This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/GQwQ4NJBvyg0S5cirOINdsK2QUo.roa
File:                     GQwQ4NJBvyg0S5cirOINdsK2QUo.roa (raw, json)
Hash identifier:          hPCA2eD/WAsZM79tgjhqtOTZx90myfRAeK+dN2Vg5Wo=
Subject key identifier:   19:0C:10:E0:D2:41:BF:28:34:4B:97:22:AC:E2:0D:76:C2:B6:41:4A
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       019B79EC06745B5045CA5DDF27EFA11F452A
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/GQwQ4NJBvyg0S5cirOINdsK2QUo.roa
Signing time:             Thu 01 Jan 2026 14:17:49 +0000
ROA not before:           Thu 01 Jan 2026 14:17:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49245
IP address blocks:        185.1.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:06:74:5b:50:45:ca:5d:df:27:ef:a1:1f:45:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Jan  1 14:17:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=190c10e0d241bf28344b9722ace20d76c2b6414a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6d:a2:16:69:09:9b:e5:bf:52:3d:e2:61:f7:
                    39:25:13:fe:4f:51:80:d1:0e:45:06:cc:b1:f6:19:
                    7f:2d:44:d7:2f:56:5d:77:8d:45:e8:be:e3:e8:a8:
                    10:8d:06:65:c8:1a:e7:23:f3:ca:2e:c7:f5:0e:34:
                    0f:85:b1:26:61:1d:9b:14:64:d9:9a:74:ad:b8:44:
                    9e:70:1d:cb:0e:77:cb:96:ab:4f:70:05:4e:09:e1:
                    6d:10:e4:38:68:49:2b:13:42:a8:34:4d:79:89:e6:
                    27:a8:0a:aa:bc:3b:e7:d1:2d:02:6e:3e:f3:25:b8:
                    bc:9d:a8:dc:13:eb:67:01:1e:07:df:13:de:4b:3c:
                    a3:17:2b:24:bd:2f:d2:f2:f4:0c:60:5c:29:d6:5a:
                    7d:ee:82:6e:e5:d3:bc:47:c1:ef:27:6c:81:37:a0:
                    69:7e:56:28:f7:10:d0:78:bb:c8:05:7d:88:8e:0c:
                    a6:49:f8:47:72:41:e0:0d:fb:77:ac:3b:ab:82:d0:
                    67:2b:8a:29:90:ae:71:92:c7:ec:42:90:92:45:74:
                    40:4d:69:ee:c1:3f:ac:6a:f5:48:77:65:84:30:32:
                    f7:d0:50:f1:94:50:d4:12:83:18:9e:27:c6:c4:8c:
                    a5:b6:34:41:01:25:ef:3c:1b:b5:70:a5:cd:e1:52:
                    8f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0C:10:E0:D2:41:BF:28:34:4B:97:22:AC:E2:0D:76:C2:B6:41:4A
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/GQwQ4NJBvyg0S5cirOINdsK2QUo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:77:ab:b1:5c:31:c4:42:cd:09:55:a8:97:c7:59:c1:d2:1c:
         6a:b8:56:1d:eb:24:07:2d:11:a9:42:34:ed:90:b0:e1:71:f4:
         3d:96:ca:d8:87:0b:95:a6:cf:93:8b:85:99:ef:04:84:ee:55:
         28:dc:47:e1:31:87:51:c6:34:ee:f5:61:be:01:27:4d:68:77:
         f7:b6:49:bb:a9:69:1c:c3:92:f5:79:b2:31:6d:e3:c0:ec:ed:
         61:5c:ea:fa:a7:75:9f:4a:7b:54:89:63:db:84:f5:08:bc:1a:
         f0:bf:f5:9a:14:4f:b6:37:a2:19:23:e5:4b:d6:d7:21:3d:30:
         77:78:33:ed:73:ba:7d:07:13:88:e9:c9:f1:fe:d6:cc:73:a1:
         10:eb:92:0f:6f:aa:0c:15:58:05:27:97:e3:b4:4b:88:72:13:
         7c:6e:1d:1b:8b:ed:ed:9c:8c:05:2d:ed:08:a7:ae:e7:43:8f:
         00:c1:f6:5d:e8:28:bc:c3:9a:94:24:e4:81:f5:2f:9b:3e:74:
         8b:92:f8:d4:81:ee:bb:be:fc:35:89:d7:40:88:f3:63:d4:32:
         38:16:cf:bf:68:92:84:26:c4:b9:09:17:98:01:d7:3e:e7:29:
         ea:e4:1a:46:cd:1e:0a:ba:8a:0c:4d:52:68:7e:0b:95:2a:2f:
         26:f7:d1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:16:41 2026 by rpki-client