This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/gFCCxxR0ahmt0mXsK_NmxadCzY4.roa
File:                     gFCCxxR0ahmt0mXsK_NmxadCzY4.roa (raw, json)
Hash identifier:          F6IH/d9c7KoM8MKvRJtR95Z2YE78byk45lVJ9DWIUOE=
Subject key identifier:   80:50:82:C7:14:74:6A:19:AD:D2:65:EC:2B:F3:66:C5:A7:42:CD:8E
Certificate issuer:       /CN=561c7ccc52376787374092eafac2623e0571a81e
Certificate serial:       019B79ED34053B1746D7A82CBCA37F2F8C87
Authority key identifier: 56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/gFCCxxR0ahmt0mXsK_NmxadCzY4.roa
Signing time:             Thu 01 Jan 2026 14:19:06 +0000
ROA not before:           Thu 01 Jan 2026 14:19:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211332
IP address blocks:        91.233.183.0/24 maxlen: 24
                          2a09:f140::/29 maxlen: 29
                          2a0d:c140::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:34:05:3b:17:46:d7:a8:2c:bc:a3:7f:2f:8c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=561c7ccc52376787374092eafac2623e0571a81e
        Validity
            Not Before: Jan  1 14:19:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=805082c714746a19add265ec2bf366c5a742cd8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:44:3f:9f:57:1a:33:15:a0:19:76:56:a0:8f:
                    84:37:db:14:c1:09:ad:d7:5c:5b:fc:84:42:f4:f5:
                    d5:c9:c6:69:40:a4:71:25:77:7c:71:cd:db:27:08:
                    ce:60:ce:09:67:15:2b:bc:f8:1f:bf:0d:41:b4:34:
                    a6:ef:5f:8d:a5:bd:7b:4c:d5:f3:38:bb:ea:ec:c4:
                    b4:30:16:1d:a7:16:08:ae:72:b4:14:2b:15:e8:2c:
                    59:b9:6d:c9:a5:d1:b8:f4:60:77:74:7a:dd:6d:71:
                    30:0e:3b:1a:76:c3:25:ac:91:67:b7:90:1e:f5:f3:
                    dd:ed:b7:eb:b1:a2:05:36:e1:d2:9f:be:0e:fc:14:
                    2c:61:b4:b2:25:37:3e:b9:8b:78:f1:1a:ed:40:ce:
                    9b:0f:f1:48:26:50:ad:90:17:b8:5a:39:10:4e:c6:
                    59:aa:ee:b3:f4:ca:ef:44:be:07:a9:18:c1:b0:75:
                    7a:9e:87:3f:93:d0:1f:f5:8f:ec:be:b5:2a:17:e3:
                    b0:60:7f:60:fe:dc:87:e8:04:b9:35:57:a0:1f:f9:
                    ae:40:66:26:24:33:e0:6d:e2:78:12:00:5a:a8:78:
                    6e:8f:b7:7c:f1:98:08:d9:e9:76:7b:1c:4b:6a:f3:
                    dd:e0:75:c8:d6:e1:40:60:d4:9b:5e:7e:17:5f:7a:
                    aa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:50:82:C7:14:74:6A:19:AD:D2:65:EC:2B:F3:66:C5:A7:42:CD:8E
            X509v3 Authority Key Identifier:
                keyid:56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/gFCCxxR0ahmt0mXsK_NmxadCzY4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.233.183.0/24
                IPv6:
                  2a09:f140::/29
                  2a0d:c140::/29

    Signature Algorithm: sha256WithRSAEncryption
         59:1a:d5:5a:d4:5d:14:7f:6a:83:39:60:97:89:4c:75:50:7e:
         35:82:cb:fe:b8:b4:94:cd:1e:7a:35:6a:a1:0e:11:25:16:c1:
         47:e2:b7:ee:31:bf:e8:85:a2:04:9f:c5:9d:65:a2:66:5e:16:
         db:d1:a4:fa:a9:61:75:8c:20:3b:b5:8b:84:5e:c1:75:74:8c:
         e0:47:f8:f3:b2:21:38:de:a3:e5:fa:ef:a4:99:1d:d5:01:d4:
         32:7c:b4:a0:34:30:d4:ff:46:b8:9f:24:90:d2:eb:a9:d2:eb:
         60:21:45:1e:2c:4e:37:02:a9:4f:c1:43:27:46:78:87:43:5e:
         ac:9c:1f:50:de:47:85:3c:9d:83:c6:b2:a6:43:88:9d:42:aa:
         b9:92:5f:80:4c:28:b2:af:0e:53:11:47:68:3c:05:69:8c:5c:
         ff:26:74:7a:7a:ec:3f:39:ef:c9:26:1f:2a:25:cb:c8:f8:d8:
         35:51:ea:cd:db:10:11:e4:b6:10:63:1a:0a:1e:5c:7e:af:06:
         b0:fc:b5:d6:85:f7:dc:bf:8d:a4:39:4e:43:84:72:05:c5:79:
         cf:5c:9b:8e:5a:36:8f:3a:75:70:40:15:7d:c2:88:2f:8a:35:
         34:33:41:4a:c3:ab:37:e2:56:80:b3:8c:c7:3a:7d:f7:a1:d0:
         55:3d:cc:5c
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZt57TQFOxdG16gsvKN/L4yHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2MWM3Y2NjNTIzNzY3ODczNzQwOTJlYWZhYzI2MjNlMDU3
MWE4MWUwHhcNMjYwMTAxMTQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDUwODJjNzE0NzQ2YTE5YWRkMjY1ZWMyYmYzNjZjNWE3NDJjZDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEQ/n1caMxWgGXZWoI+EN9sUwQmt
11xb/IRC9PXVycZpQKRxJXd8cc3bJwjOYM4JZxUrvPgfvw1BtDSm71+Npb17TNXz
OLvq7MS0MBYdpxYIrnK0FCsV6CxZuW3JpdG49GB3dHrdbXEwDjsadsMlrJFnt5Ae
9fPd7bfrsaIFNuHSn74O/BQsYbSyJTc+uYt48RrtQM6bD/FIJlCtkBe4WjkQTsZZ
qu6z9MrvRL4HqRjBsHV6noc/k9Af9Y/svrUqF+OwYH9g/tyH6AS5NVegH/muQGYm
JDPgbeJ4EgBaqHhuj7d88ZgI2el2exxLavPd4HXI1uFAYNSbXn4XX3qqxwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFIBQgscUdGoZrdJl7CvzZsWnQs2OMB8GA1UdIwQY
MBaAFFYcfMxSN2eHN0CS6vrCYj4FcageMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmh4OHpGSTNaNGMzUUpMcS1zSmlQZ1Z4cUI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kY2EyNTctZDE2My00ZWQ5LTk0YWQt
YzE3MDA5MTI4M2ViLzEvZ0ZDQ3h4UjBhaG10MG1Yc0tfTm14YWRDelk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kY2EyNTctZDE2My00ZWQ5LTk0YWQtYzE3MDA5MTI4M2Vi
LzEvVmh4OHpGSTNaNGMzUUpMcS1zSmlQZ1Z4cUI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQAW+m3MBQE
AgACMA4DBQMqCfFAAwUDKg3BQDANBgkqhkiG9w0BAQsFAAOCAQEAWRrVWtRdFH9q
gzlgl4lMdVB+NYLL/ri0lM0eejVqoQ4RJRbBR+K37jG/6IWiBJ/FnWWiZl4W29Gk
+qlhdYwgO7WLhF7BdXSM4Ef487IhON6j5frvpJkd1QHUMny0oDQw1P9GuJ8kkNLr
qdLrYCFFHixONwKpT8FDJ0Z4h0NerJwfUN5HhTydg8aypkOInUKquZJfgEwosq8O
UxFHaDwFaYxc/yZ0enrsPznvySYfKiXLyPjYNVHqzdsQEeS2EGMaCh5cfq8GsPy1
1oX33L+NpDlOQ4RyBcV5z1ybjlo2jzp1cEAVfcKIL4o1NDNBSsOrN+JWgLOMxzp9
96HQVT3MXA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:26:31 2026 by rpki-client