This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/GViLUpBKhpnABkhMhuMdD2J_oqw.roa
File:                     GViLUpBKhpnABkhMhuMdD2J_oqw.roa (raw, json)
Hash identifier:          7Bdn6jISx+wiSsw/Erals+/gDIwz2wOl6w9gjca7wOc=
Subject key identifier:   19:58:8B:52:90:4A:86:99:C0:06:48:4C:86:E3:1D:0F:62:7F:A2:AC
Certificate issuer:       /CN=0c4219d2bf09b6985ccd5d48fd94d2b21b804ec6
Certificate serial:       019C1DB7CB40B0FB7A3F0EF65CEA48782DD8
Authority key identifier: 0C:42:19:D2:BF:09:B6:98:5C:CD:5D:48:FD:94:D2:B2:1B:80:4E:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DEIZ0r8JtphczV1I_ZTSshuATsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/GViLUpBKhpnABkhMhuMdD2J_oqw.roa
Signing time:             Mon 02 Feb 2026 09:38:30 +0000
ROA not before:           Mon 02 Feb 2026 09:38:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49628
IP address blocks:        213.177.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DEIZ0r8JtphczV1I_ZTSshuATsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:b7:cb:40:b0:fb:7a:3f:0e:f6:5c:ea:48:78:2d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c4219d2bf09b6985ccd5d48fd94d2b21b804ec6
        Validity
            Not Before: Feb  2 09:38:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=19588b52904a8699c006484c86e31d0f627fa2ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ab:77:dd:d6:04:16:d1:58:05:1b:5d:bc:2a:
                    cc:d5:30:b0:53:6a:5c:9a:02:09:2f:89:b9:01:f7:
                    34:8b:7c:31:19:35:37:e4:aa:7b:d2:26:47:1b:ce:
                    c2:ef:97:23:34:d6:be:e0:3d:46:85:78:94:64:96:
                    90:e2:6d:f1:72:b9:c5:0d:2b:e4:a3:39:35:65:cd:
                    45:55:02:1d:8e:47:9f:36:1b:ee:51:be:54:9e:82:
                    76:14:4f:88:3b:72:cc:18:a4:8e:ba:d1:59:ce:47:
                    00:1d:e9:4b:bb:7d:43:b8:d8:e6:fe:b1:c1:94:dd:
                    81:17:a4:a3:9b:d1:89:d1:80:bd:75:77:59:b8:7b:
                    f0:42:7b:01:74:5f:c4:32:d9:40:e0:50:41:d1:d5:
                    90:f8:88:a5:55:94:f3:10:21:7c:34:3a:7e:6b:cc:
                    7c:35:cb:85:e3:59:1b:a8:ce:ae:d7:fa:73:ce:42:
                    83:66:22:f8:a4:7c:39:56:c2:a1:d0:43:db:22:84:
                    ca:44:50:ac:ce:81:81:df:07:e6:ab:39:4c:90:84:
                    ee:26:1d:2b:30:8c:8a:14:05:6e:aa:b3:91:12:4d:
                    bb:c8:eb:5f:51:5a:1d:76:af:67:2f:9d:83:4a:0e:
                    35:41:18:1d:fd:b7:36:cd:c7:2c:55:9d:c7:29:9b:
                    8f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:58:8B:52:90:4A:86:99:C0:06:48:4C:86:E3:1D:0F:62:7F:A2:AC
            X509v3 Authority Key Identifier:
                keyid:0C:42:19:D2:BF:09:B6:98:5C:CD:5D:48:FD:94:D2:B2:1B:80:4E:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEIZ0r8JtphczV1I_ZTSshuATsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/GViLUpBKhpnABkhMhuMdD2J_oqw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.177.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:8b:bc:6c:0a:96:c3:36:cb:6c:35:e8:93:1d:12:9d:45:50:
         a3:ac:e2:dd:c1:14:09:df:ca:aa:16:aa:87:c0:78:f1:dd:f6:
         18:40:63:d7:8e:50:da:6a:23:e2:4d:79:b8:9e:0c:c8:01:a4:
         82:e0:ad:b4:c9:7d:1e:0e:15:b3:50:7c:99:53:e9:f4:50:22:
         51:61:d8:22:ec:a2:3a:07:e9:bc:2e:9e:43:94:b6:1c:7d:86:
         5e:f8:da:50:34:ec:5a:63:08:17:79:dd:68:0f:db:de:97:29:
         6a:c5:5a:4e:4e:4d:37:cd:39:74:a3:7f:1c:b5:cd:5f:05:ac:
         57:a2:79:52:5f:17:03:80:1b:01:92:03:12:91:98:44:39:fc:
         c8:1c:aa:40:55:3b:77:05:ef:5a:25:12:00:f8:8b:71:47:a7:
         77:04:56:af:3b:b9:dd:82:94:b1:19:98:06:2e:39:e5:ee:41:
         8f:07:01:71:c5:a1:12:80:bd:8d:e0:57:02:76:81:63:7b:96:
         14:53:f9:86:2d:ab:12:22:3e:ae:5e:dc:d3:7c:ce:cb:8a:80:
         3e:49:ba:27:c5:2b:6f:35:7d:a4:56:0a:5a:45:c8:c5:e6:6c:
         43:33:b4:03:5e:6d:15:76:8e:72:87:2e:d9:31:16:51:ea:50:
         05:3e:63:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:24:21 2026 by rpki-client