This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/GREeqZaODQe_pjDOkl9K06yc2fM.roa
File:                     GREeqZaODQe_pjDOkl9K06yc2fM.roa (raw, json)
Hash identifier:          9+xjCnaLjGsg7N2WRsPTLMdY0ESrGSWfOEeNfY4jOkE=
Subject key identifier:   19:11:1E:A9:96:8E:0D:07:BF:A6:30:CE:92:5F:4A:D3:AC:9C:D9:F3
Certificate issuer:       /CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Certificate serial:       019B7D5C0098FA1F24E9C5B9B5ACAB5F600F
Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/GREeqZaODQe_pjDOkl9K06yc2fM.roa
Signing time:             Fri 02 Jan 2026 06:19:00 +0000
ROA not before:           Fri 02 Jan 2026 06:19:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     396982
IP address blocks:        5.198.136.0/24 maxlen: 24
                          5.198.140.0/24 maxlen: 24
                          5.198.142.0/24 maxlen: 24
                          5.198.143.0/24 maxlen: 24
                          188.92.136.0/24 maxlen: 24
                          188.92.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 21:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:00:98:fa:1f:24:e9:c5:b9:b5:ac:ab:5f:60:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f
        Validity
            Not Before: Jan  2 06:19:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=19111ea9968e0d07bfa630ce925f4ad3ac9cd9f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d2:25:c7:f5:cf:89:32:57:95:5d:b7:8b:c4:
                    c8:08:de:d7:e6:d6:cb:49:d9:69:e7:22:ed:0b:c8:
                    5f:0e:de:c2:6a:94:da:e7:bc:4c:cb:f5:b4:64:e8:
                    6d:a9:da:87:b8:83:69:04:c0:df:a1:3f:28:86:e1:
                    17:51:7b:55:4d:85:dc:8b:b2:cd:da:b8:42:af:7b:
                    8d:33:c2:10:2f:b9:af:03:99:8b:2d:a9:f3:40:51:
                    fb:ff:11:8a:2b:86:0a:5f:04:ac:90:88:64:77:e2:
                    08:8f:b3:e6:5b:b7:cb:b9:f7:79:ca:28:1c:a2:d3:
                    8e:d8:16:f2:25:e0:13:f3:5f:49:a5:fa:33:e2:3d:
                    f2:0b:ff:f1:4b:73:72:b9:ee:d0:f5:4e:3d:c3:7e:
                    99:ff:dc:90:91:0a:43:df:7c:05:e4:3d:39:60:7a:
                    3c:a3:f9:be:cd:b5:22:d1:a1:8a:c3:1c:4f:4b:b6:
                    35:e7:85:fa:26:53:b4:ae:ab:fe:5f:05:dc:cd:8f:
                    b3:1e:37:d1:f2:64:80:f7:f8:85:1b:48:5e:8d:59:
                    c2:d6:28:7d:40:46:56:91:3b:ab:eb:79:12:71:3c:
                    65:26:6a:65:ca:4a:86:b5:e4:03:b6:49:5f:a0:9c:
                    3e:65:1c:ca:7a:d3:a5:44:73:dd:dc:92:5b:ff:dc:
                    c1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:11:1E:A9:96:8E:0D:07:BF:A6:30:CE:92:5F:4A:D3:AC:9C:D9:F3
            X509v3 Authority Key Identifier:
                keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/GREeqZaODQe_pjDOkl9K06yc2fM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.198.136.0/24
                  5.198.140.0/24
                  5.198.142.0/23
                  188.92.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:6d:48:0d:c2:79:96:bb:54:76:a2:39:dd:cc:ed:88:90:e1:
         0f:70:5f:92:16:fd:02:20:04:fa:d2:6f:82:98:3d:13:94:97:
         6f:aa:9c:57:a9:f2:3b:c3:69:90:05:a5:bc:43:7b:d6:d2:e2:
         75:ad:e3:85:3a:ba:01:27:6e:d2:ad:f5:79:38:e9:c2:3c:c0:
         9a:9c:c6:57:0f:5b:a7:23:3e:14:7a:17:16:8d:59:03:d9:fd:
         3c:9b:1a:61:63:bf:25:0f:9f:99:12:5f:c2:e3:a2:2e:99:a7:
         46:0e:b9:e2:95:4e:c8:9a:c3:ba:31:39:30:8a:b6:5c:a9:5e:
         95:4f:ac:36:32:85:44:5f:3a:79:00:38:93:f5:2d:9d:8b:af:
         f1:ba:44:9d:21:31:d4:8b:d1:b7:49:ea:ba:d1:52:a4:47:2d:
         85:39:ec:4d:da:ee:c0:34:9b:2d:87:8f:4e:f9:51:07:74:85:
         2c:a4:de:82:5d:06:70:08:04:06:41:11:54:89:a6:58:c6:c8:
         27:c9:0c:1f:8e:6f:be:b8:27:b2:90:6c:b6:23:a4:bc:f8:c0:
         b1:c0:bc:f1:e7:b5:13:14:56:b5:59:b0:a4:10:44:bd:1f:60:
         6b:a6:2b:d3:db:07:4b:32:8f:c8:6c:78:05:50:85:c2:40:12:
         aa:cf:0f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 06:24:37 2026 by rpki-client