This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/GWOMCgc6frfuXzWmR3iYp-MVmSA.roa
File:                     GWOMCgc6frfuXzWmR3iYp-MVmSA.roa (raw, json)
Hash identifier:          Anj9LGw2xp0TmbMPDVVyvGqohtYkFBACqEE6N9Y1dWM=
Subject key identifier:   19:63:8C:0A:07:3A:7E:B7:EE:5F:35:A6:47:78:98:A7:E3:15:99:20
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       019B79EC0881BFDBB35FC241AF938ADD0FD5
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/GWOMCgc6frfuXzWmR3iYp-MVmSA.roa
Signing time:             Thu 01 Jan 2026 14:17:50 +0000
ROA not before:           Thu 01 Jan 2026 14:17:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204508
IP address blocks:        2a05:4140:300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:08:81:bf:db:b3:5f:c2:41:af:93:8a:dd:0f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Jan  1 14:17:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=19638c0a073a7eb7ee5f35a6477898a7e3159920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2a:36:06:4a:73:05:3e:f1:3a:ca:a8:b4:4f:
                    3b:87:38:5f:12:eb:d1:23:99:fb:a3:5e:03:10:55:
                    4a:a0:01:82:5a:1d:01:a3:c5:38:db:c0:79:6b:61:
                    71:99:f8:56:6d:c8:13:4e:50:19:81:a4:60:eb:ba:
                    52:a6:6d:2d:22:de:c3:e1:7b:41:5e:e7:66:50:b7:
                    eb:01:d4:77:62:f0:da:4b:d1:97:aa:e1:00:ab:68:
                    fa:0b:ed:0f:f4:ba:e4:af:95:ab:db:b4:9b:b5:59:
                    8c:83:c9:09:1a:6f:a0:42:65:e7:c0:10:9b:00:b5:
                    46:bd:84:d8:36:d8:de:fa:00:80:13:fa:04:fe:76:
                    47:ea:a3:37:2a:f3:fa:61:65:d5:a9:f8:d2:47:56:
                    1e:e3:8d:b4:ad:79:41:93:42:ca:c5:d7:10:52:ff:
                    13:2d:cb:ea:85:f7:e6:49:52:9f:71:95:1b:42:8e:
                    ba:d1:5f:66:76:97:c6:ca:02:6a:de:5f:4e:3f:3e:
                    2e:16:5b:3e:54:56:76:04:6f:27:11:8e:18:82:40:
                    a0:43:88:66:ce:6c:c8:b6:92:e3:da:6f:1d:47:43:
                    03:5e:00:01:71:2b:d6:36:cd:11:46:be:f2:31:8e:
                    30:a0:25:76:f4:70:0b:d1:bf:d8:f8:13:b0:81:aa:
                    da:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:63:8C:0A:07:3A:7E:B7:EE:5F:35:A6:47:78:98:A7:E3:15:99:20
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/GWOMCgc6frfuXzWmR3iYp-MVmSA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4140:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         27:c7:45:3c:fe:de:b3:85:88:dd:1f:a9:43:ca:80:00:6c:22:
         f9:ab:be:4b:62:5a:b7:c9:2a:87:46:35:30:f1:b1:05:65:c3:
         ff:9f:14:0f:1a:42:41:90:3c:2c:86:b6:e4:0e:dd:f2:23:3a:
         51:02:83:35:57:63:5f:32:9a:83:cd:ab:80:0f:36:09:48:f0:
         9e:25:36:1b:6c:31:5f:9e:ee:d2:e5:82:c7:a7:a7:07:53:71:
         13:0a:8f:09:07:38:01:fe:61:17:40:8a:c0:eb:5a:b7:0f:91:
         b8:1f:0c:91:96:6a:b4:3b:82:63:f0:1e:8f:39:79:ed:de:38:
         57:8b:92:2f:1d:e0:8b:bc:0a:52:71:af:4a:39:89:26:cf:6c:
         5c:97:c4:28:f0:1d:0b:1b:cd:35:8a:98:c4:da:ae:70:e8:e5:
         01:29:53:72:42:5a:1b:90:2f:97:25:8e:b5:fc:7c:1f:63:11:
         d4:a3:82:1e:f4:f5:da:c4:86:7f:25:ea:f0:ef:23:0b:30:b0:
         6c:b9:8a:81:86:d4:9a:ed:42:b7:8c:f2:96:91:3a:86:b6:19:
         4f:b1:91:58:da:20:f3:bb:2c:7b:b9:61:4a:5f:40:ab:c9:47:
         de:08:b7:8d:81:e8:21:e3:70:2a:6a:d0:be:bb:c5:80:4d:4f:
         51:63:ad:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:16:42 2026 by rpki-client