This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/gUQyWeEpQgGbTNbqg5fkirZYaTk.roa
File:                     gUQyWeEpQgGbTNbqg5fkirZYaTk.roa (raw, json)
Hash identifier:          Uag44MrYWD7AlqlTHqDCPjaMLMN6/SqLUtWcxqj+gh0=
Subject key identifier:   81:44:32:59:E1:29:42:01:9B:4C:D6:EA:83:97:E4:8A:B6:58:69:39
Certificate issuer:       /CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Certificate serial:       019B7C7EF8954A2820349476B57501D54AE8
Authority key identifier: 25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/gUQyWeEpQgGbTNbqg5fkirZYaTk.roa
Signing time:             Fri 02 Jan 2026 02:17:34 +0000
ROA not before:           Fri 02 Jan 2026 02:17:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202656
IP address blocks:        91.206.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 17:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7e:f8:95:4a:28:20:34:94:76:b5:75:01:d5:4a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
        Validity
            Not Before: Jan  2 02:17:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=81443259e12942019b4cd6ea8397e48ab6586939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:d8:9b:99:a6:95:1c:96:68:c2:ca:2b:21:
                    0f:08:cd:18:0c:08:4d:fa:ce:c4:87:5e:49:29:fd:
                    c0:9d:1c:08:7e:75:4e:55:46:ef:1b:73:4e:1e:3a:
                    ba:91:4f:5f:48:6f:a3:59:f3:f7:22:65:1b:c3:b1:
                    25:30:75:1c:3e:11:b2:8f:55:b6:7b:5e:07:db:7c:
                    a7:8e:bb:09:d5:7c:1c:c5:2a:12:ef:99:63:09:fc:
                    3a:11:78:19:9d:8c:b3:e5:8d:e6:29:74:8e:b0:68:
                    3d:7d:2b:b5:41:c3:4c:d0:fd:ed:27:2f:9c:16:f2:
                    99:9d:cf:c9:e5:10:17:61:7f:27:8c:91:48:0f:c1:
                    33:c0:63:4b:3c:d1:b7:69:c2:66:ff:20:91:b2:ff:
                    0d:51:af:fb:54:fb:bb:c1:4c:fd:d4:5c:af:83:98:
                    69:6c:1f:62:7b:2b:9d:0e:70:d5:80:7e:e4:cd:b0:
                    02:e9:49:c2:b5:ae:2c:34:11:c0:ec:6e:80:f6:15:
                    f2:e3:4e:c5:47:e3:0b:56:17:3b:22:b2:2c:ac:70:
                    87:12:c2:42:32:17:26:25:3a:5a:12:23:ec:ae:c4:
                    38:c7:80:7d:72:e0:59:67:51:ab:60:60:52:37:a4:
                    d5:55:b1:f7:82:99:73:59:39:72:7b:53:3f:a8:a1:
                    48:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:44:32:59:E1:29:42:01:9B:4C:D6:EA:83:97:E4:8A:B6:58:69:39
            X509v3 Authority Key Identifier:
                keyid:25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/gUQyWeEpQgGbTNbqg5fkirZYaTk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.206.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:09:a9:ad:be:82:1f:9c:76:0f:81:c1:36:6e:dd:80:78:1a:
         4b:8d:5d:33:90:df:d8:df:32:a3:e1:f9:87:92:5b:64:f5:52:
         c4:cf:a5:ea:5b:20:7c:82:63:94:a8:b0:ff:a5:e4:5f:6c:2e:
         0d:22:c4:b9:b5:f5:d2:1d:75:8d:8a:ca:b6:46:65:9d:6c:ec:
         55:dc:09:fb:dc:3a:69:c9:10:ae:68:c3:72:77:4d:02:b1:f1:
         e7:b2:0a:b9:a2:99:6c:d6:b3:45:69:45:46:5b:0b:28:8b:b4:
         d3:4d:75:6a:31:d2:da:67:9c:76:08:6b:11:af:06:63:f1:51:
         58:a0:83:33:73:5f:8e:bf:d7:38:63:ca:22:90:e9:3d:4a:b8:
         34:0f:fd:68:de:34:ce:3c:90:48:ee:7d:03:64:6d:64:f6:06:
         9d:1d:da:d6:16:a7:5b:4a:56:7d:89:3b:37:df:21:01:e5:9d:
         7f:11:e3:c2:fb:87:21:a6:ce:84:51:91:f0:0c:ec:32:e4:fe:
         8c:28:51:4f:a9:80:36:8d:5b:6e:56:e1:ea:bd:47:b0:c1:b0:
         f9:ec:9e:a9:42:8e:19:38:17:2f:84:97:03:c5:bd:ed:6a:df:
         1c:60:a4:62:98:ef:8e:7b:a6:8e:07:13:67:db:f4:b9:87:79:
         08:44:cc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:22:10 2026 by rpki-client