This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.gxt.network/repo/gxt-as44822/1/326131343a373538303a336666663a3a2f34382d3438203d3e203434383232.roa
File:                     326131343a373538303a336666663a3a2f34382d3438203d3e203434383232.roa (raw, json)
Hash identifier:          Kicy9HxyZzEtWNVt6uGQnpFMpN2VWc9gbNotwWywYxs=
Subject key identifier:   EB:25:BD:0F:43:3C:C2:12:27:53:24:89:06:1E:1A:A4:41:4B:7A:B6
Certificate issuer:       /CN=9495A81626FCF6E79CAFB0FC7266C5A770B457F3
Certificate serial:       6499BE2F2394AA86FE8CDB9BFFF2FF7894054B8A
Authority key identifier: 94:95:A8:16:26:FC:F6:E7:9C:AF:B0:FC:72:66:C5:A7:70:B4:57:F3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer
Subject info access:      rsync://rpki.gxt.network/repo/gxt-as44822/1/326131343a373538303a336666663a3a2f34382d3438203d3e203434383232.roa
Signing time:             Mon 10 Nov 2025 13:39:22 +0000
ROA not before:           Mon 10 Nov 2025 13:34:22 +0000
ROA not after:            Mon 09 Nov 2026 13:39:22 +0000
asID:                     44822
IP address blocks:        2a14:7580:3fff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.crl
                          rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 23:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:99:be:2f:23:94:aa:86:fe:8c:db:9b:ff:f2:ff:78:94:05:4b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9495A81626FCF6E79CAFB0FC7266C5A770B457F3
        Validity
            Not Before: Nov 10 13:34:22 2025 GMT
            Not After : Nov  9 13:39:22 2026 GMT
        Subject: CN=EB25BD0F433CC21227532489061E1AA4414B7AB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2b:bf:21:70:49:f0:8f:e5:c6:e8:b6:8e:2c:
                    f8:e4:28:15:19:dd:c9:ac:c1:26:16:3d:de:23:c1:
                    9c:e0:56:b6:e3:e8:5b:61:69:20:13:07:43:18:a4:
                    e0:c9:9c:d3:74:45:85:0a:b9:63:27:06:3e:6b:93:
                    8f:a3:4c:61:28:d6:74:12:13:3c:c6:f6:c4:e4:8a:
                    28:08:c5:e0:e5:90:ac:82:0e:88:03:9c:1d:1f:9b:
                    18:d3:bf:80:0b:91:60:17:40:8c:ac:16:4f:1a:c9:
                    be:10:7e:72:9b:50:6a:21:4d:a4:02:88:7b:28:df:
                    c7:c8:5c:9b:94:cb:30:43:d7:a8:e1:27:21:2b:78:
                    dd:58:20:0c:4a:bf:eb:ce:8c:b1:e0:0d:09:ca:38:
                    f6:49:28:40:c6:66:81:d9:11:cf:19:1e:41:b0:a7:
                    5f:01:ac:4c:6e:27:6a:46:f1:44:8c:ab:ac:77:ff:
                    5e:b6:11:ee:00:86:1c:60:dc:33:1f:ea:57:a6:41:
                    83:d4:95:4f:48:37:51:50:dd:46:2d:17:e5:5a:98:
                    5f:2b:1e:b8:c8:72:db:f1:52:49:e3:93:b8:70:e9:
                    e5:73:5a:a5:48:07:51:6c:30:c5:44:e8:eb:b1:e5:
                    b7:b6:16:c3:2b:0b:a5:0b:14:2c:ce:ef:7f:6e:e9:
                    93:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:25:BD:0F:43:3C:C2:12:27:53:24:89:06:1E:1A:A4:41:4B:7A:B6
            X509v3 Authority Key Identifier:
                keyid:94:95:A8:16:26:FC:F6:E7:9C:AF:B0:FC:72:66:C5:A7:70:B4:57:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.gxt.network/repo/gxt-as44822/1/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9495A81626FCF6E79CAFB0FC7266C5A770B457F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.gxt.network/repo/gxt-as44822/1/326131343a373538303a336666663a3a2f34382d3438203d3e203434383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:3fff::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:79:91:86:48:f6:8f:e0:d0:82:02:19:b2:06:f1:a9:88:d3:
         9b:b4:a2:6c:19:3c:d3:ed:0f:51:76:6f:97:ad:16:56:0e:29:
         58:0b:bc:c5:d9:49:03:dd:2a:90:6a:ea:c5:21:86:9b:a1:9f:
         c5:d2:94:94:98:19:47:aa:3f:af:f6:1f:25:5f:f8:f7:91:2d:
         63:46:3a:f5:50:4b:3e:85:5a:73:d8:b4:ec:a0:d6:36:3b:76:
         ce:1f:1a:7a:18:2d:08:ef:04:22:7f:db:4a:7b:15:ff:75:ba:
         28:f6:79:47:99:09:ed:f8:3f:5d:44:11:a2:5e:70:c3:3f:f4:
         b4:9f:9e:61:ae:ac:14:5d:ff:a8:e3:79:fb:4a:ec:fd:27:72:
         d1:be:11:12:ac:2e:e5:3b:24:e6:3e:b0:05:42:ad:db:3c:8d:
         74:d3:e5:4d:64:3e:f1:80:c3:ec:87:c9:92:34:0c:84:d4:3f:
         58:01:5c:f7:36:27:2f:04:5e:40:dd:24:56:0c:da:ac:ca:3b:
         65:22:4b:b4:b8:a7:df:de:01:0c:51:47:b9:1f:e7:df:93:5a:
         21:71:27:97:dc:49:3d:21:9c:75:7c:03:6a:d4:06:ba:75:eb:
         64:cb:cf:f0:ac:16:3d:43:29:1f:f1:fb:6d:bd:8d:e7:07:bd:
         10:ca:17:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:27:37 2025 by rpki-client