This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/gcxp-EWnfFLHMrONlRoutn-Z7U8.roa
File:                     gcxp-EWnfFLHMrONlRoutn-Z7U8.roa (raw, json)
Hash identifier:          pfCAICQ/vVikMpFdMBXvwM28HdJs0Hi4u8HPJ1KDTPI=
Subject key identifier:   81:CC:69:F8:45:A7:7C:52:C7:32:B3:8D:95:1A:2E:B6:7F:99:ED:4F
Certificate issuer:       /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial:       019B7910331FB4B08BF9319662E0B391BFC7
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/gcxp-EWnfFLHMrONlRoutn-Z7U8.roa
Signing time:             Thu 01 Jan 2026 10:17:43 +0000
ROA not before:           Thu 01 Jan 2026 10:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     401443
IP address blocks:        45.149.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 23:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:33:1f:b4:b0:8b:f9:31:96:62:e0:b3:91:bf:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
        Validity
            Not Before: Jan  1 10:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=81cc69f845a77c52c732b38d951a2eb67f99ed4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1c:92:16:e5:40:39:01:21:44:c2:42:4c:67:
                    1d:fd:85:40:f7:c6:49:ad:7c:1b:ab:6c:b9:09:ce:
                    ad:29:43:08:90:35:f0:2d:07:81:11:9e:66:17:de:
                    c1:a0:cd:e6:3d:cd:c9:40:13:88:90:38:ba:df:a7:
                    81:e9:8b:ce:07:74:b4:14:be:29:23:59:b5:e5:84:
                    6f:3c:75:a1:f5:e5:31:6a:c4:4c:fc:29:25:ef:e8:
                    a0:9c:32:ff:23:57:64:1d:d8:52:d2:d2:8d:55:34:
                    1c:1f:8e:ab:60:0d:2c:c6:b5:a7:5e:f0:a5:21:e0:
                    9e:2d:58:9a:07:f9:1d:35:8d:9c:7d:75:d7:21:2d:
                    6a:e2:cd:3a:52:ee:b3:0a:0a:b4:6a:d6:22:ad:74:
                    03:97:cf:8e:03:50:1a:dd:86:70:ab:04:8d:95:fc:
                    fc:e6:82:ed:80:2d:76:36:2b:f8:ad:c3:0a:1f:1f:
                    26:b2:c9:22:c4:af:6a:a1:f3:be:ec:28:7c:7d:2e:
                    b5:e0:b6:0f:3a:66:fb:e0:ba:2d:63:8f:3b:73:87:
                    99:89:07:9f:fd:c4:a4:78:b4:f7:72:cb:c1:43:93:
                    2c:b5:8c:07:75:1b:c1:e4:c0:b7:78:5d:1e:8a:cf:
                    92:20:d9:a3:eb:ef:c9:8e:53:7d:e9:2a:a7:4a:42:
                    dc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CC:69:F8:45:A7:7C:52:C7:32:B3:8D:95:1A:2E:B6:7F:99:ED:4F
            X509v3 Authority Key Identifier:
                keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/gcxp-EWnfFLHMrONlRoutn-Z7U8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:b5:5c:c5:36:ed:b9:00:8f:4d:b4:44:72:c3:3c:1a:c7:9f:
         5c:ce:14:a2:47:89:b7:09:4a:a8:7c:78:fa:28:90:07:27:21:
         a3:1e:61:90:49:8e:98:da:5c:17:29:a2:61:9b:77:f2:07:94:
         54:a1:53:a7:a5:67:67:32:e6:43:e8:55:89:27:1c:96:2c:74:
         1a:6b:f4:68:da:43:3f:5c:f4:4e:81:62:86:19:4b:88:34:78:
         c8:a0:91:2a:2b:0e:31:9c:8b:0c:ec:c7:7e:93:55:4d:15:c7:
         26:52:74:09:16:58:66:04:e1:98:64:9e:b8:8b:96:64:a8:53:
         6f:3f:a9:ef:66:a3:b3:a1:d4:3a:37:88:6d:81:0b:ea:6b:4d:
         2c:5b:e7:94:de:8a:ed:35:f4:de:86:ba:0a:5f:3a:57:35:db:
         43:f4:9d:0a:9e:c1:91:98:13:59:7a:26:49:6f:cb:2d:e3:39:
         51:f1:8f:b7:55:8b:06:56:93:7f:75:c3:6f:0c:72:e9:cd:8b:
         b1:a2:f8:df:b2:c9:d7:ff:30:60:f5:c3:e1:a1:97:a7:df:d0:
         3a:f0:d5:45:dc:e3:43:31:7b:c4:d0:b6:cc:fc:7c:17:21:d9:
         6b:c9:29:1e:31:e2:b6:54:1e:a5:ff:84:fa:64:c5:a3:f4:04:
         8f:af:4f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 09:12:13 2026 by rpki-client