This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.gxt.network/repo/gxt-as44822/1/326131343a373538303a336666643a3a2f34382d3438203d3e203434383232.roa
File:                     326131343a373538303a336666643a3a2f34382d3438203d3e203434383232.roa (raw, json)
Hash identifier:          B+B2Yl/O36Gn5Y+oNxHVV8LhWuDlCy4ZF9J305MP6uY=
Subject key identifier:   98:F4:B2:D1:E6:C8:34:6B:EC:6C:AD:E7:D0:C8:21:A4:FA:17:61:75
Certificate issuer:       /CN=9495A81626FCF6E79CAFB0FC7266C5A770B457F3
Certificate serial:       31FEFFADA280B8AF9B220224787F09AEC36BAF78
Authority key identifier: 94:95:A8:16:26:FC:F6:E7:9C:AF:B0:FC:72:66:C5:A7:70:B4:57:F3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer
Subject info access:      rsync://rpki.gxt.network/repo/gxt-as44822/1/326131343a373538303a336666643a3a2f34382d3438203d3e203434383232.roa
Signing time:             Mon 10 Nov 2025 13:38:42 +0000
ROA not before:           Mon 10 Nov 2025 13:33:42 +0000
ROA not after:            Mon 09 Nov 2026 13:38:42 +0000
asID:                     44822
IP address blocks:        2a14:7580:3ffd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.crl
                          rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 23:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:fe:ff:ad:a2:80:b8:af:9b:22:02:24:78:7f:09:ae:c3:6b:af:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9495A81626FCF6E79CAFB0FC7266C5A770B457F3
        Validity
            Not Before: Nov 10 13:33:42 2025 GMT
            Not After : Nov  9 13:38:42 2026 GMT
        Subject: CN=98F4B2D1E6C8346BEC6CADE7D0C821A4FA176175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fb:49:b2:31:2b:67:6a:e0:c4:d0:39:40:b1:
                    ab:45:6b:17:c5:b0:bf:ee:69:10:cb:37:fd:e4:c5:
                    9b:61:1a:d8:d9:e1:8e:db:c3:b0:49:97:6a:99:0f:
                    f9:2b:f8:77:b6:ca:aa:8f:70:40:c5:43:b3:b7:46:
                    cc:22:dd:b1:36:e8:d5:2c:d6:9d:54:95:13:d9:9f:
                    e5:cf:9e:7e:ec:66:7c:ae:d7:0f:22:58:22:c1:10:
                    ef:ff:5d:8e:55:5c:d9:c4:f5:5c:95:82:71:2c:80:
                    bb:4a:22:cf:0e:c9:ec:ba:dd:fc:49:65:a7:2c:28:
                    81:8b:2d:af:6f:d6:4d:56:2e:6f:13:e1:95:3e:6d:
                    11:62:f1:f2:16:c9:e2:c1:8d:7b:0c:d5:4d:c3:3d:
                    ad:6f:9e:c7:3d:48:7d:92:fc:61:51:a1:1d:87:e8:
                    74:aa:24:c7:a8:87:d4:61:b9:3c:ab:44:e7:55:b3:
                    b5:03:30:de:72:42:ca:d3:ee:aa:c9:58:96:83:27:
                    2e:91:13:71:d4:ad:71:63:5a:53:7f:ff:05:03:c4:
                    88:d3:99:dc:cd:a4:a5:9b:8a:81:10:c5:d8:e5:82:
                    84:10:f6:5b:8b:a3:6d:15:8a:f9:b0:98:e0:c1:fd:
                    c3:ce:79:d8:60:56:1c:5f:57:b2:91:ed:22:b6:5c:
                    29:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F4:B2:D1:E6:C8:34:6B:EC:6C:AD:E7:D0:C8:21:A4:FA:17:61:75
            X509v3 Authority Key Identifier:
                keyid:94:95:A8:16:26:FC:F6:E7:9C:AF:B0:FC:72:66:C5:A7:70:B4:57:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.gxt.network/repo/gxt-as44822/1/326131343a373538303a336666643a3a2f34382d3438203d3e203434383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:3ffd::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:7e:bd:cf:b1:0e:eb:2d:14:50:25:d3:a6:8d:ec:7a:49:7e:
         58:d5:74:dd:12:af:85:36:b5:c1:65:26:05:85:8b:50:74:6c:
         bc:66:65:b0:2c:7e:06:4c:b5:18:ea:9b:29:3c:01:31:f5:2a:
         c5:95:1b:c8:5d:64:2f:c3:f8:54:e3:b0:fc:ee:8c:af:97:42:
         6c:d0:38:ee:53:16:94:ea:38:04:e6:1c:ea:7f:ac:b3:7f:cc:
         1c:e9:e3:6c:4b:58:e5:61:83:01:fe:de:52:18:a5:6f:28:ad:
         22:d2:a1:48:b0:49:da:75:5d:8e:9f:85:f1:ff:40:9e:6b:ee:
         d8:58:36:b2:21:88:b8:ff:6c:fc:78:e1:f4:13:a8:63:ae:b2:
         99:5e:86:7e:b2:ef:97:69:28:cb:73:ee:d9:6c:c4:27:37:cb:
         4f:f7:f6:a6:31:d7:ec:0b:a4:60:fe:ea:12:4e:da:58:60:e2:
         ba:63:f5:32:81:26:c1:67:a7:0a:ad:2a:49:1e:8f:ee:01:58:
         ac:cb:d1:c5:92:f9:25:4a:15:ef:82:9f:e6:1d:57:26:6f:5f:
         3c:a0:32:da:d2:8f:df:2e:68:2c:de:b2:30:2f:e0:fe:cd:1c:
         60:e7:db:a5:7e:39:93:2e:11:67:a5:49:e1:b4:3e:5d:4e:5d:
         fd:b6:6d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:27:37 2025 by rpki-client