This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GR6Oknb5oBOoIuKwNPdhSPC-mwo.roa
File:                     GR6Oknb5oBOoIuKwNPdhSPC-mwo.roa (raw, json)
Hash identifier:          5FycjJlgiQLIVMA6Gok/s9b3aNKGkS9TsSnfxILKjEo=
Subject key identifier:   19:1E:8E:92:76:F9:A0:13:A8:22:E2:B0:34:F7:61:48:F0:BE:9B:0A
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       019A820FE814662DCB1F7A5851F073793E27
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GR6Oknb5oBOoIuKwNPdhSPC-mwo.roa
Signing time:             Fri 14 Nov 2025 11:11:11 +0000
ROA not before:           Fri 14 Nov 2025 11:11:11 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135402
IP address blocks:        212.135.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 15:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:82:0f:e8:14:66:2d:cb:1f:7a:58:51:f0:73:79:3e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Nov 14 11:11:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=191e8e9276f9a013a822e2b034f76148f0be9b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a0:e5:fd:bb:d4:5b:46:69:05:c5:18:d0:0f:
                    ce:25:ad:bf:25:e0:b5:0b:e7:28:8f:c3:35:86:96:
                    31:26:88:18:a0:2c:96:87:d2:d0:0a:f8:f8:48:5f:
                    bf:15:d0:4f:e9:be:df:b5:6e:db:fd:6b:aa:85:2e:
                    2f:67:b6:82:1f:31:ce:9b:f1:30:7f:31:df:f4:57:
                    0d:cb:aa:f0:6b:15:49:98:4b:9b:0a:99:2f:f9:12:
                    fa:a6:7b:91:29:1b:af:f4:c1:44:8b:71:c8:13:a5:
                    32:06:59:fd:07:10:73:83:22:a7:26:02:04:24:a4:
                    1e:f3:10:49:18:fa:a0:fc:e1:a3:23:a6:36:6e:c7:
                    77:ad:6c:46:10:fb:20:42:79:b7:61:19:c9:c8:6d:
                    61:d4:bf:b9:77:71:9f:50:6f:15:bb:8d:aa:62:7d:
                    17:f5:a5:80:79:a6:7d:b1:c8:66:d6:44:6a:f0:b1:
                    95:fb:59:15:6e:a1:9f:6b:ed:05:b5:69:ad:20:e7:
                    3e:29:bf:17:33:0b:26:5e:4f:dc:f0:f0:39:85:db:
                    31:b3:b2:c8:c3:8e:1e:31:7e:a1:9c:a6:11:af:02:
                    01:c3:c3:4e:74:05:70:70:f9:be:21:57:aa:fb:2f:
                    b9:05:67:c8:66:9a:86:0d:7d:10:b7:79:10:38:40:
                    85:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:1E:8E:92:76:F9:A0:13:A8:22:E2:B0:34:F7:61:48:F0:BE:9B:0A
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GR6Oknb5oBOoIuKwNPdhSPC-mwo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.135.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:84:b8:32:69:28:67:06:83:32:ea:e1:e0:ef:0a:53:7a:2c:
         af:94:2b:c6:8f:2e:e8:16:04:c9:d3:6d:5f:11:93:06:3d:50:
         6f:77:4f:03:0e:ae:3c:8a:d7:8b:18:62:a5:0a:8e:38:78:f0:
         7b:2a:ba:1d:c0:87:8d:2c:74:d7:c1:7a:c4:ae:2c:1a:94:30:
         a5:43:3b:21:f3:cc:07:d9:2d:a0:28:35:1e:4a:eb:a6:e2:38:
         09:ee:b2:48:0e:f1:cf:99:a8:5a:10:88:81:a9:4f:6f:11:8e:
         2e:3f:7d:4b:59:c2:7f:36:0f:b9:42:5c:b6:61:c5:68:10:1d:
         ee:5a:00:56:99:ae:6f:59:25:f4:9b:5d:01:a6:0f:c7:38:b7:
         24:7c:20:d1:b7:b2:3f:74:09:33:27:72:13:4a:1e:b4:25:78:
         37:18:41:06:70:58:34:77:2d:aa:92:8e:e9:ab:c6:3e:d8:8e:
         d4:9e:d1:88:ad:be:0e:18:48:e0:b9:3d:4e:a7:bb:60:ed:d3:
         da:c8:00:65:6c:ce:60:ff:98:bd:6f:dd:2f:5f:70:f3:37:45:
         28:70:8e:17:00:30:45:22:94:b0:0e:4d:b5:3c:51:7c:74:9d:
         d6:7a:a4:ad:a5:cb:c8:54:4c:60:b7:c1:43:c1:f7:1a:59:a3:
         62:d9:2a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 19:54:08 2025 by rpki-client