This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/GfFVdfYr5T1D14xqtgVYsbfPLT4.roa
File:                     GfFVdfYr5T1D14xqtgVYsbfPLT4.roa (raw, json)
Hash identifier:          jes0J5Li8z4Pq6OC9eIPgrGqnw1k87mzrlfDV9tkAMs=
Subject key identifier:   19:F1:55:75:F6:2B:E5:3D:43:D7:8C:6A:B6:05:58:B1:B7:CF:2D:3E
Certificate issuer:       /CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Certificate serial:       019B7C12B8B6C5157B1178D76FBA44159948
Authority key identifier: 1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/GfFVdfYr5T1D14xqtgVYsbfPLT4.roa
Signing time:             Fri 02 Jan 2026 00:19:20 +0000
ROA not before:           Fri 02 Jan 2026 00:19:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213142
IP address blocks:        193.247.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:b8:b6:c5:15:7b:11:78:d7:6f:ba:44:15:99:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e0c47ba799a060733383b8a4db36e84b62d315d
        Validity
            Not Before: Jan  2 00:19:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=19f15575f62be53d43d78c6ab60558b1b7cf2d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:99:db:a1:4f:e0:db:55:3f:ff:35:ec:ab:94:
                    b8:84:81:b5:76:0b:17:54:12:5d:05:02:2e:26:c1:
                    3c:95:87:64:5d:8d:b3:48:d5:0f:eb:31:16:39:4a:
                    ba:d8:06:08:de:2b:7a:3d:93:d9:6e:1f:b5:6e:c8:
                    12:e5:33:1d:fd:bf:2a:03:03:bc:1b:b9:73:bd:92:
                    75:9b:f6:63:45:f6:13:a2:92:a8:ac:b0:7d:78:78:
                    5b:64:fd:7f:af:0a:6b:9a:24:8e:c1:cf:54:52:bf:
                    76:e9:3a:3e:ef:0e:e0:9e:04:24:a2:86:95:7e:3e:
                    6c:44:5a:a7:2f:2f:13:9d:34:1c:d7:0d:8d:a3:37:
                    07:12:21:6b:cd:63:91:82:78:d7:98:0a:6c:26:cf:
                    98:e8:76:60:1e:b6:c1:09:49:50:48:8e:74:11:35:
                    bb:b9:05:85:c8:7f:7f:aa:0c:8c:e2:93:4e:82:20:
                    64:a7:d3:17:81:b5:4b:db:83:da:03:35:30:dd:42:
                    f9:d1:53:49:81:d7:9c:5c:1c:ad:c4:a4:ac:1e:c0:
                    28:7c:ca:f4:20:67:f0:7b:67:b3:20:13:4e:34:73:
                    84:74:65:e8:ee:1f:19:5e:fc:36:68:f8:50:57:f5:
                    97:a0:64:af:c6:3f:c8:25:71:65:7a:20:44:91:75:
                    68:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F1:55:75:F6:2B:E5:3D:43:D7:8C:6A:B6:05:58:B1:B7:CF:2D:3E
            X509v3 Authority Key Identifier:
                keyid:1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/GfFVdfYr5T1D14xqtgVYsbfPLT4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.247.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:be:af:d9:92:a0:df:c7:26:e5:1f:12:22:23:13:0d:3f:65:
         2e:69:02:40:d1:b4:81:8a:bc:3f:ac:48:58:91:93:24:ce:e0:
         ee:d9:82:e1:87:12:b7:61:47:78:e2:29:19:0b:7f:a4:b6:fa:
         52:c5:f0:d9:80:7a:43:78:a3:b9:4b:43:b7:1e:45:31:55:80:
         ae:95:7d:d8:b6:d3:a1:39:24:b9:50:97:d8:65:16:16:8e:fb:
         c6:ed:19:0c:fb:e1:74:9c:66:9f:b7:2a:d1:14:87:79:02:74:
         ea:10:1a:e4:b8:3e:a6:a1:a7:9f:58:bb:c7:04:4e:12:53:d4:
         2e:8e:3d:15:ff:56:f2:51:fe:fb:af:17:68:9a:a1:f0:55:b0:
         a9:66:e6:21:7b:49:4b:44:a0:f6:ce:05:48:f5:fb:c4:8c:97:
         61:89:76:f7:41:17:9b:cb:71:c3:4f:74:3e:6e:7e:36:49:d8:
         7c:c3:44:75:47:54:db:3f:87:ba:93:71:56:fc:89:ef:85:71:
         19:e7:d6:18:09:88:4a:d9:6d:5d:4c:53:13:29:70:d6:f1:c2:
         ee:60:bd:87:a2:1b:72:dc:d6:87:87:da:f6:3a:c4:7a:10:26:
         3c:fe:ef:d4:78:6c:28:44:be:af:35:c3:38:ee:05:a8:0e:12:
         1b:d5:4f:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8Eri2xRV7EXjXb7pEFZlIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMGM0N2JhNzk5YTA2MDczMzM4M2I4YTRkYjM2ZTg0YjYy
ZDMxNWQwHhcNMjYwMTAyMDAxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWYxNTU3NWY2MmJlNTNkNDNkNzhjNmFiNjA1NThiMWI3Y2YyZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JnboU/g21U//zXsq5S4hIG1dgsX
VBJdBQIuJsE8lYdkXY2zSNUP6zEWOUq62AYI3it6PZPZbh+1bsgS5TMd/b8qAwO8
G7lzvZJ1m/ZjRfYTopKorLB9eHhbZP1/rwprmiSOwc9UUr926To+7w7gngQkooaV
fj5sRFqnLy8TnTQc1w2NozcHEiFrzWORgnjXmApsJs+Y6HZgHrbBCUlQSI50ETW7
uQWFyH9/qgyM4pNOgiBkp9MXgbVL24PaAzUw3UL50VNJgdecXBytxKSsHsAofMr0
IGfwe2ezIBNONHOEdGXo7h8ZXvw2aPhQV/WXoGSvxj/IJXFleiBEkXVovQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBnxVXX2K+U9Q9eMarYFWLG3zy0+MB8GA1UdIwQY
MBaAFB4MR7p5mgYHMzg7ik2zboS2LTFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGd4SHVubWFCZ2N6T0R1S1RiTnVoTFl0TVYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lN2ZlNWEtYjYyNi00YTMyLWExY2Mt
YTMyN2I4YjU2ZWQ2LzEvR2ZGVmRmWXI1VDFEMTR4cXRnVllzYmZQTFQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lN2ZlNWEtYjYyNi00YTMyLWExY2MtYTMyN2I4YjU2ZWQ2
LzEvSGd4SHVubWFCZ2N6T0R1S1RiTnVoTFl0TVYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwfdDMA0G
CSqGSIb3DQEBCwUAA4IBAQC5vq/ZkqDfxyblHxIiIxMNP2UuaQJA0bSBirw/rEhY
kZMkzuDu2YLhhxK3YUd44ikZC3+ktvpSxfDZgHpDeKO5S0O3HkUxVYCulX3YttOh
OSS5UJfYZRYWjvvG7RkM++F0nGaftyrRFId5AnTqEBrkuD6moaefWLvHBE4SU9Qu
jj0V/1byUf77rxdomqHwVbCpZuYhe0lLRKD2zgVI9fvEjJdhiXb3QReby3HDT3Q+
bn42Sdh8w0R1R1TbP4e6k3FW/InvhXEZ59YYCYhK2W1dTFMTKXDW8cLuYL2Hohty
3NaHh9r2OsR6ECY8/u/UeGwoRL6vNcM47gWoDhIb1U9s
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:36 2026 by rpki-client