This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gFFRPG3J_MMQs1-CM1ZQTLWuZro.roa
File:                     gFFRPG3J_MMQs1-CM1ZQTLWuZro.roa (raw, json)
Hash identifier:          sGu9TRb02zgM+MFT5BPhDtZ/6wE7rJSiVmpK+yXTzKY=
Subject key identifier:   80:51:51:3C:6D:C9:FC:C3:10:B3:5F:82:33:56:50:4C:B5:AE:66:BA
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       019B7C13088A62E0492000E0C921AF1DC153
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gFFRPG3J_MMQs1-CM1ZQTLWuZro.roa
Signing time:             Fri 02 Jan 2026 00:19:40 +0000
ROA not before:           Fri 02 Jan 2026 00:19:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214971
IP address blocks:        94.103.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 14:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:08:8a:62:e0:49:20:00:e0:c9:21:af:1d:c1:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Jan  2 00:19:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8051513c6dc9fcc310b35f823356504cb5ae66ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ed:fc:f3:31:c8:85:c4:17:ac:a8:cb:aa:8d:
                    4b:39:6d:38:f4:02:63:e3:ce:73:a1:fe:a4:86:48:
                    60:31:22:61:49:91:f0:7d:63:6d:d3:b8:dc:89:58:
                    c9:cd:48:bf:0f:08:b1:18:b2:fc:30:4f:cc:f7:6d:
                    cb:1f:3a:97:50:fc:5e:67:a5:72:14:b3:01:3d:00:
                    c4:42:43:bf:6d:c8:20:8c:00:a6:77:f2:bb:11:9d:
                    29:83:ab:d0:c6:69:24:3f:91:99:32:41:ae:6f:68:
                    2e:e6:18:31:b8:cc:ab:99:72:bb:ce:c0:46:d4:a9:
                    8e:15:e2:cc:c5:6e:f8:4f:f6:9a:1e:9c:32:7f:17:
                    85:95:e9:5d:96:47:b2:02:d1:6b:4c:24:1b:6e:0b:
                    b1:33:1c:92:b1:3a:fd:c4:dc:0d:63:d3:f5:6e:ed:
                    a9:3a:15:c0:04:f9:91:8e:c3:39:82:17:92:d8:d9:
                    63:d7:b0:3b:f3:84:be:a6:b3:96:ce:d5:9e:13:3b:
                    0d:72:81:a4:16:3f:70:ee:87:ab:27:00:6c:5d:fe:
                    37:e6:98:cc:d6:ef:f5:f8:50:29:fd:87:a0:f7:d0:
                    65:fa:ba:1a:c5:66:96:dc:e3:3e:f5:f5:55:92:56:
                    3b:3c:b1:fc:03:12:91:3f:d1:e0:35:d4:6e:11:aa:
                    fa:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:51:51:3C:6D:C9:FC:C3:10:B3:5F:82:33:56:50:4C:B5:AE:66:BA
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gFFRPG3J_MMQs1-CM1ZQTLWuZro.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:5e:52:1c:07:06:84:9c:8e:87:46:0a:43:b1:75:f1:14:9c:
         e5:2a:a2:8a:c7:c8:4f:31:c5:cf:f1:37:67:e3:bf:27:a4:37:
         e2:e2:09:7e:ee:fd:38:29:52:83:ef:f8:86:68:52:17:1b:94:
         4d:97:71:b5:9f:5a:cc:3b:fd:12:32:28:02:49:90:25:8c:9a:
         34:90:0b:58:6f:26:53:3d:c3:f3:73:a5:ca:f1:8f:46:67:6f:
         55:35:a6:76:a0:f8:9e:29:fd:31:d5:b8:23:e8:40:d7:0f:54:
         6a:f6:0a:ea:5f:1a:1d:22:62:ba:05:9f:ed:a7:fe:fc:ae:17:
         97:d5:b7:cb:f3:80:bf:e7:34:86:41:69:e6:e5:9f:b7:09:9e:
         28:f4:10:e9:79:13:0f:93:eb:84:47:d7:92:e7:b2:1a:0c:27:
         d6:60:be:38:aa:79:09:0d:ee:5f:8f:e8:9d:d9:12:e1:99:87:
         cf:3b:5c:f4:30:ba:ba:5f:60:7b:b6:a5:13:3a:be:c6:73:89:
         1c:b6:fe:55:d0:89:45:8d:eb:a5:8b:88:e9:49:df:93:8c:18:
         5f:e5:0c:dd:94:36:5d:03:b3:c4:48:09:e3:e2:9c:55:4c:1f:
         b7:63:cd:17:a7:81:f1:b7:59:11:1c:5b:ea:b6:73:84:a4:26:
         0e:e1:b4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 19:56:27 2026 by rpki-client