This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GPDp9plmScdMQY8Xt7PLltMqyFk.roa
File:                     GPDp9plmScdMQY8Xt7PLltMqyFk.roa (raw, json)
Hash identifier:          kn5LMZ9IDimoqU2fH9sXquKqrIXG35nTc0YpDs18ygU=
Subject key identifier:   18:F0:E9:F6:99:66:49:C7:4C:41:8F:17:B7:B3:CB:96:D3:2A:C8:59
Certificate issuer:       /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial:       019B7F84D0087D2905AC6FC00BDEA72B4CB9
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GPDp9plmScdMQY8Xt7PLltMqyFk.roa
Signing time:             Fri 02 Jan 2026 16:22:48 +0000
ROA not before:           Fri 02 Jan 2026 16:22:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212722
IP address blocks:        2a11:f140::/29 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:d0:08:7d:29:05:ac:6f:c0:0b:de:a7:2b:4c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
        Validity
            Not Before: Jan  2 16:22:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=18f0e9f6996649c74c418f17b7b3cb96d32ac859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:84:cb:d8:55:bf:af:3d:df:f2:7c:29:60:
                    e1:e4:4c:be:1d:a6:92:06:9d:d9:1d:fd:c1:4f:56:
                    47:2f:be:53:7b:96:08:94:1e:b8:fe:6c:d3:c6:7a:
                    36:f6:25:fd:b2:16:41:c1:9c:46:e6:21:46:89:6a:
                    18:f4:89:96:37:b0:b2:50:ac:ad:4e:70:10:0f:4d:
                    0c:0b:26:10:65:82:6e:26:60:dd:81:f3:5e:1f:d3:
                    de:e9:b4:98:23:d0:4d:56:c2:2c:8b:29:f5:c6:67:
                    c6:96:ae:4c:af:cd:95:94:7e:43:d3:77:23:ac:e3:
                    c8:40:06:18:6f:9e:6c:d6:31:5c:31:04:8f:4d:be:
                    31:3c:c2:79:42:e7:d0:dc:6e:5b:fa:0d:02:26:c2:
                    7e:dc:c5:39:9d:df:6b:64:b4:c0:27:b8:e4:cc:c1:
                    20:26:58:5c:3c:4f:fa:c7:d4:1b:a9:21:a3:02:a6:
                    03:8f:b2:66:88:f9:e7:b1:91:cb:4b:94:50:00:79:
                    8b:84:03:80:e1:99:d1:f3:0f:9a:4e:20:1b:09:1c:
                    44:0b:bb:ea:22:0b:52:fc:64:ed:16:8c:62:49:37:
                    8c:29:34:35:e9:08:40:03:27:89:12:1c:f1:40:95:
                    a3:05:e7:75:ab:82:eb:5f:be:ba:71:00:e9:0b:43:
                    9f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F0:E9:F6:99:66:49:C7:4C:41:8F:17:B7:B3:CB:96:D3:2A:C8:59
            X509v3 Authority Key Identifier:
                keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GPDp9plmScdMQY8Xt7PLltMqyFk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f140::/29

    Signature Algorithm: sha256WithRSAEncryption
         1e:5c:e0:9b:7f:b7:94:3a:d0:48:95:c8:6f:c4:97:36:1b:69:
         2d:04:7d:a2:c5:00:ec:25:67:d6:50:29:e7:8a:7e:c3:4f:a6:
         13:56:d8:aa:cb:57:50:45:d1:16:c7:9a:8e:18:a4:1a:89:16:
         2e:eb:e6:f7:ae:09:56:a2:d6:24:93:a2:d8:1b:b0:a1:32:5a:
         cb:ee:7d:5d:0e:2c:2f:5a:91:ac:5c:a2:9c:dc:d3:99:b5:df:
         4a:0c:ed:2c:7d:54:9f:60:b6:b5:95:4f:75:57:d7:10:67:1d:
         43:5b:52:d0:d1:f6:42:12:a7:20:35:e5:b4:ba:d1:f6:e6:cd:
         22:d2:54:fb:07:8c:36:a0:23:29:e6:94:ec:60:90:8b:2e:b5:
         9c:fc:80:64:07:07:07:8d:c0:ee:17:f6:bc:10:f4:6d:73:5a:
         bf:10:d0:f8:7f:8e:69:4c:d0:00:58:30:eb:94:70:02:21:7a:
         de:09:5d:76:28:a0:43:f4:0d:25:82:e6:0e:55:77:b7:87:c5:
         a2:69:9a:a6:8f:5f:c6:ed:14:f1:d2:db:71:bf:02:18:b5:4a:
         d6:a9:3e:f2:c8:7e:eb:36:b5:71:4a:f8:2d:3e:e8:67:e9:6e:
         24:2e:67:73:6e:2c:67:3c:58:7e:10:91:34:a5:52:29:73:f7:
         0b:bc:88:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:22:38 2026 by rpki-client