This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/_GwYJ0PKXJK6fqA4cXd9zGiQJsk.roa
File:                     _GwYJ0PKXJK6fqA4cXd9zGiQJsk.roa (raw, json)
Hash identifier:          TYTF9XrM81uGdSP5QXPvN15cnh9G39fwkeUY9WQ9Rbg=
Subject key identifier:   FC:6C:18:27:43:CA:5C:92:BA:7E:A0:38:71:77:7D:CC:68:90:26:C9
Certificate issuer:       /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial:       019B78A23FF2AF60B53140D26914389B1655
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/_GwYJ0PKXJK6fqA4cXd9zGiQJsk.roa
Signing time:             Thu 01 Jan 2026 08:17:37 +0000
ROA not before:           Thu 01 Jan 2026 08:17:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     33886
IP address blocks:        2a00:1a28:1106::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:3f:f2:af:60:b5:31:40:d2:69:14:38:9b:16:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
        Validity
            Not Before: Jan  1 08:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fc6c182743ca5c92ba7ea03871777dcc689026c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:66:49:aa:73:fd:74:fa:7b:f2:df:cf:c0:da:
                    15:64:04:1f:0f:87:d1:44:b1:b2:dd:83:1e:bb:b4:
                    d4:ec:74:05:8f:40:eb:bb:2a:ce:cf:13:7f:f9:93:
                    93:de:ca:45:c5:59:37:01:5b:8e:cf:b2:87:8f:3b:
                    91:ca:91:51:43:36:90:b9:13:87:18:a5:fd:e9:7f:
                    d8:ca:07:a6:00:2a:46:0b:ca:24:12:0d:f9:f0:8c:
                    a7:95:27:e2:d5:c2:73:18:81:a7:e8:5b:f9:bc:9b:
                    76:b6:ee:a6:16:52:f7:c9:1e:0e:16:20:23:62:b8:
                    25:0e:6b:46:a4:4c:f8:00:f4:2e:09:36:cb:91:33:
                    fa:e1:92:9b:f1:63:28:1e:f0:d5:37:f6:65:cf:db:
                    70:8e:96:c4:e9:65:34:33:b1:c0:3f:01:78:fb:86:
                    33:da:25:c3:49:93:f7:2b:ea:90:b2:1e:f6:4e:07:
                    ec:5b:33:f7:be:18:73:b7:de:80:9b:6d:48:50:21:
                    eb:db:a2:fe:6f:0f:79:85:b5:db:bc:50:83:bf:0a:
                    e9:09:ed:d9:84:16:d6:e5:d4:31:b1:74:4f:8b:8d:
                    21:7f:44:b7:d2:cb:ba:81:30:41:5e:8a:f3:7f:ea:
                    fc:5d:11:c0:37:78:45:74:f5:d0:0c:4e:2f:2a:ad:
                    39:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6C:18:27:43:CA:5C:92:BA:7E:A0:38:71:77:7D:CC:68:90:26:C9
            X509v3 Authority Key Identifier:
                keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/_GwYJ0PKXJK6fqA4cXd9zGiQJsk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:1a28:1106::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:d1:27:79:58:9a:0c:fa:a8:f7:79:7e:4e:a2:ff:d7:14:c9:
         29:5e:18:a2:6e:11:cf:69:2a:eb:d8:05:55:c4:33:ff:9d:7a:
         07:98:da:9b:4d:91:3f:8a:f5:99:b7:25:6c:09:53:22:af:71:
         6f:d6:a6:ff:04:14:44:db:00:07:38:d1:18:9e:ae:e5:0d:64:
         af:99:ae:3e:f1:e7:68:ea:3b:d0:9a:c7:7a:c9:05:a3:4c:b0:
         8b:ba:3d:ee:5a:81:9a:58:d3:79:ed:17:f3:e7:09:8b:7e:07:
         5a:13:69:33:81:a3:99:84:26:9b:3e:aa:37:2b:11:21:9d:db:
         07:32:a9:cf:1a:b4:3b:84:f2:9d:ad:80:b1:69:eb:dc:2c:65:
         a6:72:b9:36:22:41:f9:ce:04:ea:9f:14:d1:7a:a9:a9:aa:48:
         f1:74:1f:10:ed:6a:39:10:c4:dc:48:8b:1d:42:e6:84:4c:f3:
         73:3d:65:69:8f:a7:6c:26:a3:dc:ff:47:d3:0a:47:41:dc:c3:
         32:f3:7c:54:49:f0:47:8c:31:7f:5f:ea:f3:3e:bd:b2:4a:22:
         58:9b:e5:5f:22:15:a3:67:a2:8b:16:79:38:32:8d:97:71:ad:
         52:57:3b:67:a0:f6:65:bc:06:01:ce:fd:2d:bd:b9:40:75:1e:
         6d:cf:81:1b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt4oj/yr2C1MUDSaRQ4mxZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YWFiMTQ0NjEwMGE4ZmNlMDNkZjE5ZDc1NWUwNjMyOWVl
MjQ3MTMwHhcNMjYwMTAxMDgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzZjMTgyNzQzY2E1YzkyYmE3ZWEwMzg3MTc3N2RjYzY4OTAyNmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmZJqnP9dPp78t/PwNoVZAQfD4fR
RLGy3YMeu7TU7HQFj0DruyrOzxN/+ZOT3spFxVk3AVuOz7KHjzuRypFRQzaQuROH
GKX96X/YygemACpGC8okEg358IynlSfi1cJzGIGn6Fv5vJt2tu6mFlL3yR4OFiAj
YrglDmtGpEz4APQuCTbLkTP64ZKb8WMoHvDVN/Zlz9twjpbE6WU0M7HAPwF4+4Yz
2iXDSZP3K+qQsh72TgfsWzP3vhhzt96Am21IUCHr26L+bw95hbXbvFCDvwrpCe3Z
hBbW5dQxsXRPi40hf0S30su6gTBBXorzf+r8XRHAN3hFdPXQDE4vKq05ZwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPxsGCdDylySun6gOHF3fcxokCbJMB8GA1UdIwQY
MBaAFOmqsURhAKj84D3xnXVeBjKe4kcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYt
YTBkYzM1NGY0Y2EzLzEvX0d3WUowUEtYSks2ZnFBNGNYZDl6R2lRSnNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYtYTBkYzM1NGY0Y2Ez
LzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgAaKBEG
MA0GCSqGSIb3DQEBCwUAA4IBAQBg0Sd5WJoM+qj3eX5Oov/XFMkpXhiibhHPaSrr
2AVVxDP/nXoHmNqbTZE/ivWZtyVsCVMir3Fv1qb/BBRE2wAHONEYnq7lDWSvma4+
8edo6jvQmsd6yQWjTLCLuj3uWoGaWNN57Rfz5wmLfgdaE2kzgaOZhCabPqo3KxEh
ndsHMqnPGrQ7hPKdrYCxaevcLGWmcrk2IkH5zgTqnxTReqmpqkjxdB8Q7Wo5EMTc
SIsdQuaETPNzPWVpj6dsJqPc/0fTCkdB3MMy83xUSfBHjDF/X+rzPr2ySiJYm+Vf
IhWjZ6KLFnk4Mo2Xca1SVztnoPZlvAYBzv0tvblAdR5tz4Eb
-----END CERTIFICATE-----
Generated at Wed Jan 21 09:23:30 2026 by rpki-client