This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/GVZv2oi_g9ML6Vffwo3Z-L0pcGI.roa
File:                     GVZv2oi_g9ML6Vffwo3Z-L0pcGI.roa (raw, json)
Hash identifier:          NNStdhcPHaUpwAIwLb3EKr9AAN0bNFO1ZK0PdF60xzc=
Subject key identifier:   19:56:6F:DA:88:BF:83:D3:0B:E9:57:DF:C2:8D:D9:F8:BD:29:70:62
Certificate issuer:       /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial:       019C57DE00AC4F545932A0A95BC165B450CA
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/GVZv2oi_g9ML6Vffwo3Z-L0pcGI.roa
Signing time:             Fri 13 Feb 2026 16:38:12 +0000
ROA not before:           Fri 13 Feb 2026 16:38:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        103.69.226.0/24 maxlen: 24
                          185.191.20.0/24 maxlen: 24
                          185.191.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 10:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:57:de:00:ac:4f:54:59:32:a0:a9:5b:c1:65:b4:50:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
        Validity
            Not Before: Feb 13 16:38:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=19566fda88bf83d30be957dfc28dd9f8bd297062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:99:97:b5:67:97:c8:7a:5c:59:b3:65:79:b8:
                    a6:4a:ed:45:c5:e3:aa:83:e8:61:16:36:fa:ec:fd:
                    8a:4c:98:cb:be:c3:f4:38:13:e1:5a:a5:70:9b:eb:
                    5e:3b:0e:c3:ad:a6:0b:19:2e:56:eb:58:9d:7d:d4:
                    f3:c4:92:e4:9d:3b:4a:a9:73:64:9c:01:18:c9:e8:
                    8c:d2:ed:60:3b:c5:3c:85:44:d8:3a:40:0a:4f:4c:
                    a9:65:a7:18:9d:01:b8:ab:9c:5c:68:7d:17:f0:96:
                    6b:d8:46:03:dc:24:ba:d7:7d:97:0e:a4:84:0d:81:
                    a0:c7:0e:41:4b:47:35:81:24:b3:69:26:82:f7:06:
                    7d:8c:bd:25:2d:16:a6:5f:92:9a:70:b4:03:28:eb:
                    67:5a:86:fb:52:7d:29:8b:ee:4c:0e:f8:55:c3:9a:
                    63:b1:cb:a9:4d:ec:eb:e6:b4:17:5d:5a:7d:ca:32:
                    bf:49:40:bb:cf:a6:95:ad:bd:10:bf:90:27:40:23:
                    df:26:34:cc:e2:29:4a:c7:32:c0:80:82:33:a8:1f:
                    a0:37:37:7a:b3:af:94:10:30:2d:f0:3d:54:24:e3:
                    76:85:3e:ec:9c:1a:bc:84:28:15:9e:50:51:64:e0:
                    7c:86:d9:c3:8a:9b:dd:b5:6a:8f:86:a0:0d:67:f4:
                    b7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:56:6F:DA:88:BF:83:D3:0B:E9:57:DF:C2:8D:D9:F8:BD:29:70:62
            X509v3 Authority Key Identifier:
                keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/GVZv2oi_g9ML6Vffwo3Z-L0pcGI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.226.0/24
                  185.191.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:e1:78:c6:fe:a1:ec:05:ac:df:8c:3b:0c:a1:f4:31:26:83:
         17:30:c4:a9:ee:0c:34:6a:b8:89:8a:68:55:fb:38:cb:7a:37:
         9c:65:90:0e:81:6e:63:e7:b2:80:c5:cd:56:66:79:b0:be:16:
         6e:22:8a:e8:de:dd:49:1a:0c:53:14:13:12:f5:9d:8d:eb:aa:
         fc:c1:c1:98:8a:54:ab:d0:5b:86:76:7a:e8:a9:9d:0a:76:76:
         35:57:31:c8:21:87:e1:a7:a3:61:35:ab:a5:d3:91:8a:b4:10:
         42:f9:be:62:56:d3:e5:15:0d:66:7f:cf:69:4c:41:20:89:b9:
         1f:3e:a0:38:93:2b:25:98:32:b2:d1:2c:55:cd:49:55:4a:9d:
         32:2e:03:08:19:cc:43:5a:0c:0e:de:34:bc:f0:1f:e9:3a:e2:
         5a:ed:8d:fa:d0:6c:d6:20:1d:a8:14:91:0b:7b:ce:28:22:ba:
         0e:d9:75:60:08:8b:5c:e2:b3:e3:12:29:f4:a3:67:a8:80:78:
         36:aa:73:2e:e2:73:85:fa:7e:e3:f0:10:19:20:d1:d3:33:7c:
         1f:3d:74:7d:5b:84:26:d8:e6:15:1b:d4:e9:de:7e:c5:77:16:
         eb:fb:1f:6d:93:18:79:97:75:f8:54:e6:fb:7b:ea:79:07:02:
         86:bd:f4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:12 2026 by rpki-client