This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/GVouETPV5I5OgZlRBcNWCyzuhWs.roa
File:                     GVouETPV5I5OgZlRBcNWCyzuhWs.roa (raw, json)
Hash identifier:          wbMZdin5QkWokiCVCE10QpohIgQRoAZbanw3vHDME/Y=
Subject key identifier:   19:5A:2E:11:33:D5:E4:8E:4E:81:99:51:05:C3:56:0B:2C:EE:85:6B
Certificate issuer:       /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial:       019B7AC7D4F667C4CBA9CA22EF56339A1E14
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/GVouETPV5I5OgZlRBcNWCyzuhWs.roa
Signing time:             Thu 01 Jan 2026 18:17:55 +0000
ROA not before:           Thu 01 Jan 2026 18:17:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     58269
IP address blocks:        37.148.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 16:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:d4:f6:67:c4:cb:a9:ca:22:ef:56:33:9a:1e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
        Validity
            Not Before: Jan  1 18:17:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=195a2e1133d5e48e4e81995105c3560b2cee856b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:9f:a4:b0:70:da:76:85:10:3d:16:d1:34:b4:
                    cb:ac:3e:cd:b8:06:ba:b0:56:a8:a7:fb:78:8f:b2:
                    2a:0e:a7:07:4a:77:ae:d7:08:f6:fa:b8:f2:2c:32:
                    8d:a1:8c:09:03:b6:4d:87:f7:18:85:28:ca:c5:2c:
                    92:ae:b9:a7:69:71:f5:dd:02:b3:8d:33:73:b6:d2:
                    32:f6:92:a5:0a:44:76:ce:71:d2:87:01:25:0c:cd:
                    00:1e:b9:e2:37:3a:d8:f2:aa:30:1d:88:a2:36:fb:
                    4c:aa:32:f7:94:5e:67:ff:f6:11:9b:85:da:a1:55:
                    0c:de:65:5d:f4:00:5f:37:60:7c:59:3c:0c:c7:5c:
                    3c:d0:74:4b:da:8d:6b:ba:9a:38:3e:2e:47:ba:5a:
                    cd:7d:24:35:85:79:03:2f:bc:d7:28:ec:8d:aa:5c:
                    67:a3:4d:0a:35:28:b8:73:3a:d7:30:22:b3:fe:8a:
                    e3:6f:f7:8c:9a:ec:2c:d3:3f:7c:ea:71:52:ca:1e:
                    76:34:7d:56:eb:18:4d:ab:e4:1f:77:1e:c5:64:7f:
                    70:25:a2:5c:3d:4e:f2:b0:b1:42:b7:cc:c6:4c:ea:
                    97:8f:d8:38:69:5f:47:a5:f2:f5:c2:a5:72:6a:be:
                    4d:bc:f8:d2:b2:5e:94:9c:86:d4:cf:e4:d7:02:41:
                    6f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5A:2E:11:33:D5:E4:8E:4E:81:99:51:05:C3:56:0B:2C:EE:85:6B
            X509v3 Authority Key Identifier:
                keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/GVouETPV5I5OgZlRBcNWCyzuhWs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.148.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:e1:ca:5b:b0:71:45:30:73:6b:45:8b:ef:ea:cf:16:8d:e7:
         40:53:68:50:34:f3:60:ba:8a:84:3f:f7:91:3f:c5:ce:70:5c:
         61:9d:12:93:96:56:b1:55:0b:2f:64:b3:f7:b9:7f:1e:d4:32:
         cd:f7:de:45:fe:c9:36:d3:d9:3f:84:14:e2:12:1d:bc:96:dd:
         e8:11:43:22:9b:ae:5c:01:46:3c:e7:d1:70:33:42:4a:96:60:
         e4:8b:39:62:24:b7:ff:4a:26:3d:71:32:45:5b:32:de:e7:31:
         28:d9:3b:53:64:8d:5c:af:1f:59:e4:02:a3:6b:00:9b:3e:df:
         77:d1:bd:1a:00:51:21:80:95:5b:b2:4d:66:bd:7e:18:a1:d1:
         af:b3:75:61:ea:a7:5f:4e:19:b9:81:2f:be:6d:a0:db:b7:e2:
         fa:80:08:b1:a1:9b:29:cf:66:ab:f0:ea:9e:b7:23:30:68:79:
         89:1c:7f:a6:c9:6d:66:ee:77:22:d1:4d:56:47:b7:0b:01:40:
         fa:06:7a:d2:33:7d:05:5d:6e:73:a0:04:30:46:a2:25:d9:ba:
         d4:2d:2a:57:5f:cf:66:d2:ad:b6:c5:13:05:36:d8:b7:b4:7f:
         c5:12:b7:be:a0:e2:4d:02:f6:81:91:e6:bf:1b:95:11:42:6a:
         5f:e9:9b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 19:59:31 2026 by rpki-client