This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gtAVbBsjwtxLCRFbMM5usFREe34.roa
File:                     gtAVbBsjwtxLCRFbMM5usFREe34.roa (raw, json)
Hash identifier:          Yir+1CGERlFO3xnc6TNSf7Fvbr0rENfwUzfpDbGzsXk=
Subject key identifier:   82:D0:15:6C:1B:23:C2:DC:4B:09:11:5B:30:CE:6E:B0:54:44:7B:7E
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       019B7DCB541AFCFA99F2ECBBC86B8F438455
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gtAVbBsjwtxLCRFbMM5usFREe34.roa
Signing time:             Fri 02 Jan 2026 08:20:35 +0000
ROA not before:           Fri 02 Jan 2026 08:20:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     147060
IP address blocks:        151.246.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 21:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:54:1a:fc:fa:99:f2:ec:bb:c8:6b:8f:43:84:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Jan  2 08:20:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=82d0156c1b23c2dc4b09115b30ce6eb054447b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6b:4e:9c:4b:78:4f:ca:b0:53:e8:d9:a8:47:
                    4c:c8:9a:9b:d9:e7:13:8c:29:1b:ba:6f:a1:cb:a2:
                    20:34:6c:ac:7b:0a:81:9c:de:46:f9:69:16:84:e0:
                    f6:e0:84:24:a5:02:5c:2a:01:c3:ce:5c:88:3c:e7:
                    7a:c4:17:92:1f:86:12:06:c1:13:ae:d6:c3:a2:18:
                    32:49:7d:42:2a:50:d5:b1:6c:ea:27:ae:35:e2:e7:
                    58:6f:e9:c6:fe:13:88:2a:61:a9:ec:df:97:7a:74:
                    17:09:ff:46:73:81:81:8c:84:65:18:76:47:96:ea:
                    6b:47:96:87:b1:70:e2:9a:80:18:5b:fb:0d:a9:55:
                    13:0b:f5:48:4b:14:aa:67:b7:ba:e3:d6:17:73:59:
                    2a:1e:38:81:89:79:2d:94:9f:2a:e0:5e:95:a4:74:
                    ba:12:1d:10:64:14:38:7a:5a:20:d2:d3:ca:22:cb:
                    7c:ff:2b:4c:f7:6d:57:fa:49:84:9f:73:46:a2:1b:
                    cd:68:b4:37:f5:99:c7:86:43:68:dd:75:4e:b8:4f:
                    37:39:f9:27:b0:8a:60:61:70:e3:ff:3e:fc:45:32:
                    8a:9f:de:36:5c:61:c2:9b:62:ce:a4:9c:7a:50:a3:
                    c4:45:3e:9f:c1:02:13:8c:05:21:c0:57:18:98:e4:
                    bb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D0:15:6C:1B:23:C2:DC:4B:09:11:5B:30:CE:6E:B0:54:44:7B:7E
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gtAVbBsjwtxLCRFbMM5usFREe34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.246.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:07:2c:da:f4:56:6b:29:dc:21:81:5b:48:e5:ce:f8:e3:69:
         34:79:39:bf:fa:c8:42:8d:f1:9d:f8:b6:7b:88:f1:e6:a7:3e:
         76:bb:2a:72:27:75:36:c3:88:9e:d7:47:cb:d4:d7:0b:4d:bc:
         e4:b3:a1:3e:99:1e:79:13:97:80:c4:14:3f:70:a9:fd:20:96:
         91:fe:67:be:64:b8:ce:9d:a3:0d:e1:a4:1b:1a:ee:42:4b:f5:
         3c:ed:b2:bf:20:9b:83:be:6c:aa:28:d8:0a:4c:15:2b:b1:32:
         8b:50:51:7c:5e:cc:e2:87:ac:5f:d3:7f:cb:a5:7a:2e:fd:f1:
         2f:12:6a:d1:55:04:60:16:f6:f5:59:09:74:d2:ae:62:76:3c:
         7f:68:2d:f1:12:8d:f0:61:be:3d:db:fa:82:b7:24:84:b7:24:
         71:e2:f9:c3:11:99:ad:22:05:27:21:8e:61:2f:dc:48:7d:6f:
         f4:93:cd:59:ae:8e:fb:1e:fd:52:67:6a:3e:78:6a:1d:5b:13:
         fa:1c:1d:c3:d3:b4:a2:fd:14:78:8d:13:dc:99:bd:0c:00:91:
         6c:cd:39:d1:f7:24:a6:08:db:9a:5b:26:dd:f1:b9:54:e7:0c:
         5c:5e:db:b4:f4:ea:d2:eb:58:48:5a:b9:64:6f:41:77:d4:dc:
         a7:27:4b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 06:27:29 2026 by rpki-client