This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/GRicLr8guTYt3-UUA8RWG0VyhWM.roa
File:                     GRicLr8guTYt3-UUA8RWG0VyhWM.roa (raw, json)
Hash identifier:          sT2xKcm+4VmWL6SPDZS4tTrOEUyFhJvtIzYNam0gNC8=
Subject key identifier:   19:18:9C:2E:BF:20:B9:36:2D:DF:E5:14:03:C4:56:1B:45:72:85:63
Certificate issuer:       /CN=26f977779e908366dd2460e3a6f78ea00022d845
Certificate serial:       019B7CEDF26A9B1CA1C819E664140A9E43F8
Authority key identifier: 26:F9:77:77:9E:90:83:66:DD:24:60:E3:A6:F7:8E:A0:00:22:D8:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jvl3d56Qg2bdJGDjpveOoAAi2EU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/GRicLr8guTYt3-UUA8RWG0VyhWM.roa
Signing time:             Fri 02 Jan 2026 04:18:47 +0000
ROA not before:           Fri 02 Jan 2026 04:18:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     58282
IP address blocks:        193.163.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jvl3d56Qg2bdJGDjpveOoAAi2EU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:f2:6a:9b:1c:a1:c8:19:e6:64:14:0a:9e:43:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f977779e908366dd2460e3a6f78ea00022d845
        Validity
            Not Before: Jan  2 04:18:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=19189c2ebf20b9362ddfe51403c4561b45728563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:97:f9:53:69:80:49:fb:18:e6:27:19:9b:
                    2c:12:96:b4:0a:15:7f:ae:d6:df:c7:35:f6:ce:7f:
                    db:34:c7:d4:c1:74:4f:d0:7c:d0:47:ce:bd:41:5e:
                    04:55:23:8d:63:15:6a:4c:48:d1:50:90:58:52:8e:
                    39:f8:66:f3:76:47:ff:a6:7b:5e:db:9f:e2:16:95:
                    c3:34:da:9f:c8:46:6f:e2:27:a7:7b:ab:a5:04:64:
                    e6:40:e2:73:58:28:13:c2:d5:fc:bb:20:ac:e8:59:
                    25:b0:1e:e8:7e:cf:1a:87:4c:eb:51:2e:ca:22:dc:
                    bd:7c:93:ca:01:f3:5d:ec:6c:e8:91:38:6b:75:7a:
                    5e:0d:78:7d:47:0c:21:e9:af:9d:40:69:e1:2f:c9:
                    a9:8d:a3:23:17:ad:b4:14:81:88:74:9a:3c:7e:3c:
                    81:4c:02:56:0e:09:c4:d8:1b:42:76:1e:58:7c:e8:
                    ef:c5:cf:14:d3:e1:26:6b:18:16:3e:ac:8a:36:9d:
                    ef:83:7e:d5:f1:e6:c7:ca:14:6b:a4:f4:87:85:b3:
                    7f:89:9d:a9:6e:fc:28:fd:c8:90:ca:cc:64:26:da:
                    be:2f:2f:8b:a7:f8:b2:67:bc:65:5c:0f:da:a1:50:
                    ca:53:55:61:47:9f:53:37:9f:98:28:d4:cd:6c:df:
                    46:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:18:9C:2E:BF:20:B9:36:2D:DF:E5:14:03:C4:56:1B:45:72:85:63
            X509v3 Authority Key Identifier:
                keyid:26:F9:77:77:9E:90:83:66:DD:24:60:E3:A6:F7:8E:A0:00:22:D8:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jvl3d56Qg2bdJGDjpveOoAAi2EU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/GRicLr8guTYt3-UUA8RWG0VyhWM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:27:2b:d7:39:79:c3:dd:cb:68:02:a4:76:49:73:ad:29:9c:
         12:d1:19:7c:7b:a0:9f:6b:ce:b6:86:c1:b6:7c:a6:d1:42:bd:
         0d:b2:ae:44:6b:18:e1:16:a9:76:97:c7:39:df:d0:a7:1c:eb:
         ad:91:6d:8c:70:4f:03:ab:cc:00:16:3e:52:ce:10:bb:7c:d1:
         a2:07:45:f4:e1:49:f5:e1:84:e1:28:c5:10:23:da:63:24:9c:
         ae:90:4a:00:2c:4b:a2:c9:09:c9:2d:71:89:52:85:5f:26:26:
         f4:ae:b6:03:84:68:28:15:53:49:28:cc:fe:32:7b:2d:62:ef:
         30:df:be:01:21:43:f6:26:05:72:df:5f:72:7b:57:00:30:5f:
         6d:2d:eb:8c:f8:e4:28:0d:2c:6e:ae:e7:a4:3c:25:9a:b8:7d:
         21:b7:e1:84:95:07:92:d8:7a:8d:79:a2:20:73:83:ce:e7:dc:
         c9:a1:34:04:8f:eb:f4:dc:25:b9:36:fd:cf:e0:4c:b8:87:96:
         20:26:98:5c:66:b7:87:11:ac:38:6d:98:d7:00:db:78:fb:94:
         7a:e6:47:82:f4:a3:c8:fd:d3:13:e2:ed:83:94:8f:46:07:c6:
         1f:ea:19:a7:48:28:a5:c9:31:fd:54:17:7b:f9:13:d3:2e:48:
         73:e3:16:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt87fJqmxyhyBnmZBQKnkP4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2Zjk3Nzc3OWU5MDgzNjZkZDI0NjBlM2E2Zjc4ZWEwMDAy
MmQ4NDUwHhcNMjYwMTAyMDQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTE4OWMyZWJmMjBiOTM2MmRkZmU1MTQwM2M0NTYxYjQ1NzI4NTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApveX+VNpgEn7GOYnGZssEpa0ChV/
rtbfxzX2zn/bNMfUwXRP0HzQR869QV4EVSONYxVqTEjRUJBYUo45+Gbzdkf/pnte
25/iFpXDNNqfyEZv4iene6ulBGTmQOJzWCgTwtX8uyCs6FklsB7ofs8ah0zrUS7K
Ity9fJPKAfNd7GzokThrdXpeDXh9Rwwh6a+dQGnhL8mpjaMjF620FIGIdJo8fjyB
TAJWDgnE2BtCdh5YfOjvxc8U0+EmaxgWPqyKNp3vg37V8ebHyhRrpPSHhbN/iZ2p
bvwo/ciQysxkJtq+Ly+Lp/iyZ7xlXA/aoVDKU1VhR59TN5+YKNTNbN9GEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBkYnC6/ILk2Ld/lFAPEVhtFcoVjMB8GA1UdIwQY
MBaAFCb5d3eekINm3SRg46b3jqAAIthFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnZsM2Q1NlFnMmJkSkdEanB2ZU9vQUFpMkVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC84MGUzYTMtMjExZS00MTdkLTgzZGYt
ZmFjMWZlZjRkMGY3LzEvR1JpY0xyOGd1VFl0My1VVUE4UldHMFZ5aFdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC84MGUzYTMtMjExZS00MTdkLTgzZGYtZmFjMWZlZjRkMGY3
LzEvSnZsM2Q1NlFnMmJkSkdEanB2ZU9vQUFpMkVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwaNQMA0G
CSqGSIb3DQEBCwUAA4IBAQAcJyvXOXnD3ctoAqR2SXOtKZwS0Rl8e6Cfa862hsG2
fKbRQr0Nsq5EaxjhFql2l8c539CnHOutkW2McE8Dq8wAFj5SzhC7fNGiB0X04Un1
4YThKMUQI9pjJJyukEoALEuiyQnJLXGJUoVfJib0rrYDhGgoFVNJKMz+MnstYu8w
374BIUP2JgVy319ye1cAMF9tLeuM+OQoDSxuruekPCWauH0ht+GElQeS2HqNeaIg
c4PO59zJoTQEj+v03CW5Nv3P4Ey4h5YgJphcZreHEaw4bZjXANt4+5R65keC9KPI
/dMT4u2DlI9GB8Yf6hmnSCilyTH9VBd7+RPTLkhz4xZm
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:24 2026 by rpki-client