This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/gCpCVs1T1erTsFoVeoh9sbu_thg.roa
File:                     gCpCVs1T1erTsFoVeoh9sbu_thg.roa (raw, json)
Hash identifier:          Qe0McZ/Bp+ZUevE8P6m/6/dQfu+aUz3X+I25k8OWJbs=
Subject key identifier:   80:2A:42:56:CD:53:D5:EA:D3:B0:5A:15:7A:88:7D:B1:BB:BF:B6:18
Certificate issuer:       /CN=4844049d396176a1b5eb388548d9be3eb3e7d651
Certificate serial:       019B78A35DFCDF33D29B6B298D000787BE44
Authority key identifier: 48:44:04:9D:39:61:76:A1:B5:EB:38:85:48:D9:BE:3E:B3:E7:D6:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/gCpCVs1T1erTsFoVeoh9sbu_thg.roa
Signing time:             Thu 01 Jan 2026 08:18:50 +0000
ROA not before:           Thu 01 Jan 2026 08:18:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41131
IP address blocks:        91.245.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:5d:fc:df:33:d2:9b:6b:29:8d:00:07:87:be:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4844049d396176a1b5eb388548d9be3eb3e7d651
        Validity
            Not Before: Jan  1 08:18:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=802a4256cd53d5ead3b05a157a887db1bbbfb618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b4:e7:a4:29:6d:93:5c:9b:66:da:27:16:e3:
                    ed:d7:82:00:6d:85:73:71:da:cf:9b:63:fd:5d:46:
                    5b:c4:a3:54:5c:79:2e:81:1d:5c:ac:dc:b7:be:c1:
                    f9:ce:49:5b:8a:82:54:da:30:38:74:a0:cd:d2:ee:
                    60:f7:3c:45:24:92:66:56:58:4a:e0:f6:56:e4:97:
                    ae:8b:90:22:78:81:80:fd:a8:7f:18:47:19:1a:40:
                    f1:7b:7e:ea:b6:49:36:57:95:7e:bf:3e:1a:99:1f:
                    24:ef:c2:3c:b5:f2:92:04:60:20:9f:16:73:fa:9a:
                    65:10:0d:85:19:44:08:52:7c:ac:66:40:78:5e:1e:
                    16:85:dc:01:06:35:ab:69:da:e9:f8:bb:d5:a7:a2:
                    22:75:5c:7e:59:60:f8:70:7b:0a:53:84:fa:6e:5d:
                    95:7b:24:af:3e:1c:67:36:40:bc:b8:f2:91:b5:f4:
                    73:64:c7:6c:88:51:13:70:95:c1:96:e4:bd:a9:c1:
                    1b:bd:8a:14:8c:ac:39:6f:56:70:1e:b8:38:a3:b7:
                    20:e7:96:ef:56:49:54:29:4f:30:01:03:27:11:c5:
                    91:62:cb:d4:77:97:ca:53:d2:a3:46:f6:e6:84:29:
                    c1:1d:72:4d:7c:fb:25:0c:8e:9e:ef:5f:90:6d:0f:
                    8e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2A:42:56:CD:53:D5:EA:D3:B0:5A:15:7A:88:7D:B1:BB:BF:B6:18
            X509v3 Authority Key Identifier:
                keyid:48:44:04:9D:39:61:76:A1:B5:EB:38:85:48:D9:BE:3E:B3:E7:D6:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/gCpCVs1T1erTsFoVeoh9sbu_thg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.245.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:f5:0e:20:d7:45:bb:38:9f:72:8c:ad:e8:7f:20:51:ff:fa:
         42:da:e1:0b:4c:44:17:34:eb:3e:a4:72:d9:3a:9f:15:f0:a9:
         e2:b2:fe:83:67:c4:17:96:08:36:89:0b:44:19:c8:d1:6d:de:
         86:6e:21:38:ab:ca:17:c0:36:00:1f:25:c6:65:70:6e:6d:a8:
         eb:9b:68:a1:5d:f2:cb:ce:e8:f9:74:6e:86:12:69:9d:e5:bf:
         65:d9:49:fa:92:30:78:61:6f:45:ae:43:98:57:7d:69:79:50:
         7a:a8:95:9f:95:81:bf:d6:f7:d3:33:9b:35:f9:82:2b:0f:7f:
         06:e6:cb:a8:09:fa:bd:db:82:30:ce:5c:c2:54:c8:ae:7d:d7:
         24:f6:9d:d5:97:b8:e5:fe:1a:10:1a:01:92:d9:f7:1d:a9:ce:
         c7:1d:2a:2e:b3:29:b9:27:a3:b6:2e:0c:7c:60:ff:8e:52:e0:
         9e:47:7a:bf:20:a6:3f:72:2c:92:cc:3c:8c:13:f8:64:9c:e3:
         20:40:e6:f6:bb:7e:0f:67:dc:08:24:86:ee:3a:70:1d:5c:5e:
         c7:25:c7:a7:df:a8:f5:3e:0a:55:39:c9:cd:c9:ae:6c:5d:4b:
         0c:39:43:27:4e:b1:44:02:65:c2:df:66:21:c0:bf:6f:d8:7a:
         0d:2c:68:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:03:13 2026 by rpki-client