This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/gh0KmyJ9YtD8Qc__51gvb29__xE.roa
File:                     gh0KmyJ9YtD8Qc__51gvb29__xE.roa (raw, json)
Hash identifier:          e7ZEXwpcjv6mN1V4hblyq59PY0W07J0crqAM77ihbVM=
Subject key identifier:   82:1D:0A:9B:22:7D:62:D0:FC:41:CF:FF:E7:58:2F:6F:6F:7F:FF:11
Certificate issuer:       /CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
Certificate serial:       019B797E7ABA3D6C4949993DB7E5AC7A9CB0
Authority key identifier: A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/gh0KmyJ9YtD8Qc__51gvb29__xE.roa
Signing time:             Thu 01 Jan 2026 12:18:10 +0000
ROA not before:           Thu 01 Jan 2026 12:18:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50633
IP address blocks:        185.36.146.0/24 maxlen: 24
                          193.84.50.0/24 maxlen: 24
                          193.107.72.0/22 maxlen: 22
                          193.107.72.0/24 maxlen: 24
                          193.107.73.0/24 maxlen: 24
                          193.107.74.0/24 maxlen: 24
                          193.107.75.0/24 maxlen: 24
                          193.194.124.0/22 maxlen: 22
                          193.194.124.0/24 maxlen: 24
                          193.194.126.0/24 maxlen: 24
                          193.194.127.0/24 maxlen: 24
                          195.68.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:7a:ba:3d:6c:49:49:99:3d:b7:e5:ac:7a:9c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
        Validity
            Not Before: Jan  1 12:18:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=821d0a9b227d62d0fc41cfffe7582f6f6f7fff11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:00:4c:fd:7c:67:f3:e4:84:dc:09:c7:bd:1f:
                    60:2c:4d:9c:9a:86:07:62:cf:e3:5b:f8:b0:8e:6d:
                    34:54:77:c0:7a:e2:db:a1:c0:ee:76:6d:41:28:ec:
                    95:75:c8:b4:8f:e7:88:e9:e9:15:92:ad:75:78:5f:
                    79:4f:b5:28:a7:6a:e7:b9:32:c1:e8:f1:3c:14:13:
                    b0:8d:40:6e:6c:c4:81:46:e5:a3:a5:fd:47:80:f5:
                    8d:31:15:5a:f3:48:a7:e6:03:8e:38:c0:c6:cf:4a:
                    2a:27:90:b4:49:4e:da:22:cb:6e:a0:a3:a7:70:a2:
                    2a:ad:ee:dd:44:fb:f6:c5:62:2a:da:34:53:21:f0:
                    74:0d:02:d4:d0:38:42:7e:c2:5e:fc:50:41:6b:73:
                    36:9c:33:de:35:dc:12:21:33:01:4b:2a:0c:04:05:
                    30:f8:2f:f4:a4:d3:47:1c:8f:39:4d:1e:4c:59:79:
                    2c:45:87:0c:f8:7a:0b:7d:45:8e:66:87:36:6b:ab:
                    eb:30:d9:52:5e:b3:72:13:c7:a3:24:87:01:4f:55:
                    b0:7d:6e:7a:28:9b:96:a5:7f:24:ea:ee:16:5f:2d:
                    1b:42:9e:58:fe:ba:30:2d:99:ad:54:65:ba:84:81:
                    a1:16:15:b7:17:8a:24:0a:55:a1:0b:19:ce:73:f0:
                    82:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1D:0A:9B:22:7D:62:D0:FC:41:CF:FF:E7:58:2F:6F:6F:7F:FF:11
            X509v3 Authority Key Identifier:
                keyid:A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/gh0KmyJ9YtD8Qc__51gvb29__xE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.36.146.0/24
                  193.84.50.0/24
                  193.107.72.0/22
                  193.194.124.0/22
                  195.68.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:aa:57:cb:95:4e:93:66:39:62:04:d3:bf:d2:d0:a1:fe:6c:
         12:0d:2b:d8:cd:b5:de:20:04:c9:62:89:75:56:92:6a:e3:93:
         75:7a:f7:c9:a7:0f:33:95:1e:6b:41:2b:be:1e:4a:f1:f7:a3:
         f2:57:9c:50:43:2a:74:99:e3:e8:2b:b2:b3:41:da:ca:7a:2a:
         d8:6f:58:ef:0f:5d:aa:ad:5b:ef:6c:27:d7:90:e2:b6:22:76:
         eb:91:3f:c4:6d:2a:eb:00:61:e3:bb:b7:17:9b:e5:23:e4:32:
         7d:b6:65:b5:a8:c4:ba:b3:be:42:65:5a:ba:2c:52:0c:be:06:
         0c:ab:ea:ec:e4:2e:99:1d:f3:a3:f1:85:59:a1:ee:6b:ed:87:
         da:3e:7e:fb:b9:19:31:26:8a:b4:60:b0:65:66:f2:1a:01:fe:
         1e:05:c9:a2:02:69:24:84:4f:4d:25:42:0a:0f:18:e2:18:07:
         cd:fe:00:57:fe:67:6e:e7:37:1d:2e:bf:43:fe:d8:a4:cc:50:
         47:7f:a2:69:37:6c:1f:66:72:21:20:ec:17:b4:e4:06:c9:1e:
         4d:6a:a5:5f:ec:1c:f9:16:99:ac:3a:6a:f8:23:8e:4b:8c:55:
         11:d4:6a:b1:38:37:ce:d6:86:90:c1:54:cb:6d:bd:94:f9:d5:
         35:2b:c9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:07:51 2026 by rpki-client