This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/rgWYhAtqBekCUXRtALlS_GorJok.roa
File:                     rgWYhAtqBekCUXRtALlS_GorJok.roa (raw, json)
Hash identifier:          MHxZzyUoZKR5Q/Ug0QqGfIw96je1U7zTP/F1ENCOyxI=
Subject key identifier:   AE:05:98:84:0B:6A:05:E9:02:51:74:6D:00:B9:52:FC:6A:2B:26:89
Certificate issuer:       /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial:       019B7910A3DF452207F8B5FC82B5313AB9B9
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/rgWYhAtqBekCUXRtALlS_GorJok.roa
Signing time:             Thu 01 Jan 2026 10:18:12 +0000
ROA not before:           Thu 01 Jan 2026 10:18:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208453
IP address blocks:        2a12:bec0:2d0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 16:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:a3:df:45:22:07:f8:b5:fc:82:b5:31:3a:b9:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
        Validity
            Not Before: Jan  1 10:18:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ae0598840b6a05e90251746d00b952fc6a2b2689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6b:8b:ca:e8:55:01:cc:1c:78:01:d6:57:59:
                    9a:b0:30:06:53:8d:e1:9b:b7:8a:52:fd:37:28:cb:
                    83:11:cd:84:58:10:4c:e4:f5:06:19:a2:d1:be:23:
                    58:88:c9:69:67:70:47:49:85:ce:65:e6:62:9a:48:
                    e9:4f:49:a9:bd:1f:de:d0:e8:45:47:31:d1:d2:dc:
                    3a:b4:82:55:cf:db:8a:0e:41:30:e8:e1:a0:7e:51:
                    ec:d7:8a:de:ed:74:c2:3c:44:b4:97:4e:84:2a:27:
                    3e:90:9d:dc:fc:3b:47:98:c5:17:80:e1:70:c7:98:
                    c0:b4:b9:a3:a4:91:97:94:20:b6:e4:2b:6b:d8:c0:
                    a4:10:32:ea:0c:39:51:e7:b7:45:62:fe:28:e6:cf:
                    66:8f:09:66:07:56:ba:34:b8:bc:58:f9:e3:3d:f6:
                    fd:cf:b8:92:f3:85:e4:54:b0:3a:d3:7f:a4:f5:92:
                    03:a6:55:56:2e:02:f9:9a:17:17:66:f4:e2:a7:c1:
                    c1:30:87:14:8a:71:14:61:20:56:46:77:7e:04:72:
                    33:7c:3f:f5:5c:33:42:29:b3:e2:a8:7a:b1:ff:6a:
                    b7:39:41:24:7c:19:0e:d4:ca:90:78:8c:38:1d:99:
                    4c:83:c1:ff:2e:31:44:1e:90:25:5b:5f:93:b3:a8:
                    f1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:05:98:84:0B:6A:05:E9:02:51:74:6D:00:B9:52:FC:6A:2B:26:89
            X509v3 Authority Key Identifier:
                keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/rgWYhAtqBekCUXRtALlS_GorJok.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:bec0:2d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         3a:c6:04:ea:fe:c7:a5:c5:0f:eb:3a:51:7d:99:e5:88:f9:16:
         80:db:2f:c4:db:72:3f:05:59:d0:6f:fc:c7:61:6b:19:f5:7a:
         71:15:e8:8f:d1:52:b2:2f:f4:a3:91:53:ef:e1:2a:d4:41:16:
         e7:3a:01:48:ab:38:20:47:fa:36:75:c0:a4:9f:3c:8f:39:8d:
         9c:45:6b:c6:e0:0b:17:66:8f:32:e9:7f:bd:2a:26:4e:cd:9e:
         5b:23:5c:b3:0a:e9:80:7d:f2:42:c3:40:c9:00:8c:1e:4c:1c:
         49:4e:da:a7:71:3b:d0:2e:1b:4f:41:c9:af:53:39:63:d0:bb:
         55:cc:ee:93:9f:21:d2:8d:60:0b:37:43:85:06:1b:2a:0d:f2:
         7f:81:51:6f:68:df:70:43:0d:af:f9:f3:e1:8b:78:95:5d:a6:
         b3:fa:95:c1:46:7c:71:62:85:bb:df:01:f4:0b:95:25:eb:72:
         47:97:c5:9b:ec:28:2b:70:63:8d:1a:1e:19:98:23:a0:5d:7c:
         a9:2f:46:32:fd:66:d6:c5:34:73:e3:cf:c3:c8:b0:f2:c7:65:
         3a:c4:59:f6:08:3a:1a:39:47:7e:d9:da:36:33:49:35:8c:45:
         c8:e6:b1:55:65:97:b8:e6:3d:6a:ff:e2:55:e0:df:03:bc:ed:
         bf:7e:a7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:47:44 2026 by rpki-client