This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/Gasfj6rzEe3-zsj4Lj91Mc98mKk.roa
File:                     Gasfj6rzEe3-zsj4Lj91Mc98mKk.roa (raw, json)
Hash identifier:          4yFVsWASC2DVldLBh1GiEJzBLWl9NLqEFtgBbzD84bE=
Subject key identifier:   19:AB:1F:8F:AA:F3:11:ED:FE:CE:C8:F8:2E:3F:75:31:CF:7C:98:A9
Certificate issuer:       /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial:       019C1877CE99E88BD9F4185F95BE9603C6B8
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/Gasfj6rzEe3-zsj4Lj91Mc98mKk.roa
Signing time:             Sun 01 Feb 2026 09:10:30 +0000
ROA not before:           Sun 01 Feb 2026 09:10:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51824
IP address blocks:        192.162.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:18:77:ce:99:e8:8b:d9:f4:18:5f:95:be:96:03:c6:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
        Validity
            Not Before: Feb  1 09:10:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=19ab1f8faaf311edfecec8f82e3f7531cf7c98a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:e0:cf:43:38:3a:e9:fe:a1:08:62:34:97:
                    68:3d:b1:97:4b:e2:57:ee:3e:d9:14:45:cf:7f:83:
                    b0:6b:8f:e0:ce:dc:59:fb:fd:54:fc:14:a0:ae:4e:
                    f8:f7:e5:94:ce:95:2b:6e:21:7e:5e:99:45:20:b8:
                    a4:63:52:e6:0f:7c:01:8c:78:c8:9d:04:5c:4f:9f:
                    4f:02:58:24:d0:22:b2:60:d8:76:a0:be:55:86:57:
                    ba:7f:3a:ab:99:45:d6:8a:a9:6a:7d:03:84:52:56:
                    94:5c:63:37:b1:4e:e9:f4:7f:97:42:0a:01:c5:56:
                    c8:a3:52:ed:78:f5:7b:cd:08:1d:8d:4e:6f:1c:91:
                    ad:ab:17:20:a9:d7:57:e1:0f:b7:66:33:f8:b1:81:
                    3b:99:b6:ec:20:80:4d:4c:8c:a4:90:23:4d:3f:7b:
                    7c:c1:f5:62:56:0e:80:ab:2e:da:bc:25:e4:06:33:
                    d8:b3:a5:75:7e:e6:a2:82:e4:33:23:df:3d:95:a2:
                    41:f3:df:b9:5f:2a:6a:7d:1e:48:8f:61:9f:24:67:
                    54:de:90:a9:b0:18:03:27:ca:fc:12:8e:14:2d:49:
                    17:0f:a8:2c:1a:68:47:65:98:da:da:12:00:2c:c6:
                    c2:0f:26:74:51:be:0f:3e:f6:72:ad:65:11:ea:a7:
                    80:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AB:1F:8F:AA:F3:11:ED:FE:CE:C8:F8:2E:3F:75:31:CF:7C:98:A9
            X509v3 Authority Key Identifier:
                keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/Gasfj6rzEe3-zsj4Lj91Mc98mKk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.162.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:b3:d9:5b:09:46:15:35:d5:11:61:f3:0f:86:4b:f9:20:66:
         08:e3:dc:96:49:81:66:e8:53:c8:4b:e8:6f:3f:4e:72:76:93:
         8d:a6:ac:3d:e0:c3:37:ab:89:3c:c8:e9:d0:6d:65:ef:37:ad:
         b6:3f:b8:cd:4d:10:db:a8:73:8b:6b:7f:b3:2c:7a:b4:f4:5c:
         2f:f2:4a:21:a1:b6:88:79:0f:1e:b9:d4:c0:a4:d0:de:8f:a1:
         0c:6e:9e:fc:77:c5:d6:e0:23:5f:43:7a:7a:38:db:76:af:9c:
         9a:66:88:80:41:0a:95:f1:98:00:b5:c0:09:a6:14:51:08:af:
         51:2c:c9:01:48:3c:79:82:7c:65:84:62:23:c4:25:8d:ed:da:
         9e:33:19:56:5b:ab:14:37:a3:0d:2f:1a:f2:d4:e2:a2:0b:21:
         7c:2d:71:85:9f:64:cc:4c:d5:9e:40:a9:df:bd:c8:54:90:fc:
         05:7b:b6:d2:47:d3:44:4f:19:9d:a7:8c:f4:c6:9b:62:d9:68:
         d2:d5:98:d8:50:f1:6a:4c:1a:12:2d:10:6b:5a:8b:61:f5:ed:
         cf:4a:b3:65:5a:a6:1c:61:aa:cf:1d:b7:e2:bc:f0:3b:a3:a2:
         80:cf:95:f0:a3:a7:cb:de:72:ae:7e:db:0c:73:70:2a:6b:70:
         32:55:41:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZwYd86Z6IvZ9Bhflb6WA8a4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4
ODE3ZmMwHhcNMjYwMjAxMDkxMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWFiMWY4ZmFhZjMxMWVkZmVjZWM4ZjgyZTNmNzUzMWNmN2M5OGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCLgz0M4Oun+oQhiNJdoPbGXS+JX
7j7ZFEXPf4Owa4/gztxZ+/1U/BSgrk749+WUzpUrbiF+XplFILikY1LmD3wBjHjI
nQRcT59PAlgk0CKyYNh2oL5Vhle6fzqrmUXWiqlqfQOEUlaUXGM3sU7p9H+XQgoB
xVbIo1LtePV7zQgdjU5vHJGtqxcgqddX4Q+3ZjP4sYE7mbbsIIBNTIykkCNNP3t8
wfViVg6Aqy7avCXkBjPYs6V1fuaiguQzI989laJB89+5XypqfR5Ij2GfJGdU3pCp
sBgDJ8r8Eo4ULUkXD6gsGmhHZZja2hIALMbCDyZ0Ub4PPvZyrWUR6qeAQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBmrH4+q8xHt/s7I+C4/dTHPfJipMB8GA1UdIwQY
MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt
NDZiOTQ5MDkyY2JlLzEvR2FzZmo2cnpFZTMtenNqNExqOTFNYzk4bUtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl
LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwKLEMA0G
CSqGSIb3DQEBCwUAA4IBAQA3s9lbCUYVNdURYfMPhkv5IGYI49yWSYFm6FPIS+hv
P05ydpONpqw94MM3q4k8yOnQbWXvN622P7jNTRDbqHOLa3+zLHq09Fwv8kohobaI
eQ8eudTApNDej6EMbp78d8XW4CNfQ3p6ONt2r5yaZoiAQQqV8ZgAtcAJphRRCK9R
LMkBSDx5gnxlhGIjxCWN7dqeMxlWW6sUN6MNLxry1OKiCyF8LXGFn2TMTNWeQKnf
vchUkPwFe7bSR9NETxmdp4z0xpti2WjS1ZjYUPFqTBoSLRBrWoth9e3PSrNlWqYc
YarPHbfivPA7o6KAz5Xwo6fL3nKuftsMc3Aqa3AyVUFI
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:11:50 2026 by rpki-client