This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/GYjhQVImjJT9zDhH2ElfkAVuvEk.roa
File:                     GYjhQVImjJT9zDhH2ElfkAVuvEk.roa (raw, json)
Hash identifier:          4BtSXxzZXGJQP6e5gnxCrl45EhunBLGvwPOlAmdmjwk=
Subject key identifier:   19:88:E1:41:52:26:8C:94:FD:CC:38:47:D8:49:5F:90:05:6E:BC:49
Certificate issuer:       /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial:       019B7F1511A06381B246AD5A46B4CFF29D64
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/GYjhQVImjJT9zDhH2ElfkAVuvEk.roa
Signing time:             Fri 02 Jan 2026 14:20:45 +0000
ROA not before:           Fri 02 Jan 2026 14:20:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208824
IP address blocks:        2a14:c380:340::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:11:a0:63:81:b2:46:ad:5a:46:b4:cf:f2:9d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
        Validity
            Not Before: Jan  2 14:20:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1988e14152268c94fdcc3847d8495f90056ebc49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9f:df:42:bd:b0:44:75:97:be:25:d1:d2:8d:
                    8d:df:e9:3a:42:08:5d:f1:de:2a:c2:00:6a:57:06:
                    39:0b:bc:f1:4d:66:80:11:92:3b:c8:6e:3e:94:98:
                    c9:24:0d:a8:c6:9e:8c:8e:14:f4:c9:5f:30:84:0e:
                    9a:86:11:98:12:e7:c9:a1:0c:58:ee:61:4d:f4:62:
                    44:d0:70:7b:05:fc:54:1f:98:75:07:47:2f:8a:b6:
                    44:0f:55:c0:8f:8b:b9:25:73:c8:a7:dc:5a:ed:0f:
                    48:a1:4d:90:19:f6:0a:5a:33:5a:e9:8f:16:e1:11:
                    32:fe:fd:5c:84:0c:c2:59:c4:62:b7:f7:45:db:ae:
                    77:83:39:05:99:28:82:ac:84:1e:ae:91:c2:cc:79:
                    4b:ad:69:2f:d5:99:30:f2:d5:34:cc:a0:86:67:88:
                    ea:41:5f:a9:ae:07:9e:c1:72:d8:5e:8e:91:5f:dd:
                    07:49:f1:c8:13:93:c9:74:8d:1e:3e:bc:45:ca:cd:
                    cb:3c:48:1f:93:65:d3:54:92:d8:66:c6:2b:49:61:
                    92:24:9d:e1:46:a2:d2:04:15:39:60:a2:1e:d9:69:
                    7f:84:ac:92:74:fb:bb:11:3a:bf:67:9b:27:de:0a:
                    aa:69:3a:81:b1:ff:e0:8e:00:e0:f3:95:08:e8:01:
                    62:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:88:E1:41:52:26:8C:94:FD:CC:38:47:D8:49:5F:90:05:6E:BC:49
            X509v3 Authority Key Identifier:
                keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/GYjhQVImjJT9zDhH2ElfkAVuvEk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:c380:340::/44

    Signature Algorithm: sha256WithRSAEncryption
         6f:13:45:1b:d6:49:79:20:e0:86:45:59:99:12:d8:2d:1d:e4:
         39:50:65:67:ea:e8:05:6e:6e:f9:69:50:54:15:ee:8b:de:12:
         3c:9b:54:68:6d:7b:05:ab:9a:3f:5b:25:9e:6d:36:1a:b6:9b:
         2d:2d:50:0d:d3:2e:b5:78:f7:8b:2c:ec:9b:09:27:db:a1:3e:
         5f:60:6c:0b:db:23:20:f8:41:09:05:e5:6e:97:2b:5f:cd:8c:
         02:9d:b5:59:ef:1e:35:c9:d6:05:8b:ba:23:cd:91:5d:71:b8:
         48:5d:ca:fb:fe:df:b3:e1:16:0e:1b:bc:19:7f:2b:f5:85:d9:
         f8:29:f5:61:f4:23:c8:61:bd:d6:27:9b:ce:c5:b6:2e:ec:79:
         68:52:1f:02:19:70:71:58:06:5a:d6:03:e1:6d:e5:d1:33:e4:
         13:06:e5:97:c4:60:56:30:47:3a:c9:0e:df:f7:42:0b:26:46:
         5f:a1:a2:d9:fa:a4:9f:9c:24:5d:d6:a7:34:12:0e:33:26:97:
         db:f6:64:bc:88:e2:1c:15:9b:49:e8:24:c6:dd:30:f6:11:bf:
         9d:98:54:c6:39:10:f5:88:32:90:1e:af:66:8f:31:f0:f0:bc:
         9f:a7:10:ce:f4:1b:14:52:8d:d1:1c:fb:39:12:9e:90:ae:42:
         be:56:a0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 00:26:29 2026 by rpki-client