This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GOoR6rZyWmLhOyDfm0vRGXPhygg.roa
File:                     GOoR6rZyWmLhOyDfm0vRGXPhygg.roa (raw, json)
Hash identifier:          ho6PlgRBHX4ZfyE5SwycVTdEbk7K2SROryqoFJdJauc=
Subject key identifier:   18:EA:11:EA:B6:72:5A:62:E1:3B:20:DF:9B:4B:D1:19:73:E1:CA:08
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       019B7E394E475B361B3539FE9C80F304A843
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GOoR6rZyWmLhOyDfm0vRGXPhygg.roa
Signing time:             Fri 02 Jan 2026 10:20:43 +0000
ROA not before:           Fri 02 Jan 2026 10:20:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210356
IP address blocks:        2a0c:b641:600::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:39:4e:47:5b:36:1b:35:39:fe:9c:80:f3:04:a8:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan  2 10:20:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=18ea11eab6725a62e13b20df9b4bd11973e1ca08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:90:1a:27:10:22:d4:ac:d8:ce:2b:33:ac:
                    94:bf:a4:9a:9f:df:27:0b:5d:5d:40:e1:7f:4d:9d:
                    af:16:1b:94:0f:48:e6:24:82:d4:56:c4:66:27:6b:
                    a2:a3:16:8e:ef:0f:b5:07:fd:1e:77:28:cd:29:f9:
                    08:76:65:ab:f5:d9:d8:fd:af:3b:e1:4c:e9:14:46:
                    6d:81:f8:01:31:dd:d7:b8:b2:bc:89:40:2b:8f:2d:
                    01:5b:c7:6e:e5:ae:2b:c0:0f:08:00:fc:eb:df:ab:
                    ae:c2:84:27:fb:b6:8d:88:d2:2e:dc:17:7d:10:40:
                    84:a4:42:5b:8f:68:73:70:44:58:a5:7c:ec:5f:39:
                    88:b5:f8:96:8c:42:c8:8e:e8:48:05:d1:b8:c9:82:
                    a6:9d:98:65:55:1d:ec:bc:cb:b1:4e:b9:ce:27:6d:
                    f8:f6:14:09:0b:66:3e:3a:35:7e:41:59:d3:b7:31:
                    5d:1a:61:ba:5e:0a:ff:bd:af:97:ad:1a:5d:91:cd:
                    3e:f0:7b:43:ce:ee:9b:56:cf:55:ee:0d:4d:66:b4:
                    55:a6:6d:fd:63:bd:63:1d:dc:5d:09:32:0e:37:ee:
                    6b:85:3d:cd:87:b8:53:a3:0f:0e:8f:ce:ad:ec:a0:
                    07:dd:10:aa:52:b9:3c:dd:02:2b:e6:44:56:fa:3e:
                    dd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EA:11:EA:B6:72:5A:62:E1:3B:20:DF:9B:4B:D1:19:73:E1:CA:08
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GOoR6rZyWmLhOyDfm0vRGXPhygg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:600::/44

    Signature Algorithm: sha256WithRSAEncryption
         76:2d:ba:a1:fd:e4:fc:d3:eb:9c:be:5f:bb:69:13:46:c9:fa:
         09:07:b6:0d:3c:52:7f:f0:26:ca:c8:b9:bf:3e:c8:5a:29:31:
         18:da:00:01:63:c8:7b:54:04:44:4e:80:9c:fa:68:e7:e0:f6:
         98:77:7d:9f:86:cc:b2:a9:69:7d:37:a1:f6:9c:ef:8a:e9:99:
         71:c6:7d:9e:f0:be:23:dd:d7:03:9c:e6:b4:e5:ce:e9:e7:77:
         70:b4:aa:21:fc:18:94:0d:c5:29:10:be:cd:6c:f1:fe:df:a8:
         82:a0:51:d7:88:8d:b7:42:d4:47:0e:e1:2c:7a:74:af:f6:d2:
         1c:56:df:ce:d3:cb:d0:01:93:c2:e6:27:57:b3:ef:e1:bd:21:
         00:e0:60:45:ab:c9:23:5d:8c:18:65:79:ae:cb:df:9e:dc:6a:
         29:7d:75:0f:08:23:7a:e5:20:a2:fd:67:8a:a2:40:8d:cc:61:
         18:15:9e:cb:be:7f:42:5f:92:2e:29:fa:5e:b9:e3:2e:db:ba:
         6a:f4:1b:9b:83:13:19:eb:fa:de:e0:5e:6b:f1:e7:92:d6:29:
         10:c7:3f:96:cc:36:43:c8:31:55:24:a0:59:8b:ea:51:3c:64:
         f3:ff:02:63:d2:88:5c:d8:33:09:f8:a0:41:be:50:fb:3b:50:
         25:7b:ab:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:46:14 2026 by rpki-client