:ae:
                    b4:30:38:a3:5b:91:63:a8:79:4d:c0:0b:a7:89:47:
                    d3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:77:EC:74:D6:CE:5C:07:21:6A:53:B0:98:46:CD:7C:77:EA:08:97
            X509v3 Authority Key Identifier:
                keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/13fsdNbOXAchalOwmEbNfHfqCJc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.181.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:45:6c:94:08:0a:f0:3d:84:db:c0:96:6b:e4:8f:e4:3e:ca:
         4c:ba:a5:a4:3b:4e:b0:6a:df:84:4d:1a:24:f6:4a:ce:7d:97:
         f7:15:7b:ed:0c:11:8a:af:00:b7:02:dc:57:ef:bd:ce:62:fa:
         0b:6a:0d:23:53:1c:9c:8a:60:ab:cc:19:5a:a1:e9:0a:4b:48:
         37:62:6b:68:b0:1c:67:5a:31:41:54:4a:75:29:1c:cf:81:98:
         b6:b0:2d:0c:85:62:4b:64:60:4c:7a:e2:fa:38:c4:b0:d7:cf:
         13:05:4c:69:bd:8f:ff:00:b1:53:da:c2:c9:a7:32:c7:0b:1c:
         a7:1d:56:9d:5f:e6:7b:29:a0:d4:4f:85:57:5e:99:6c:60:42:
         91:0f:7b:7d:6b:24:8a:b1:d1:42:4d:37:09:55:75:d1:10:bf:
         50:7b:27:0f:45:07:7c:fa:9e:21:71:c6:a0:9b:5c:b8:4c:9d:
         a6:d4:02:cf:ad:91:7b:d6:ee:73:51:1f:1c:8a:37:f9:67:c8:
         22:af:7d:8c:d3:42:50:68:30:22:29:d5:d3:05:fe:00:62:e8:
         70:16:fc:67:c4:50:12:25:09:1a:4c:b6:ea:c7:61:d1:77:31:
         a9:9f:04:57:4d:c7:ba:24:67:b7:7b:1e:88:bd:38:27:be:8a:
         90:95:ae:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:48:02 2025 by rpki-client