This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/GWJI_mFCqJuyDkHldrdzfZ_vzc8.roa
File:                     GWJI_mFCqJuyDkHldrdzfZ_vzc8.roa (raw, json)
Hash identifier:          Kba9i+mtRpiR9std+3kLIR0ldljFrDaLsM+dV2wWLHc=
Subject key identifier:   19:62:48:FE:61:42:A8:9B:B2:0E:41:E5:76:B7:73:7D:9F:EF:CD:CF
Certificate issuer:       /CN=c4f2d8ba1b19211fa9f9c0db551545133102ccbb
Certificate serial:       019B79104FEEA61D98CD9D823965C122977A
Authority key identifier: C4:F2:D8:BA:1B:19:21:1F:A9:F9:C0:DB:55:15:45:13:31:02:CC:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/GWJI_mFCqJuyDkHldrdzfZ_vzc8.roa
Signing time:             Thu 01 Jan 2026 10:17:50 +0000
ROA not before:           Thu 01 Jan 2026 10:17:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199516
IP address blocks:        185.13.80.0/22 maxlen: 22
                          185.13.80.0/24 maxlen: 24
                          185.13.81.0/24 maxlen: 24
                          185.13.82.0/24 maxlen: 24
                          185.13.83.0/24 maxlen: 24
                          2a02:f380::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:4f:ee:a6:1d:98:cd:9d:82:39:65:c1:22:97:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4f2d8ba1b19211fa9f9c0db551545133102ccbb
        Validity
            Not Before: Jan  1 10:17:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=196248fe6142a89bb20e41e576b7737d9fefcdcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ee:ae:8c:1f:b2:6a:4d:26:52:a5:c1:26:41:
                    49:3d:1e:91:f3:c6:ef:99:54:ef:63:2c:4c:9a:c1:
                    c7:7b:b3:fd:92:da:ef:1c:bf:38:be:a6:4b:69:7a:
                    92:46:fb:bc:c8:dc:3f:0e:39:d1:da:9d:37:c8:94:
                    17:20:b8:ff:da:36:ed:f6:93:22:11:42:e0:50:52:
                    c3:ab:c8:0b:b2:2c:21:0d:9e:da:6d:42:7e:8b:b4:
                    f4:3f:05:d3:88:ce:08:26:74:5e:fc:7e:53:0b:13:
                    d6:c0:7a:be:11:92:c3:a6:11:fc:61:3e:1a:15:f5:
                    6d:61:c0:65:5b:5f:c3:97:33:3c:b5:3f:e8:d7:45:
                    28:7d:be:94:91:2c:e8:21:7e:e9:08:b9:9f:9b:bc:
                    91:25:0b:e9:6d:08:be:93:03:50:5f:26:d1:a4:4f:
                    7d:9b:aa:a2:62:c6:73:90:bf:9b:5a:a7:1c:b4:a4:
                    0c:eb:fe:e9:16:41:56:3a:f5:10:df:f3:54:c1:22:
                    8e:21:dd:36:f0:ea:46:98:fe:e8:20:8c:2a:4d:86:
                    4b:20:a1:8f:58:2c:45:d6:3a:25:56:7d:5d:12:09:
                    92:c6:41:07:8f:88:7b:69:f7:2b:97:8e:7c:56:34:
                    fd:5e:95:7a:3a:b4:37:c6:18:04:ce:4c:44:7b:2d:
                    89:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:62:48:FE:61:42:A8:9B:B2:0E:41:E5:76:B7:73:7D:9F:EF:CD:CF
            X509v3 Authority Key Identifier:
                keyid:C4:F2:D8:BA:1B:19:21:1F:A9:F9:C0:DB:55:15:45:13:31:02:CC:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/GWJI_mFCqJuyDkHldrdzfZ_vzc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.13.80.0/22
                IPv6:
                  2a02:f380::/29

    Signature Algorithm: sha256WithRSAEncryption
         6d:2a:ca:ad:3c:8e:8f:33:60:ee:91:75:06:a8:63:87:51:8e:
         32:9f:cf:2f:e4:7e:ce:e5:e5:04:ba:47:53:0c:40:d5:5e:7f:
         42:62:f8:57:2a:a8:89:dc:01:22:c5:77:25:5c:16:a8:2f:c7:
         9d:4c:5c:dd:3a:f9:ed:ba:02:85:9e:1d:25:5d:7c:24:b0:3e:
         5e:94:24:e0:90:8f:8f:c7:42:f1:b8:0b:d3:91:08:ec:19:3a:
         76:f4:25:27:14:c3:5f:17:02:2e:a3:77:6e:dc:7f:10:10:2b:
         93:0a:21:a5:10:ef:fa:a1:d9:f2:89:2a:4e:96:4e:7d:e9:ba:
         b0:5c:d5:6e:4a:78:36:da:01:3d:4d:e7:dd:52:bd:cb:03:7a:
         c3:ff:f6:67:d7:40:7b:1f:65:8d:8d:2b:a7:65:19:95:ce:e3:
         47:03:e2:6b:08:28:57:fa:0b:f9:70:78:20:30:d8:03:76:9f:
         17:e4:fc:b4:e8:76:7e:dc:91:64:29:18:76:bd:89:7f:02:4a:
         41:00:a0:7f:d5:08:36:e7:41:33:40:75:4e:ef:fd:a7:d6:74:
         f8:7c:dc:23:d5:fa:82:8f:b6:30:91:43:13:0a:3f:96:62:03:
         c4:9f:49:60:0b:b2:88:a6:3d:54:da:eb:95:b6:ca:ba:73:64:
         0d:8f:39:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 17:24:33 2026 by rpki-client