This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/GPrNUgOp-yFfntRAITK46bjxYx8.roa
File:                     GPrNUgOp-yFfntRAITK46bjxYx8.roa (raw, json)
Hash identifier:          tp3Wm0E6OeEViiyRYXktB8FqE/SyfwJ6JfvXOHg6tpE=
Subject key identifier:   18:FA:CD:52:03:A9:FB:21:5F:9E:D4:40:21:32:B8:E9:B8:F1:63:1F
Certificate issuer:       /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial:       019B783527BCEB4B1391D2094A62DC43FA4C
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/GPrNUgOp-yFfntRAITK46bjxYx8.roa
Signing time:             Thu 01 Jan 2026 06:18:28 +0000
ROA not before:           Thu 01 Jan 2026 06:18:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     53587
IP address blocks:        116.206.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 19:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:27:bc:eb:4b:13:91:d2:09:4a:62:dc:43:fa:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
        Validity
            Not Before: Jan  1 06:18:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=18facd5203a9fb215f9ed4402132b8e9b8f1631f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:ae:8e:84:52:e8:a5:14:bc:04:de:d1:a3:1e:
                    d4:3e:ee:c9:f6:d7:7e:80:df:cc:86:ab:e6:6d:a4:
                    c9:50:8a:82:f4:7a:b3:09:06:90:5b:db:aa:c1:44:
                    ad:d9:80:27:ea:27:01:c8:b6:c3:8c:b6:5f:59:c3:
                    07:0b:4c:10:87:7c:b9:94:f1:ac:ba:fa:45:ab:78:
                    59:be:1e:5f:d0:20:b4:26:5b:cb:5b:db:b0:42:76:
                    31:73:02:4f:ea:be:76:17:ea:56:cc:8f:56:f4:70:
                    d7:0e:8b:8a:2c:1e:d5:48:bf:8a:35:19:06:9d:17:
                    08:f5:4c:24:59:fe:23:ec:73:f6:04:0e:30:c6:32:
                    cc:c5:97:b6:cd:53:80:43:18:4f:58:c0:57:85:af:
                    33:f5:3f:84:86:54:63:87:0f:cc:33:ef:8a:8e:c9:
                    b1:17:de:8d:6b:96:d4:81:bd:9e:4a:94:e0:ea:af:
                    3f:09:ac:cc:f1:3b:a7:aa:bd:8f:72:e7:4a:04:21:
                    87:9d:27:1e:1e:95:17:59:4b:e7:04:db:fd:d4:07:
                    44:6e:bd:ed:73:fa:5d:ce:7d:3b:01:a1:5c:50:dc:
                    80:b7:9a:44:fa:65:fe:72:4e:f6:c0:7f:f2:04:35:
                    d6:a4:36:b5:72:8b:8c:19:89:44:58:0e:15:2e:05:
                    af:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FA:CD:52:03:A9:FB:21:5F:9E:D4:40:21:32:B8:E9:B8:F1:63:1F
            X509v3 Authority Key Identifier:
                keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/GPrNUgOp-yFfntRAITK46bjxYx8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:da:02:3d:f9:a3:61:52:87:9a:6d:70:48:ea:d6:43:4e:02:
         fd:e7:a7:24:d3:da:4b:68:34:0d:f9:5c:be:59:01:05:bb:7d:
         c6:39:4d:e4:29:d5:06:8b:e8:90:e6:1b:fa:1a:ba:59:2f:2f:
         a9:80:52:e9:24:c6:47:86:29:a3:7b:ea:79:a5:e5:26:b5:37:
         14:0d:e4:8b:b0:75:f5:05:43:72:2f:10:5b:bb:97:d6:63:44:
         bc:db:f3:d0:50:17:98:6a:e5:41:94:12:49:2d:f5:c6:42:46:
         4c:96:bc:c4:72:d1:ff:70:7d:83:fc:51:3d:39:f4:03:ec:7d:
         fa:48:54:81:87:2e:ac:93:d9:1e:af:92:07:57:a4:20:55:5d:
         e5:f3:98:53:a5:76:e5:79:ec:1d:22:3d:59:5e:19:bb:8d:be:
         5e:4d:1b:cc:e9:5e:6a:72:db:0b:a8:45:d0:db:c8:ee:16:13:
         6b:c1:14:ae:4b:7e:a7:8b:c9:13:8e:f0:12:a9:7c:b5:28:09:
         d6:db:b2:ff:03:86:74:79:d9:33:9b:35:b7:d0:d3:b4:f2:b4:
         02:33:62:7a:f4:58:bd:0f:91:df:9e:15:b8:67:77:72:a3:78:
         c8:03:60:01:5f:f8:d0:14:91:1b:ee:16:85:00:6f:02:29:2b:
         d4:3c:aa:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 05:37:53 2026 by rpki-client