This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/GJv2c95zewqGYYNIQJziJZtnsNM.roa
File:                     GJv2c95zewqGYYNIQJziJZtnsNM.roa (raw, json)
Hash identifier:          Mp+zg2LDO9MydwbN7xl835TAh4mfHcni/EzAt55706E=
Subject key identifier:   18:9B:F6:73:DE:73:7B:0A:86:61:83:48:40:9C:E2:25:9B:67:B0:D3
Certificate issuer:       /CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Certificate serial:       019B7CEE2608B765FD7210C8A8BE2784D8F7
Authority key identifier: 7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/GJv2c95zewqGYYNIQJziJZtnsNM.roa
Signing time:             Fri 02 Jan 2026 04:19:00 +0000
ROA not before:           Fri 02 Jan 2026 04:19:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49099
IP address blocks:        45.156.200.0/22 maxlen: 22
                          45.156.200.0/23 maxlen: 23
                          45.156.200.0/24 maxlen: 24
                          45.156.201.0/24 maxlen: 24
                          45.156.202.0/23 maxlen: 23
                          45.156.202.0/24 maxlen: 24
                          45.156.203.0/24 maxlen: 24
                          109.94.166.0/23 maxlen: 23
                          109.94.166.0/24 maxlen: 24
                          109.94.167.0/24 maxlen: 24
                          193.34.244.0/23 maxlen: 23
                          193.34.244.0/24 maxlen: 24
                          193.34.245.0/24 maxlen: 24
                          193.34.246.0/24 maxlen: 24
                          193.34.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:26:08:b7:65:fd:72:10:c8:a8:be:27:84:d8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
        Validity
            Not Before: Jan  2 04:19:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=189bf673de737b0a86618348409ce2259b67b0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ab:72:1b:7e:46:52:e8:80:3f:c8:f7:26:e1:
                    79:bf:f5:87:95:65:9f:3a:0f:bc:fa:fe:2d:1c:ba:
                    1d:f5:b2:81:69:3c:1d:36:04:a5:53:6e:6c:8f:85:
                    2a:9b:2f:2e:c2:25:df:d5:e9:b0:e7:cd:0b:7c:16:
                    e7:75:76:84:83:09:0e:b6:5b:df:1d:90:9d:e1:4f:
                    de:52:5b:ec:e1:e0:6b:8a:6c:31:4d:18:9e:0c:da:
                    58:1f:8d:6e:84:e6:3e:34:c4:7d:86:fb:a9:7e:1b:
                    7f:23:ea:85:97:b3:56:fb:00:bb:f1:9b:a8:7e:13:
                    55:9c:12:32:bd:79:ad:42:34:60:6d:5d:c0:b7:a7:
                    59:21:9b:ce:f0:10:df:b4:03:c5:fa:b0:08:17:e0:
                    83:18:19:27:92:13:a7:4f:ba:df:de:59:cc:56:4c:
                    26:37:11:1b:c4:62:54:e7:06:43:0c:df:9d:a6:3c:
                    30:82:8c:94:9f:22:8a:c8:91:d9:60:c4:70:ad:e9:
                    1d:f6:c3:e0:34:01:c4:7e:b2:d5:c5:a9:1d:dc:e7:
                    2a:b4:0a:58:02:a1:91:1b:3a:a6:02:10:1d:0e:dc:
                    a7:8c:fd:1f:b5:3b:12:0e:e6:1a:03:c9:8a:80:0b:
                    8a:cd:fa:82:df:46:ac:d7:64:ef:f7:f9:d5:bb:de:
                    ea:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9B:F6:73:DE:73:7B:0A:86:61:83:48:40:9C:E2:25:9B:67:B0:D3
            X509v3 Authority Key Identifier:
                keyid:7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/GJv2c95zewqGYYNIQJziJZtnsNM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.156.200.0/22
                  109.94.166.0/23
                  193.34.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:7e:81:5e:84:8a:bd:47:14:93:fc:67:d9:c4:ac:0e:39:cf:
         45:ff:89:2b:ea:6e:98:7c:74:85:a6:24:a5:6a:c7:cb:2a:4c:
         ea:a7:eb:14:ce:f3:a4:e3:77:4a:86:41:8f:c1:e7:eb:0d:4c:
         be:82:84:e5:ee:53:55:75:9c:54:8c:41:24:d5:47:2d:ce:e9:
         49:3d:dd:80:fa:4f:37:49:fa:e1:36:46:69:8b:b3:57:21:29:
         01:67:01:9b:60:75:cd:3f:19:28:f7:95:fc:fb:e6:50:f2:d6:
         79:4a:12:1c:05:ee:d5:24:ea:4e:45:3f:31:ce:34:96:27:b4:
         6a:87:75:b8:43:6c:a3:3a:c0:9a:93:75:7d:1e:ec:a4:cd:54:
         b8:fe:d7:bf:34:ff:ca:43:b0:a7:6b:b8:92:62:61:4d:d8:24:
         78:10:5d:d8:6b:23:19:eb:28:36:ca:e1:bf:91:1a:cb:30:67:
         25:60:03:6c:a6:38:66:91:f1:95:66:14:56:19:19:5e:a5:90:
         b6:26:b2:51:38:35:ea:54:7c:b0:99:dc:30:c6:3f:ec:29:0e:
         77:b1:4a:ae:24:a3:3f:91:e2:9c:0a:9c:fc:cc:48:69:7f:49:
         6d:4b:93:8e:5f:5c:cf:e8:05:0d:d0:61:6f:50:88:8b:be:72:
         2e:8a:1f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:29:33 2026 by rpki-client