This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/GiGVJdmKecTDzES4xuGNepN-ljA.roa
File:                     GiGVJdmKecTDzES4xuGNepN-ljA.roa (raw, json)
Hash identifier:          2LeON6ht+y6rThTLAC5r6s9XniJIT+LKa/sbIZg3WNg=
Subject key identifier:   1A:21:95:25:D9:8A:79:C4:C3:CC:44:B8:C6:E1:8D:7A:93:7E:96:30
Certificate issuer:       /CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Certificate serial:       019B78A225F84E9FADE5E17226E1C54364D4
Authority key identifier: 57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/GiGVJdmKecTDzES4xuGNepN-ljA.roa
Signing time:             Thu 01 Jan 2026 08:17:31 +0000
ROA not before:           Thu 01 Jan 2026 08:17:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50103
IP address blocks:        185.186.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:25:f8:4e:9f:ad:e5:e1:72:26:e1:c5:43:64:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
        Validity
            Not Before: Jan  1 08:17:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1a219525d98a79c4c3cc44b8c6e18d7a937e9630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d9:60:2e:96:a1:e3:3a:0d:b5:67:c0:4e:19:
                    88:9e:a7:ea:d1:2f:65:1e:6a:b7:fd:fb:56:0e:c7:
                    0d:24:ba:53:af:c3:33:42:19:84:14:0a:94:d9:91:
                    de:4b:7d:90:cd:81:82:48:3e:77:c5:11:89:30:9d:
                    ad:7e:f3:59:e6:df:76:dd:a6:47:2a:9d:1a:e5:27:
                    f8:06:c3:e2:6c:73:22:db:f2:8e:37:d6:5c:8e:0e:
                    11:91:e9:23:73:96:2b:ae:0c:91:4b:55:cf:bb:f4:
                    a1:15:cd:16:5e:ee:37:70:c4:75:29:72:27:39:42:
                    93:76:8e:e2:d2:01:98:4a:7f:fb:20:cc:4c:8d:95:
                    5a:2d:c5:d4:67:83:8a:90:29:80:92:63:ad:9f:01:
                    62:99:86:1f:e0:03:80:65:15:50:53:b4:54:18:71:
                    47:17:52:07:a4:d3:60:e3:fb:4a:b5:27:26:20:1b:
                    0f:a5:0f:a7:01:d5:bb:bb:50:e0:7c:4e:55:6d:90:
                    7d:5c:7d:cb:cf:09:f7:b6:27:53:9b:98:03:86:d1:
                    45:1b:e3:a9:54:ea:78:38:be:1e:46:70:d8:d3:d3:
                    fc:f4:a5:c2:3a:ba:fa:ad:26:15:21:25:c5:9f:71:
                    00:cc:5b:2e:66:c7:35:b0:e3:d3:32:3b:a0:66:02:
                    77:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:21:95:25:D9:8A:79:C4:C3:CC:44:B8:C6:E1:8D:7A:93:7E:96:30
            X509v3 Authority Key Identifier:
                keyid:57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/GiGVJdmKecTDzES4xuGNepN-ljA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.186.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:7d:59:d2:c7:0e:16:32:58:ad:56:8c:f8:01:df:61:88:2a:
         91:df:c9:e7:e7:f9:37:74:d9:70:88:ec:75:97:9d:57:23:d6:
         fc:73:e5:23:89:c0:c3:22:4d:db:ee:f4:ef:9f:35:40:32:10:
         dc:f6:74:6f:28:70:eb:9d:71:f0:f8:60:7e:a2:75:f3:70:f3:
         01:7d:c1:ab:d2:fc:96:f8:67:c8:d1:70:74:8b:07:0e:78:c8:
         d2:7b:73:2f:80:4b:46:df:f0:f2:80:b4:c5:e8:d5:d1:ad:69:
         33:a4:9d:76:b8:9b:2c:b2:27:5b:2e:28:dc:8e:51:a7:8a:dc:
         7c:dd:40:8d:ce:3d:92:61:c7:46:b6:51:f7:48:47:f0:cb:6b:
         e5:4e:46:57:b6:2a:47:c1:64:af:9c:53:f5:0c:4a:06:74:cd:
         16:e5:9e:62:d1:ee:97:7b:63:2b:55:d8:fb:ef:b0:7a:9c:57:
         dc:88:0f:53:43:4d:7f:cb:0a:a1:87:84:33:ae:dc:50:4f:94:
         00:7d:b5:f6:b9:05:8d:eb:f2:a1:70:76:e9:a0:ab:df:48:28:
         fc:43:f2:af:72:ab:eb:b8:eb:1c:96:09:b2:66:f0:8a:10:b7:
         25:38:d2:08:a5:f0:bd:6e:37:1c:28:93:ff:71:d5:32:b7:cc:
         d9:14:82:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:55:30 2026 by rpki-client