This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/gtTwRDBJR-BbMiRZiF0UkREdrNI.roa
File:                     gtTwRDBJR-BbMiRZiF0UkREdrNI.roa (raw, json)
Hash identifier:          EYI6Dc616oG3PdcronQ8IrDd6TturvsbVQq4J3V4p+w=
Subject key identifier:   82:D4:F0:44:30:49:47:E0:5B:32:24:59:88:5D:14:91:11:1D:AC:D2
Certificate issuer:       /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial:       019B7C7EF434C0D297C9A4202B15CE69FDB8
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/gtTwRDBJR-BbMiRZiF0UkREdrNI.roa
Signing time:             Fri 02 Jan 2026 02:17:33 +0000
ROA not before:           Fri 02 Jan 2026 02:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9009
IP address blocks:        141.98.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7e:f4:34:c0:d2:97:c9:a4:20:2b:15:ce:69:fd:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
        Validity
            Not Before: Jan  2 02:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=82d4f044304947e05b322459885d1491111dacd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:54:88:6a:18:6f:c7:b2:b2:41:a2:48:ee:d2:
                    a0:17:31:5a:34:dd:b9:f0:52:21:f3:63:da:57:e8:
                    cb:cb:39:1e:69:ed:db:f2:76:61:a3:c4:fe:51:52:
                    e6:3c:1a:9f:e7:df:22:c3:2d:0a:51:29:39:10:64:
                    c3:35:95:e8:f4:ca:f7:fb:ad:7a:27:43:31:86:66:
                    b3:0e:48:58:92:11:eb:e6:81:fe:a3:50:12:9f:be:
                    4c:55:bb:c2:62:f1:f7:05:ee:4c:fe:29:e1:f5:d4:
                    cb:56:f8:91:8a:92:f5:f1:4f:77:a8:f5:cf:b6:ea:
                    ea:66:cc:81:9d:9c:29:48:f2:b6:86:bf:83:22:a3:
                    4d:b5:03:6c:c9:32:21:cf:f5:53:73:a2:e8:64:11:
                    d0:b5:3e:47:46:a4:46:da:dd:ec:0d:17:15:94:b2:
                    00:6f:f0:5e:ec:95:b0:ea:c0:0b:f3:c5:5a:ad:83:
                    53:2e:f5:a9:d1:63:27:99:fe:23:22:ea:66:c4:d1:
                    c9:e8:de:16:26:b6:2e:ac:78:c5:dc:ef:67:8f:e9:
                    4b:44:44:fd:78:cf:dd:a2:5f:a3:93:00:25:74:c2:
                    83:ae:03:eb:b5:51:c1:1b:49:e3:30:e7:f7:9b:c9:
                    0b:b2:9a:23:d2:56:7a:e8:6d:ec:d5:02:e7:8a:ee:
                    b7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D4:F0:44:30:49:47:E0:5B:32:24:59:88:5D:14:91:11:1D:AC:D2
            X509v3 Authority Key Identifier:
                keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/gtTwRDBJR-BbMiRZiF0UkREdrNI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:80:c9:c4:11:18:56:3a:3b:29:05:83:fa:63:d9:7b:be:a4:
         25:24:df:17:a3:04:a7:89:01:67:71:50:5a:37:a0:63:21:cb:
         ea:06:7e:d8:27:9f:ee:d7:86:2e:61:e6:c2:59:db:0d:3b:57:
         a9:4a:8d:26:10:cc:4c:1a:c0:12:be:fc:2b:27:f3:5a:7f:9c:
         91:a5:1c:cd:4e:01:2a:86:d2:bc:c9:8e:d2:e2:83:03:55:b7:
         07:e7:46:33:2e:31:3c:87:48:79:19:5d:d8:96:82:52:5d:ed:
         31:c9:71:24:68:e5:23:13:82:9e:36:5a:3b:ae:6d:62:2f:30:
         51:1b:3f:bf:7f:9f:94:12:47:1a:3e:9c:6c:c8:3f:6f:05:d1:
         d6:7a:00:48:a4:38:08:07:57:ea:fe:ef:e5:14:e9:ea:00:49:
         6a:c7:a0:75:60:f4:0c:ce:3f:4e:20:6c:ec:a1:4c:07:20:25:
         62:44:52:c0:0b:ba:92:4f:5a:e1:ec:84:64:58:43:29:aa:eb:
         9b:af:f4:a0:ad:e7:b3:20:0f:f6:a9:d5:d6:02:69:c6:b6:fd:
         43:21:cf:92:49:1f:37:b5:e0:3d:d2:7e:bc:25:82:a1:6f:90:
         01:a6:c9:05:d4:7b:2a:36:67:79:85:37:e1:3b:b0:f5:3e:d0:
         29:c9:8a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 10:02:54 2026 by rpki-client