This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/GAUiyTIFwXNYaLqpXS7shunphho.roa
File:                     GAUiyTIFwXNYaLqpXS7shunphho.roa (raw, json)
Hash identifier:          SFsb3Fni2JlQZLpt6X2EgEMJ9MLA34f5MeJx3huTFiM=
Subject key identifier:   18:05:22:C9:32:05:C1:73:58:68:BA:A9:5D:2E:EC:86:E9:E9:86:1A
Certificate issuer:       /CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Certificate serial:       019B7CEDD16805B35E256FEC51BD7F11454A
Authority key identifier: D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/GAUiyTIFwXNYaLqpXS7shunphho.roa
Signing time:             Fri 02 Jan 2026 04:18:39 +0000
ROA not before:           Fri 02 Jan 2026 04:18:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34379
IP address blocks:        193.111.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:d1:68:05:b3:5e:25:6f:ec:51:bd:7f:11:45:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
        Validity
            Not Before: Jan  2 04:18:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=180522c93205c1735868baa95d2eec86e9e9861a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b0:17:78:48:2c:f6:9c:ce:a0:69:cb:38:a3:
                    a8:7a:b5:58:48:fa:2e:2a:1b:95:89:d7:0c:ec:26:
                    73:3b:82:8c:cd:fb:0e:19:6e:d4:bc:09:85:dd:2b:
                    a1:3c:14:3b:54:c8:81:17:36:a4:14:3a:fe:89:62:
                    b7:c0:b2:93:07:93:2f:71:7f:f1:15:c7:76:0c:ae:
                    01:96:0e:88:99:34:68:0c:d2:19:87:ba:15:85:07:
                    fc:e5:14:0c:a4:e4:28:47:b1:d7:f1:cb:6d:7c:71:
                    a5:b7:88:0f:fb:53:15:e2:a2:97:d3:3c:28:bb:03:
                    be:5c:d7:b5:37:83:80:18:f4:91:4e:1f:48:11:52:
                    ea:6b:8e:3a:ee:94:cf:06:ff:c8:c1:f8:95:55:f0:
                    0a:36:ca:3f:18:de:b4:1c:06:db:0e:57:d1:b0:6b:
                    2a:9e:26:64:f4:d0:21:c0:60:7f:f1:5f:69:45:ca:
                    39:46:3b:38:55:91:60:8f:f5:d9:3f:a4:fe:21:69:
                    49:08:7c:5c:3c:b6:b6:29:30:6e:ec:d7:12:ec:bd:
                    47:1a:72:8c:58:a6:68:4d:6e:f9:bb:c9:5f:fc:43:
                    b4:db:07:e6:8b:96:29:e0:b5:2e:b1:34:bc:05:57:
                    bb:08:b8:99:cb:40:35:d4:f0:b8:fb:69:45:45:98:
                    b9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:05:22:C9:32:05:C1:73:58:68:BA:A9:5D:2E:EC:86:E9:E9:86:1A
            X509v3 Authority Key Identifier:
                keyid:D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/GAUiyTIFwXNYaLqpXS7shunphho.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.111.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:a9:2d:ad:70:fc:ad:00:ae:ad:99:5f:93:0e:1a:a8:ee:8a:
         22:47:62:53:1b:b9:98:2c:c0:d5:4a:c5:94:3f:1e:d8:fc:d2:
         11:75:d1:45:65:34:53:bc:90:6d:67:9e:08:9f:d4:7f:26:fb:
         08:5d:d6:19:11:8e:e3:2b:71:ad:df:19:e3:58:60:d8:70:4e:
         80:d8:e2:f5:ce:91:cd:66:2e:bf:0b:21:3f:04:5a:58:35:f9:
         4f:88:71:80:9d:8e:7e:d6:6b:9e:f6:8c:67:65:dd:4c:25:5e:
         af:d0:28:98:ba:6d:03:7c:e3:ee:b4:1d:a1:15:9a:37:2a:3b:
         cd:8c:8e:00:a3:b4:e8:59:25:43:8c:7a:d7:71:88:09:92:77:
         b1:86:b1:dd:e7:3e:69:e9:71:6c:3e:93:28:df:ef:11:d8:74:
         c2:4a:41:fb:6f:40:33:a3:d6:1c:56:3d:b7:23:28:08:68:51:
         d6:96:e4:48:0d:b6:4d:96:0c:d2:1b:81:8e:db:15:cf:26:c1:
         f8:3e:53:52:86:bd:03:8e:eb:3b:a3:bd:9b:91:5c:4a:69:d2:
         a5:c6:bb:df:7f:e6:50:a6:ae:0f:a9:ec:2e:b6:a6:42:6b:94:
         02:ec:25:05:07:91:3e:d5:b1:18:57:1e:11:d0:44:d8:e9:bd:
         1a:10:c1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:40:07 2026 by rpki-client