This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/gWGcdmx046UezH3VAk6Wb2AQd9k.roa
File:                     gWGcdmx046UezH3VAk6Wb2AQd9k.roa (raw, json)
Hash identifier:          hP6JoL0mGoicfzf2+aomHNW4Vn75XgDD8yCID2VLuvk=
Subject key identifier:   81:61:9C:76:6C:74:E3:A5:1E:CC:7D:D5:02:4E:96:6F:60:10:77:D9
Certificate issuer:       /CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Certificate serial:       019B7EA734A855DAD532D8644B1D074F9D06
Authority key identifier: C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/gWGcdmx046UezH3VAk6Wb2AQd9k.roa
Signing time:             Fri 02 Jan 2026 12:20:45 +0000
ROA not before:           Fri 02 Jan 2026 12:20:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48809
IP address blocks:        2a05:36c0:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a7:34:a8:55:da:d5:32:d8:64:4b:1d:07:4f:9d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
        Validity
            Not Before: Jan  2 12:20:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=81619c766c74e3a51ecc7dd5024e966f601077d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bb:82:7d:32:a8:3e:b1:02:b3:49:f2:eb:03:
                    b6:8c:c8:37:f1:d2:5a:0d:c5:48:98:53:4a:f7:51:
                    0d:41:dc:10:a0:14:65:00:b4:ef:45:8e:e8:8f:c4:
                    19:ba:15:1b:99:47:b6:5b:f6:b6:11:37:2d:11:47:
                    cd:32:b2:a9:5e:76:8c:07:dd:cd:0e:1f:1f:7a:f5:
                    32:d1:60:f2:0a:24:a3:7f:df:7e:17:e0:0a:06:f8:
                    bf:47:fd:22:c4:11:04:dd:c2:a5:9c:9a:1e:70:ec:
                    fa:fe:12:86:52:85:01:f4:7a:64:15:ad:d2:dd:34:
                    dc:66:72:13:a4:0d:b6:e8:a7:6c:67:4e:00:1a:f0:
                    fe:ba:98:48:22:e7:d9:32:99:80:cc:2f:6f:5d:26:
                    5e:bc:04:97:73:f7:98:50:c7:99:8f:73:f1:cb:21:
                    7c:d9:6e:c5:d4:be:d6:1c:09:42:14:48:78:56:8f:
                    72:4d:5f:a4:f1:04:82:ac:cc:c3:dc:ae:23:9a:77:
                    58:67:bb:0d:7d:79:99:da:47:90:3b:87:61:22:4b:
                    0e:3b:7c:1f:33:1c:e7:71:4f:46:7a:97:1d:32:d0:
                    4b:15:b1:1c:d0:d6:50:ad:49:71:b4:45:4b:de:c6:
                    1d:93:c6:42:bc:62:44:69:55:0d:21:5b:0d:9e:48:
                    bd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:61:9C:76:6C:74:E3:A5:1E:CC:7D:D5:02:4E:96:6F:60:10:77:D9
            X509v3 Authority Key Identifier:
                keyid:C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/gWGcdmx046UezH3VAk6Wb2AQd9k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:36c0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:95:44:77:22:93:2e:03:ec:85:a1:19:99:6d:d5:70:18:23:
         c3:2a:72:c2:af:83:03:67:d4:37:20:91:5f:b0:5e:4b:6b:d5:
         d0:04:8b:12:dd:39:ef:1a:42:7b:f3:77:54:ee:42:bc:a2:52:
         b6:1a:6b:03:20:d8:d6:53:b8:e1:eb:f6:4a:6b:6d:74:19:a0:
         ea:69:03:00:a6:05:34:21:63:f9:84:46:24:4e:86:d9:1b:95:
         2a:7a:ae:0d:ea:38:43:10:17:b3:af:eb:4a:84:95:41:de:30:
         c4:23:35:d6:36:1f:fb:52:ac:b8:a8:d6:d3:25:bc:c2:1c:75:
         16:d5:da:6e:2c:88:c6:af:89:e5:c3:71:e1:46:78:c0:30:fb:
         76:c2:67:e0:d3:e2:36:27:be:d4:f0:4f:8b:9d:98:4e:41:09:
         39:9c:68:04:c1:fe:6b:ab:39:4d:9c:63:ec:2b:39:5a:ba:c7:
         c8:09:26:25:3c:98:54:4b:fb:bc:d1:71:33:84:41:87:44:b3:
         ae:ba:f2:2c:14:f4:99:20:e8:29:ef:d1:45:ea:c7:f3:6d:c8:
         bd:f1:dc:8b:9f:ed:b6:49:fd:fc:b6:f2:dc:88:03:a6:53:2a:
         4b:79:cc:8b:5d:cd:ec:e8:b5:56:9f:af:ce:9a:18:82:af:b2:
         5b:66:90:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:02:53 2026 by rpki-client