This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.gxt.network/repo/gxt-as44822/1/326131343a373538303a333033303a3a2f34382d3438203d3e203434383232.roa
File:                     326131343a373538303a333033303a3a2f34382d3438203d3e203434383232.roa (raw, json)
Hash identifier:          Z8b3CXR+NYpLiWL8vo85cxs+rnI+69wtmeZr+Sekgos=
Subject key identifier:   4A:B1:16:80:F9:CC:FB:34:EA:E3:70:02:14:9B:1A:56:E2:F2:51:46
Certificate issuer:       /CN=9495A81626FCF6E79CAFB0FC7266C5A770B457F3
Certificate serial:       38EE4BCDECDB489B99106300E6E30B968E94217E
Authority key identifier: 94:95:A8:16:26:FC:F6:E7:9C:AF:B0:FC:72:66:C5:A7:70:B4:57:F3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer
Subject info access:      rsync://rpki.gxt.network/repo/gxt-as44822/1/326131343a373538303a333033303a3a2f34382d3438203d3e203434383232.roa
Signing time:             Mon 22 Dec 2025 11:01:19 +0000
ROA not before:           Mon 22 Dec 2025 10:56:19 +0000
ROA not after:            Mon 21 Dec 2026 11:01:19 +0000
asID:                     44822
IP address blocks:        2a14:7580:3030::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.crl
                          rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 15:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ee:4b:cd:ec:db:48:9b:99:10:63:00:e6:e3:0b:96:8e:94:21:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9495A81626FCF6E79CAFB0FC7266C5A770B457F3
        Validity
            Not Before: Dec 22 10:56:19 2025 GMT
            Not After : Dec 21 11:01:19 2026 GMT
        Subject: CN=4AB11680F9CCFB34EAE37002149B1A56E2F25146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:16:69:bd:a4:18:f4:6b:66:0c:fd:73:0e:
                    83:59:a8:34:85:83:fb:a5:ed:2d:10:70:52:bc:40:
                    ad:61:93:22:c4:f7:90:8d:e4:d4:37:8a:6c:17:8f:
                    23:9b:fb:81:2f:c8:e2:f8:27:45:26:e9:9b:53:ff:
                    17:b4:91:7e:59:d5:05:4f:ae:c1:e9:94:39:ed:4b:
                    37:0c:87:d2:d4:40:d5:e1:b3:73:15:93:46:49:4b:
                    34:79:81:e9:fd:02:c1:b5:5a:d8:3a:b6:d3:ae:3e:
                    52:32:a1:73:08:28:5d:7e:ee:59:76:33:cd:25:19:
                    e2:22:1f:36:02:69:5e:2f:30:27:64:db:28:7a:d5:
                    63:ea:5a:27:66:99:a3:21:04:e2:22:cd:ad:93:b9:
                    6b:ad:3e:9f:36:f5:3f:6d:7a:cf:38:8a:97:41:8a:
                    78:b3:8d:72:63:5e:e5:27:01:1c:9a:fc:25:e1:c2:
                    1e:ce:d6:ab:2a:8e:02:c8:6d:e7:15:1d:8d:08:3e:
                    37:76:e4:72:b9:5e:0d:9c:6f:26:dd:db:36:9c:f8:
                    41:3e:2f:62:1a:71:d9:9d:c5:0f:15:9f:a6:b0:6d:
                    11:cc:22:92:34:4e:0f:66:02:00:6e:07:f3:ff:a1:
                    72:14:f3:2a:9a:4d:a2:17:04:62:ce:24:2a:48:73:
                    d1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B1:16:80:F9:CC:FB:34:EA:E3:70:02:14:9B:1A:56:E2:F2:51:46
            X509v3 Authority Key Identifier:
                keyid:94:95:A8:16:26:FC:F6:E7:9C:AF:B0:FC:72:66:C5:A7:70:B4:57:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.gxt.network/repo/gxt-as44822/1/326131343a373538303a333033303a3a2f34382d3438203d3e203434383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:3030::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:f3:a8:7d:90:a0:58:54:f5:2d:d3:c9:0d:33:05:c0:ae:48:
         d7:a9:90:1f:39:0a:5c:19:14:b7:91:3f:9d:a5:96:26:50:bb:
         e9:b9:04:e5:ea:b7:ac:91:16:18:d7:9a:36:49:1f:7a:b3:18:
         c1:54:f0:9b:64:f6:95:ac:05:60:08:2f:e2:60:fb:9e:90:57:
         02:d9:74:1e:6a:ea:e8:4b:4f:76:f5:8f:8b:1b:c8:50:66:c4:
         f7:87:54:b9:47:b5:74:91:45:71:f7:e0:91:a7:4b:8b:dd:ea:
         78:6c:0c:e7:a5:a3:44:ff:02:21:d4:1d:9f:10:8b:8d:bc:ad:
         8e:d3:fc:dd:56:3b:40:12:4f:8e:df:f6:8f:4f:8c:15:1c:d5:
         e3:b7:e3:63:2f:84:40:4a:ad:b8:b0:c0:91:94:01:07:52:da:
         46:43:3e:9a:4a:61:da:17:5a:69:88:86:1a:89:0f:82:40:1c:
         29:f5:a6:d4:96:ce:b5:70:9c:60:8d:77:4d:21:aa:98:ee:e7:
         b7:bb:c0:32:1b:e5:5c:43:79:98:db:05:55:c5:a9:45:f0:31:
         ce:64:07:9b:e1:55:35:e8:74:20:65:28:16:3e:9c:89:91:a4:
         e9:c8:ad:fd:35:50:0c:22:b6:95:dc:be:3b:b6:12:de:3f:ee:
         41:18:c1:14
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUOO5LzezbSJuZEGMA5uMLlo6UIX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ5NUE4MTYyNkZDRjZFNzlDQUZCMEZDNzI2NkM1QTc3
MEI0NTdGMzAeFw0yNTEyMjIxMDU2MTlaFw0yNjEyMjExMTAxMTlaMDMxMTAvBgNV
BAMTKDRBQjExNjgwRjlDQ0ZCMzRFQUUzNzAwMjE0OUIxQTU2RTJGMjUxNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ARZpvaQY9GtmDP1zDoNZqDSF
g/ul7S0QcFK8QK1hkyLE95CN5NQ3imwXjyOb+4EvyOL4J0Um6ZtT/xe0kX5Z1QVP
rsHplDntSzcMh9LUQNXhs3MVk0ZJSzR5gen9AsG1Wtg6ttOuPlIyoXMIKF1+7ll2
M80lGeIiHzYCaV4vMCdk2yh61WPqWidmmaMhBOIiza2TuWutPp829T9tes84ipdB
inizjXJjXuUnARya/CXhwh7O1qsqjgLIbecVHY0IPjd25HK5Xg2cbybd2zac+EE+
L2IacdmdxQ8Vn6awbRHMIpI0Tg9mAgBuB/P/oXIU8yqaTaIXBGLOJCpIc9GzAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUSrEWgPnM+zTq43ACFJsaVuLyUUYwHwYDVR0j
BBgwFoAUlJWoFib89uecr7D8cmbFp3C0V/MwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud
HwRiMGAwXqBcoFqGWHJzeW5jOi8vcnBraS5neHQubmV0d29yay9yZXBvL2d4dC1h
czQ0ODIyLzEvOTQ5NUE4MTYyNkZDRjZFNzlDQUZCMEZDNzI2NkM1QTc3MEI0NTdG
My5jcmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9y
c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2Zl
LTQyOTktYjA3OS0zMDllZDk3ZjM4MjQvMC85NDk1QTgxNjI2RkNGNkU3OUNBRkIw
RkM3MjY2QzVBNzcwQjQ1N0YzLmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF
BzALhm5yc3luYzovL3Jwa2kuZ3h0Lm5ldHdvcmsvcmVwby9neHQtYXM0NDgyMi8x
LzMyNjEzMTM0M2EzNzM1MzgzMDNhMzMzMDMzMzAzYTNhMmYzNDM4MmQzNDM4MjAz
ZDNlMjAzNDM0MzgzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIG
CCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gDAwMA0GCSqGSIb3DQEBCwUA
A4IBAQCI86h9kKBYVPUt08kNMwXArkjXqZAfOQpcGRS3kT+dpZYmULvpuQTl6res
kRYY15o2SR96sxjBVPCbZPaVrAVgCC/iYPuekFcC2XQeauroS0929Y+LG8hQZsT3
h1S5R7V0kUVx9+CRp0uL3ep4bAznpaNE/wIh1B2fEIuNvK2O0/zdVjtAEk+O3/aP
T4wVHNXjt+NjL4RASq24sMCRlAEHUtpGQz6aSmHaF1ppiIYaiQ+CQBwp9abUls61
cJxgjXdNIaqY7ue3u8AyG+VcQ3mY2wVVxalF8DHOZAeb4VU16HQgZSgWPpyJkaTp
yK39NVAMIraV3L47thLeP+5BGMEU
-----END CERTIFICATE-----
Generated at Wed Jan 21 01:08:56 2026 by rpki-client