This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/GO4Hpvs1oa1csFiAFTHye7kqs-U.roa
File:                     GO4Hpvs1oa1csFiAFTHye7kqs-U.roa (raw, json)
Hash identifier:          NAI9U9zH3zKDgWb0fEOF1SY0G6QwOtcIDwfCTL9dWzs=
Subject key identifier:   18:EE:07:A6:FB:35:A1:AD:5C:B0:58:80:15:31:F2:7B:B9:2A:B3:E5
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       019B7C132981A4C37B378B1F0420FBF61409
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/GO4Hpvs1oa1csFiAFTHye7kqs-U.roa
Signing time:             Fri 02 Jan 2026 00:19:48 +0000
ROA not before:           Fri 02 Jan 2026 00:19:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56989
IP address blocks:        91.109.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:29:81:a4:c3:7b:37:8b:1f:04:20:fb:f6:14:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jan  2 00:19:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=18ee07a6fb35a1ad5cb058801531f27bb92ab3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7e:28:f2:56:27:e2:c7:fa:32:33:ab:fd:e4:
                    6c:f8:38:ed:5a:72:5e:3b:7a:40:3d:d4:63:f1:c0:
                    1e:db:51:1e:bf:0c:ea:5f:a1:5f:c7:d6:7e:25:74:
                    78:e8:d5:a7:86:07:63:8e:da:70:35:d2:27:c5:55:
                    1d:6f:31:bc:bf:ff:af:01:a5:52:be:74:be:18:87:
                    76:65:b5:c9:6b:01:60:8d:4d:08:a7:a2:5d:12:ec:
                    1e:9b:94:e3:04:df:e9:51:16:68:94:eb:2d:53:5a:
                    f5:2d:f9:30:2b:9e:15:f4:fc:14:a4:6c:b9:80:44:
                    29:03:b4:06:61:97:0f:f8:64:f5:64:22:03:43:d2:
                    4f:ea:6a:f7:17:1d:23:47:0d:b1:2d:40:86:af:7d:
                    6d:8b:cb:3d:67:b1:fd:ab:0b:4c:2e:c7:09:03:1b:
                    2b:04:bf:e9:49:b2:89:79:b4:d0:9d:ae:de:b7:81:
                    e0:c1:45:94:b2:e9:7c:30:e9:11:e8:6a:e2:fc:41:
                    1a:46:14:80:96:d6:35:15:6b:10:14:94:6f:d1:c1:
                    f5:dd:5e:96:1f:53:71:9f:a7:9d:79:f4:d4:f6:95:
                    3a:04:0f:a9:d5:4e:16:76:ca:1f:aa:66:bd:86:b1:
                    66:09:23:a1:af:56:a4:ae:ed:a7:9f:91:55:8e:1b:
                    78:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EE:07:A6:FB:35:A1:AD:5C:B0:58:80:15:31:F2:7B:B9:2A:B3:E5
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/GO4Hpvs1oa1csFiAFTHye7kqs-U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.109.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9f:4f:5f:9d:90:98:f6:f6:55:db:25:57:d5:56:0c:3f:92:24:
         ae:4e:69:32:f1:15:fb:4a:d5:fe:63:33:87:5f:ef:01:6f:70:
         15:38:38:4f:c0:be:e4:5b:9f:63:e7:47:33:77:5f:17:fc:e2:
         5c:e0:e5:22:dd:0e:02:ad:d3:da:75:c2:ea:33:5d:22:fa:da:
         8c:11:64:74:ea:27:ae:13:c0:a6:a1:0e:2c:0b:ba:63:4e:31:
         d6:dd:4e:60:0b:0c:fc:2a:b0:40:89:e9:53:f1:e2:bd:bf:a9:
         9d:e3:c6:d7:ec:4f:f5:5b:b1:a5:ca:25:b2:27:d5:22:3f:54:
         a1:7a:cf:43:13:27:a6:c6:37:7a:fe:5e:2c:22:49:88:17:1e:
         09:7d:fd:8e:fa:56:4f:30:8f:6d:46:cd:3b:87:af:60:94:70:
         bb:bf:d5:a6:f5:0e:ea:1c:4b:26:73:4a:e5:fe:40:34:dc:41:
         a2:86:f2:1c:f0:3a:37:52:98:97:ed:90:0c:35:a5:ed:45:79:
         15:a3:f9:9c:3f:7c:00:34:d3:19:3b:00:e8:8b:75:f7:50:01:
         c4:3d:48:ed:37:38:40:89:0b:85:b3:a0:dc:3b:e4:55:45:fc:
         de:b9:c1:04:58:ab:53:71:5f:5b:7b:3a:0d:39:b6:c7:e1:e5:
         e4:0c:57:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:35:33 2026 by rpki-client