This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/gOkqAAVYzcbJi9mXjRFsZ5cDFrc.roa
File:                     gOkqAAVYzcbJi9mXjRFsZ5cDFrc.roa (raw, json)
Hash identifier:          IMKFdbmtSocn1WUlnnsI4QXTF0mL0Cdjvv03Eim+48U=
Subject key identifier:   80:E9:2A:00:05:58:CD:C6:C9:8B:D9:97:8D:11:6C:67:97:03:16:B7
Certificate issuer:       /CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Certificate serial:       019B77C7638028453FF5826CC4FD115C5D92
Authority key identifier: B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/gOkqAAVYzcbJi9mXjRFsZ5cDFrc.roa
Signing time:             Thu 01 Jan 2026 04:18:34 +0000
ROA not before:           Thu 01 Jan 2026 04:18:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207425
IP address blocks:        193.105.96.0/24 maxlen: 24
                          193.105.102.0/24 maxlen: 27
                          193.105.117.0/24 maxlen: 27
                          193.105.121.0/24 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:63:80:28:45:3f:f5:82:6c:c4:fd:11:5c:5d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
        Validity
            Not Before: Jan  1 04:18:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=80e92a000558cdc6c98bd9978d116c67970316b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1a:19:fd:75:33:c8:5c:ae:39:f9:49:c5:f1:
                    e7:e0:ad:0f:99:8f:32:4e:af:a3:88:37:48:37:d0:
                    9d:72:b6:3f:a5:4c:af:08:e9:11:71:46:e8:3a:0e:
                    a5:85:8f:c4:2b:d7:1e:8b:f5:2c:b7:f7:7c:28:12:
                    fa:ff:fd:ab:f5:ac:b8:6b:e2:d6:14:45:cb:c3:ad:
                    8f:62:c1:a7:d6:f7:4c:59:d8:f6:5b:0d:c3:30:b4:
                    ab:26:fa:9f:a6:7e:75:08:1b:40:ea:81:8a:11:f2:
                    0a:fc:34:66:6c:05:90:91:f3:66:67:77:a0:3d:7f:
                    6e:3e:dc:5c:c1:f2:67:9f:b9:b9:d4:d0:17:b6:7e:
                    73:ef:c5:98:3e:4f:55:34:57:04:ed:2f:35:47:78:
                    65:7b:3f:d7:87:e4:78:72:72:a5:d3:9b:ea:2d:36:
                    8e:b5:e0:33:e7:fb:a1:a9:79:d4:5f:50:12:12:96:
                    c6:78:55:92:8d:7b:f8:eb:58:ff:a1:d5:ce:c7:8b:
                    97:ad:98:0e:bd:48:e1:d7:3d:fb:15:17:3c:66:03:
                    22:ee:38:5b:3a:94:90:86:8c:ee:6b:f6:34:51:c8:
                    de:98:18:29:8d:3e:58:fa:3b:d7:6d:1c:b4:81:de:
                    88:9c:bc:51:61:dc:82:eb:e2:6b:e9:39:09:19:2b:
                    19:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E9:2A:00:05:58:CD:C6:C9:8B:D9:97:8D:11:6C:67:97:03:16:B7
            X509v3 Authority Key Identifier:
                keyid:B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/gOkqAAVYzcbJi9mXjRFsZ5cDFrc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.96.0/24
                  193.105.102.0/24
                  193.105.117.0/24
                  193.105.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:67:46:40:47:7c:fc:94:22:d7:83:a1:ed:e1:d2:a9:8e:c0:
         8e:8a:76:9e:a6:e6:10:5e:ba:b1:4b:0c:7b:0e:66:84:8d:a5:
         a9:08:6f:b4:d2:12:a6:5c:e0:05:1d:6e:e8:1e:86:82:6f:01:
         d3:f9:56:f4:34:51:15:84:51:45:3c:bc:d7:fe:58:09:a7:22:
         e9:53:6a:f5:4f:17:3a:b5:96:ca:b3:2f:6c:ae:6c:04:8f:cb:
         9f:a7:90:b6:7d:d4:71:cb:1d:6e:b6:33:2c:ac:3f:07:17:b3:
         44:a5:3e:32:27:42:e0:9e:d1:bb:a0:ac:5a:2b:66:17:98:f8:
         56:d5:96:80:7c:8e:0f:95:33:ab:a2:43:81:5a:74:25:31:d1:
         7c:0f:2e:c5:be:14:f6:a0:7d:1b:c9:85:92:62:b9:76:e9:63:
         28:ad:4f:76:ef:69:d3:20:ce:d0:ef:57:02:b9:dc:b9:41:9f:
         a1:31:65:f0:41:4f:90:c9:5d:c5:0b:b7:0e:ee:a3:fd:a0:84:
         28:23:8f:b8:7c:7f:1a:47:58:86:ea:d2:b3:9a:7c:54:40:a6:
         6c:ec:64:57:a6:18:83:af:e4:a6:47:c2:7f:0f:2f:8f:82:f5:
         2a:76:fa:97:38:e9:2e:b0:73:d0:63:3d:2b:f6:62:d3:22:bf:
         b2:a0:10:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:30:40 2026 by rpki-client