This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/goVBh-jKOronkqqkPN-IjocLEWw.roa
File:                     goVBh-jKOronkqqkPN-IjocLEWw.roa (raw, json)
Hash identifier:          DvzH0QIR7+4AsoL8AZ8K49zOwXXwcDQoCiTYGs9k+Xs=
Subject key identifier:   82:85:41:87:E8:CA:3A:BA:27:92:AA:A4:3C:DF:88:8E:87:0B:11:6C
Certificate issuer:       /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial:       019B7F14647BA848B281CE596A8C8D07BFC0
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/goVBh-jKOronkqqkPN-IjocLEWw.roa
Signing time:             Fri 02 Jan 2026 14:20:01 +0000
ROA not before:           Fri 02 Jan 2026 14:20:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202799
IP address blocks:        176.98.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:64:7b:a8:48:b2:81:ce:59:6a:8c:8d:07:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
        Validity
            Not Before: Jan  2 14:20:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=82854187e8ca3aba2792aaa43cdf888e870b116c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f4:e1:66:22:ac:1a:e8:0c:ec:53:0b:1e:03:
                    91:5a:82:67:17:ac:79:40:97:48:05:2a:b1:51:8c:
                    46:52:2d:e0:bf:f4:6f:a4:bf:52:0e:0a:57:87:5a:
                    41:98:03:09:b1:03:db:9f:98:19:39:07:4a:21:b0:
                    21:62:df:d2:dc:37:33:1f:54:d4:d2:bc:14:c4:64:
                    2e:6e:34:5d:f2:5b:78:aa:b2:79:f7:ec:9c:c6:31:
                    9f:78:8e:d8:3b:98:fa:5e:a0:07:63:8e:a2:fe:69:
                    dd:f1:da:ab:3c:64:6d:45:19:5d:ec:61:e9:d6:6c:
                    bf:05:e2:cf:78:51:e2:0c:b4:a2:b6:c3:12:af:ec:
                    97:08:9f:04:61:47:59:b6:b0:02:d5:a6:a6:b9:3a:
                    0d:95:bc:4c:3b:95:bc:3a:93:3d:ad:93:e7:31:14:
                    ff:e1:17:21:92:9f:b9:95:df:b3:7b:b7:4b:5f:e3:
                    bb:a4:ce:48:8c:a2:b3:c1:37:94:55:79:23:9e:80:
                    5c:58:26:a7:82:6f:7f:30:b3:c4:9b:2d:0a:77:be:
                    88:dd:b3:7d:18:d9:fb:fd:bf:5b:ec:b2:c2:a4:ee:
                    9b:56:af:b6:a7:33:5b:2c:b0:b4:34:c5:63:7f:96:
                    06:ba:d0:8c:02:4d:b7:ce:f0:b2:9f:50:43:04:63:
                    b0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:85:41:87:E8:CA:3A:BA:27:92:AA:A4:3C:DF:88:8E:87:0B:11:6C
            X509v3 Authority Key Identifier:
                keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/goVBh-jKOronkqqkPN-IjocLEWw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.98.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:2a:7a:53:84:3c:0d:e1:a0:04:bc:ec:34:f3:82:66:21:f7:
         f9:17:e0:56:12:ba:b1:52:65:bb:be:c4:a8:94:8e:db:f7:30:
         6e:e8:9d:f9:1b:fe:85:a3:80:17:cd:96:e8:3f:a7:69:e2:11:
         c1:9e:fe:05:84:59:c0:0a:a9:6d:c1:d2:de:86:5b:91:74:89:
         73:2f:f1:1a:c4:bd:7d:e7:3e:46:15:57:eb:9f:8b:9f:9a:81:
         78:07:4f:29:fd:49:f6:e1:c8:f4:7c:bc:c2:5c:7a:9d:f7:f4:
         25:11:bd:66:e7:a8:c5:f6:12:22:df:a7:0a:b0:54:34:d9:8a:
         de:47:c5:74:ea:09:bf:58:77:95:d9:f2:7a:c3:71:0f:40:ab:
         95:96:c9:b0:b2:ab:83:e6:e6:c8:43:4e:cb:48:6f:c1:67:ee:
         dc:e6:90:2c:6a:98:de:24:e3:86:77:3c:65:b1:bf:6a:22:f9:
         54:31:79:4c:53:bc:9b:31:7d:10:9a:3a:c4:a2:4b:4e:21:a9:
         ed:57:33:0f:d6:8a:ce:60:c7:af:4a:51:10:d3:01:c0:54:f8:
         22:6e:11:06:13:68:c5:cf:59:fc:f0:3b:b2:da:df:61:c2:59:
         5d:17:2a:9c:df:b2:9b:09:8d:b3:b6:0b:72:42:d5:ee:cc:59:
         93:27:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:36:34 2026 by rpki-client