This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/Glx5RcagYbxlQ_PlKvDqvMcqa2c.roa
File:                     Glx5RcagYbxlQ_PlKvDqvMcqa2c.roa (raw, json)
Hash identifier:          WHKedsLPSn5sRQ/YnrYA97FUz2TYFtRFerhfVcN7fi0=
Subject key identifier:   1A:5C:79:45:C6:A0:61:BC:65:43:F3:E5:2A:F0:EA:BC:C7:2A:6B:67
Certificate issuer:       /CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Certificate serial:       019B78A229B2E7B390991A7DE484C2FAEB8A
Authority key identifier: 1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/Glx5RcagYbxlQ_PlKvDqvMcqa2c.roa
Signing time:             Thu 01 Jan 2026 08:17:31 +0000
ROA not before:           Thu 01 Jan 2026 08:17:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214143
IP address blocks:        185.237.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 17:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:29:b2:e7:b3:90:99:1a:7d:e4:84:c2:fa:eb:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
        Validity
            Not Before: Jan  1 08:17:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1a5c7945c6a061bc6543f3e52af0eabcc72a6b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:7f:f4:4e:0b:d0:d2:80:d9:4c:2b:ce:bf:
                    e5:f4:82:9d:ec:9e:ac:03:b9:b3:e3:ba:f7:40:ae:
                    55:07:36:2e:e3:b7:ff:b6:79:81:82:b5:d1:d1:43:
                    63:2f:79:e2:27:30:8e:4f:52:ab:e1:02:7b:7c:bc:
                    49:2a:bb:21:8f:da:0d:52:f6:cc:ce:a1:a1:22:b2:
                    05:7c:76:fe:61:d0:4e:ca:e0:71:71:76:b8:44:16:
                    d3:91:29:bb:4f:36:e4:50:a8:ab:94:42:d5:a4:79:
                    a1:7e:d7:15:0e:57:53:f5:46:89:09:52:01:71:99:
                    ed:1f:b9:a9:e9:a0:47:42:fe:43:8e:3d:3f:2f:e4:
                    74:4a:c2:72:2d:18:9a:ab:57:c2:58:4e:a3:73:55:
                    e1:3a:d6:cd:34:0c:e7:54:c0:85:c3:f1:3e:a0:09:
                    1a:04:22:6c:6a:f3:1f:1c:92:80:82:34:3b:3f:82:
                    8d:7e:8b:63:7f:bd:12:9e:18:54:3a:9e:16:e1:3b:
                    b6:02:5c:81:9e:d0:dd:0e:f3:38:d3:8e:97:be:84:
                    67:cb:32:9f:28:71:ac:45:3d:15:65:8f:e9:97:19:
                    ce:3d:24:17:99:ed:80:3f:1d:11:f4:00:5d:ef:f0:
                    23:23:f3:77:89:7e:60:8f:fa:9b:43:f7:33:fb:b5:
                    55:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5C:79:45:C6:A0:61:BC:65:43:F3:E5:2A:F0:EA:BC:C7:2A:6B:67
            X509v3 Authority Key Identifier:
                keyid:1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/Glx5RcagYbxlQ_PlKvDqvMcqa2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.237.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:06:d5:6d:5b:4d:28:e1:a1:f5:73:e2:02:6f:c7:e1:3b:49:
         5d:29:a5:4e:9b:be:a0:62:de:2e:f2:c3:f4:bd:c8:77:ef:80:
         55:e2:56:9f:26:4b:47:c1:d8:30:8a:54:9b:42:8b:5c:45:a8:
         70:af:e8:94:08:d6:85:97:6e:a8:be:b1:b4:31:54:8d:66:06:
         f9:39:94:31:6e:66:33:2a:a5:bf:b5:d9:8f:10:4e:0b:99:75:
         88:61:7e:cf:61:16:2a:47:40:82:5a:12:4c:76:f1:64:8e:74:
         2c:69:af:35:8c:c4:b4:6e:df:d0:57:ee:a8:7e:7c:21:55:b3:
         34:0d:bd:ec:82:6b:3f:63:a4:88:88:3a:21:39:a0:68:11:19:
         6d:ea:16:7a:ba:aa:f2:47:21:dc:3e:08:bc:b3:94:2f:89:51:
         e0:53:35:b8:92:45:28:bc:b4:f2:af:20:58:c4:51:18:38:64:
         d5:e5:6d:d8:96:83:3a:28:7d:f4:58:63:f4:2d:54:b4:4d:2f:
         33:39:0f:75:39:3b:93:28:ff:9b:09:1f:c6:d8:81:dc:ef:b8:
         cb:ab:40:53:92:6e:e1:d1:cf:f4:84:f7:e2:59:1a:56:7d:e4:
         65:f9:cb:e0:b1:23:f5:f8:1b:9e:c3:61:cc:4c:2e:2f:be:96:
         5d:32:eb:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4oimy57OQmRp95ITC+uuKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNGQ4MDM3M2UzZTM0ZDAwYTg1Yjg0MTI4ZDQwNTM5OWJj
ZjhhNDUwHhcNMjYwMTAxMDgxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTVjNzk0NWM2YTA2MWJjNjU0M2YzZTUyYWYwZWFiY2M3MmE2YjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC1/9E4L0NKA2Uwrzr/l9IKd7J6s
A7mz47r3QK5VBzYu47f/tnmBgrXR0UNjL3niJzCOT1Kr4QJ7fLxJKrshj9oNUvbM
zqGhIrIFfHb+YdBOyuBxcXa4RBbTkSm7TzbkUKirlELVpHmhftcVDldT9UaJCVIB
cZntH7mp6aBHQv5Djj0/L+R0SsJyLRiaq1fCWE6jc1XhOtbNNAznVMCFw/E+oAka
BCJsavMfHJKAgjQ7P4KNfotjf70SnhhUOp4W4Tu2AlyBntDdDvM4046XvoRnyzKf
KHGsRT0VZY/plxnOPSQXme2APx0R9ABd7/AjI/N3iX5gj/qbQ/cz+7VVUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBpceUXGoGG8ZUPz5Srw6rzHKmtnMB8GA1UdIwQY
MBaAFBtNgDc+PjTQCoW4QSjUBTmbz4pFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzAyQU56NC1OTkFLaGJoQktOUUZPWnZQaWtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yNTc0ZDItY2IwYy00YjJhLWJlODMt
OGUwMGJkYTNiMjQ1LzEvR2x4NVJjYWdZYnhsUV9QbEt2RHF2TWNxYTJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yNTc0ZDItY2IwYy00YjJhLWJlODMtOGUwMGJkYTNiMjQ1
LzEvRzAyQU56NC1OTkFLaGJoQktOUUZPWnZQaWtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue1dMA0G
CSqGSIb3DQEBCwUAA4IBAQBUBtVtW00o4aH1c+ICb8fhO0ldKaVOm76gYt4u8sP0
vch374BV4lafJktHwdgwilSbQotcRahwr+iUCNaFl26ovrG0MVSNZgb5OZQxbmYz
KqW/tdmPEE4LmXWIYX7PYRYqR0CCWhJMdvFkjnQsaa81jMS0bt/QV+6ofnwhVbM0
Db3sgms/Y6SIiDohOaBoERlt6hZ6uqryRyHcPgi8s5QviVHgUzW4kkUovLTyryBY
xFEYOGTV5W3YloM6KH30WGP0LVS0TS8zOQ91OTuTKP+bCR/G2IHc77jLq0BTkm7h
0c/0hPfiWRpWfeRl+cvgsSP1+Buew2HMTC4vvpZdMuvH
-----END CERTIFICATE-----
Generated at Tue Jan 20 00:56:02 2026 by rpki-client