This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/GCPkG596DrwW9MlXIg_7S_qYA_o.roa
File:                     GCPkG596DrwW9MlXIg_7S_qYA_o.roa (raw, json)
Hash identifier:          I3abi/E2e8nJD+Eich2ccFigBAvMHYp3dH5S973RzAY=
Subject key identifier:   18:23:E4:1B:9F:7A:0E:BC:16:F4:C9:57:22:0F:FB:4B:FA:98:03:FA
Certificate issuer:       /CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
Certificate serial:       019C0F852837DFF8EC70C220FDD2A00BA488
Authority key identifier: 59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/GCPkG596DrwW9MlXIg_7S_qYA_o.roa
Signing time:             Fri 30 Jan 2026 15:28:30 +0000
ROA not before:           Fri 30 Jan 2026 15:28:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     396982
IP address blocks:        155.55.196.0/22 maxlen: 22
                          2001:678:850::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0f:85:28:37:df:f8:ec:70:c2:20:fd:d2:a0:0b:a4:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
        Validity
            Not Before: Jan 30 15:28:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1823e41b9f7a0ebc16f4c957220ffb4bfa9803fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:40:27:9b:d3:16:31:39:39:66:47:db:01:c2:
                    7c:49:a0:bd:23:37:ee:93:21:38:15:d2:12:74:0a:
                    f8:97:96:91:9a:da:14:d9:79:a6:58:68:64:18:8d:
                    ca:99:94:e6:b6:97:7a:97:d0:68:a0:45:90:a8:dd:
                    b3:2e:9e:04:c2:77:62:93:6d:a1:dd:da:7e:46:f8:
                    66:a7:d0:92:af:4d:f8:f4:ac:d3:98:79:64:4e:47:
                    34:8e:a7:0c:5a:55:a7:fe:1a:cb:b3:4d:3e:99:b2:
                    ff:dc:d7:81:3f:b0:09:eb:99:49:89:1f:81:65:2f:
                    e9:06:18:3b:81:37:f0:aa:13:12:4c:dd:2d:06:da:
                    ac:af:3f:9e:fd:e3:5e:8e:33:aa:be:15:3b:0a:f0:
                    9e:e5:23:2d:6b:0f:af:9b:11:eb:28:38:a1:e4:2c:
                    0b:4b:f5:2e:24:e1:ce:64:0f:03:ae:3f:a9:54:31:
                    cf:c8:3c:52:ed:6a:b7:30:74:f1:4c:5f:a0:bf:a1:
                    43:81:3d:83:87:c5:d1:6a:1f:54:72:36:6b:f2:cd:
                    9e:39:0e:82:67:c3:45:21:b6:5a:5c:ff:12:f3:2c:
                    1e:cd:8a:a5:1b:67:de:fe:54:1e:bf:7b:af:fe:77:
                    53:30:a4:13:a3:ce:57:48:89:57:8a:92:49:78:54:
                    d8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:23:E4:1B:9F:7A:0E:BC:16:F4:C9:57:22:0F:FB:4B:FA:98:03:FA
            X509v3 Authority Key Identifier:
                keyid:59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/GCPkG596DrwW9MlXIg_7S_qYA_o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.55.196.0/22
                IPv6:
                  2001:678:850::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:92:83:dc:62:09:8a:4b:26:2c:89:68:13:9f:5b:08:2f:3f:
         a2:3d:a4:26:80:cb:ae:18:c9:6f:c5:0b:a2:0b:aa:ec:b3:9e:
         58:a5:e3:ba:99:37:a2:70:27:86:72:78:cc:5b:4d:4c:92:af:
         29:38:71:f8:f8:f3:76:75:45:83:94:09:52:2b:e0:b8:bf:67:
         ae:46:15:b2:70:10:25:e7:1e:19:f0:ff:4c:57:c0:51:ed:99:
         e5:76:c6:b9:66:dc:7d:d3:5b:34:82:c0:f0:22:a2:76:96:ff:
         2a:d3:56:5c:6a:8a:e2:54:59:6d:36:11:06:3c:79:18:d5:7e:
         e1:b7:90:90:67:7c:e3:c4:50:84:2e:f8:48:59:75:c0:ef:29:
         0a:62:88:e6:04:4e:9d:43:cd:b8:12:a4:67:50:a5:46:7d:c3:
         c2:e8:2e:d0:fa:39:c8:65:3f:12:34:8f:d6:8e:34:30:91:c4:
         11:1c:49:2f:04:80:f7:9c:43:21:aa:1c:a9:4a:73:ed:3b:9b:
         51:17:1f:b1:d0:00:20:eb:4b:4e:1e:d9:0c:1b:77:32:73:a1:
         fa:1d:50:03:ab:82:d1:73:7b:45:d7:a0:62:f4:cf:f6:31:99:
         11:e5:30:ec:2f:a2:e2:fc:aa:d1:5b:9b:c3:eb:3a:a2:27:be:
         ea:15:8d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:16:55 2026 by rpki-client