This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/gcp8JVoaSaFBYMR0Spw7tSBPycE.roa
File:                     gcp8JVoaSaFBYMR0Spw7tSBPycE.roa (raw, json)
Hash identifier:          EXlX7JSGlYTO8jv6fQCuHBvUsxakUkqSBgk4IVvHb5I=
Subject key identifier:   81:CA:7C:25:5A:1A:49:A1:41:60:C4:74:4A:9C:3B:B5:20:4F:C9:C1
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       019B7CEDEDBE020C51C5A26D63B7E8004A06
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/gcp8JVoaSaFBYMR0Spw7tSBPycE.roa
Signing time:             Fri 02 Jan 2026 04:18:46 +0000
ROA not before:           Fri 02 Jan 2026 04:18:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212609
IP address blocks:        176.57.48.0/24 maxlen: 24
                          176.57.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:ed:be:02:0c:51:c5:a2:6d:63:b7:e8:00:4a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan  2 04:18:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=81ca7c255a1a49a14160c4744a9c3bb5204fc9c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:03:68:3c:39:c2:d0:bd:3f:03:a8:d1:65:c0:
                    a3:c0:ce:df:d5:7b:75:76:f1:d9:18:5d:e8:96:27:
                    42:3d:c9:c4:fb:16:4c:94:51:c1:cf:25:8c:d2:68:
                    fc:0a:47:5d:9a:14:22:d8:8d:8e:07:f3:b7:35:10:
                    13:6d:84:c9:c7:e2:f8:82:52:d5:40:24:f4:90:d0:
                    ef:92:eb:db:b9:74:28:92:fa:bb:4e:ec:e6:a5:71:
                    1c:cb:3e:c0:ba:00:85:31:50:fb:aa:55:f1:00:dc:
                    f8:10:ed:be:60:cc:91:bc:d6:b0:22:be:5f:b8:40:
                    36:48:d3:c9:20:73:53:50:b7:58:52:5f:d6:ff:37:
                    98:17:8f:48:ed:e6:cd:01:2a:4b:2d:c4:e4:db:45:
                    00:e8:30:30:10:34:c8:b9:3c:ba:d0:95:79:3c:98:
                    8a:bc:6d:be:3a:b6:b7:78:2d:54:08:18:2f:c1:d9:
                    22:e4:f0:9b:3d:2d:ea:80:e4:d0:a9:38:9f:e5:db:
                    96:54:a9:46:8e:f8:7f:ee:a4:a7:bc:71:9d:a4:f2:
                    ef:f5:98:d7:75:8c:b2:57:73:72:49:c6:56:cb:0f:
                    39:3e:16:87:69:0a:f8:66:d3:22:b0:fa:de:5b:40:
                    af:61:e3:5c:5c:35:59:43:09:b8:56:39:74:87:9b:
                    a4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CA:7C:25:5A:1A:49:A1:41:60:C4:74:4A:9C:3B:B5:20:4F:C9:C1
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/gcp8JVoaSaFBYMR0Spw7tSBPycE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.57.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:7d:d8:30:a7:92:45:9c:b3:60:02:a5:c7:78:12:68:d6:85:
         43:6a:ab:a8:23:c8:2c:c7:a1:b9:df:1d:ef:a4:df:66:8a:04:
         2e:8e:13:ac:4e:c7:5d:c8:f3:ec:c7:30:ee:df:62:45:db:9d:
         74:13:3b:b7:8a:d2:94:75:56:ff:a6:b3:19:3e:b7:d7:a0:7e:
         90:34:ab:ae:21:19:c2:b8:27:67:ca:e0:a6:53:f5:cd:1a:48:
         d0:89:8b:95:f9:0b:75:68:50:dc:f6:74:44:35:3e:80:5a:0c:
         e3:9b:88:67:5d:fd:51:5b:fd:e8:44:03:65:3b:d6:70:41:8f:
         fc:db:78:1c:0d:7b:29:36:f6:bf:99:90:ce:85:09:b9:7a:be:
         ad:e9:bd:18:59:59:0d:0e:71:72:dd:a7:c7:08:dd:8f:07:de:
         20:56:50:75:d8:88:05:38:74:1f:05:f4:d9:01:87:8a:4f:25:
         67:6b:17:67:8a:e0:70:cb:e0:9a:6f:05:b7:35:54:7f:60:75:
         1a:07:95:1b:9f:02:bb:e0:37:85:20:59:1a:c4:5a:46:b0:1d:
         57:94:7b:e4:f5:64:24:78:7c:24:81:20:16:c6:43:98:ab:d1:
         87:f3:ec:58:e5:19:c9:56:12:12:51:82:38:11:ef:16:ac:9b:
         c9:94:b7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 17:57:27 2026 by rpki-client