This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/G3uJYRSZUjfrvtiFmlyRvRhBBnA.roa
File:                     G3uJYRSZUjfrvtiFmlyRvRhBBnA.roa (raw, json)
Hash identifier:          1tM7Vw8K0/gUIeZ/iYC6KYD4hpW6Ty8UDOVU+XXhmB8=
Subject key identifier:   1B:7B:89:61:14:99:52:37:EB:BE:D8:85:9A:5C:91:BD:18:41:06:70
Certificate issuer:       /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial:       019B7C8049841EEDF0B7034180682197C403
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/G3uJYRSZUjfrvtiFmlyRvRhBBnA.roa
Signing time:             Fri 02 Jan 2026 02:19:00 +0000
ROA not before:           Fri 02 Jan 2026 02:19:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     64267
IP address blocks:        185.113.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 08:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:49:84:1e:ed:f0:b7:03:41:80:68:21:97:c4:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
        Validity
            Not Before: Jan  2 02:19:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1b7b896114995237ebbed8859a5c91bd18410670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:a0:a9:b3:f7:ad:7d:2b:ad:cf:d5:9e:19:
                    b3:92:97:22:03:5b:5e:bb:eb:1a:ac:a0:02:4b:79:
                    04:9b:84:85:9e:88:10:4b:02:d1:db:c5:e6:f2:11:
                    f5:4f:fb:73:25:e5:53:ab:60:ff:27:03:b2:e8:7b:
                    31:09:db:a9:81:0f:6f:11:bd:10:16:38:7a:10:0d:
                    22:96:eb:e6:74:a6:69:75:6b:8c:2f:c7:f4:95:b2:
                    74:b7:ad:a7:06:9d:66:03:ff:18:cb:c2:48:4c:8f:
                    29:8e:a5:c8:92:a5:4b:54:9a:dd:9b:1d:13:40:df:
                    7b:a8:0b:1b:44:a3:3e:45:24:69:3e:6e:8b:e1:11:
                    f3:86:c9:ad:19:04:5f:65:b3:05:81:97:25:29:e7:
                    4c:48:cf:23:f8:66:6f:b6:ce:ff:20:a2:98:72:52:
                    a9:2c:09:5b:b2:ce:3b:b2:f1:bc:b7:ae:f4:6c:e9:
                    13:0d:15:1f:40:e8:09:c9:ec:19:4f:cd:c7:d8:68:
                    5b:a5:39:a4:1c:e9:e0:11:03:63:09:ca:91:b0:58:
                    e6:1a:41:a4:d7:05:0f:4f:1a:fc:e1:80:15:3d:b6:
                    ee:2a:2c:81:8f:d3:e4:86:be:b3:00:7d:fa:43:aa:
                    bc:6a:c0:f7:1b:d2:e5:0a:80:74:f8:47:18:a1:73:
                    46:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7B:89:61:14:99:52:37:EB:BE:D8:85:9A:5C:91:BD:18:41:06:70
            X509v3 Authority Key Identifier:
                keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/G3uJYRSZUjfrvtiFmlyRvRhBBnA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.113.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:f8:9e:bc:c9:a6:18:a2:77:ac:1b:77:98:b9:6d:5e:41:6d:
         fa:ca:44:6f:85:6f:bf:d6:55:3b:34:2c:07:3e:eb:46:bc:41:
         43:76:73:77:6d:40:f2:eb:4a:74:a8:3c:c7:41:71:db:4a:2f:
         2a:d3:95:58:ee:7a:42:de:8f:f3:37:14:53:40:17:5c:49:4c:
         17:6c:d8:9e:78:e0:e8:0d:e7:b0:d1:3e:17:25:72:88:a1:22:
         c1:b3:b3:01:64:08:25:1c:73:98:75:22:4e:0d:be:4a:02:2f:
         42:39:cd:20:7b:ab:6b:27:85:96:87:15:da:0a:4f:a2:ca:fa:
         59:97:a1:b2:cd:a8:9c:c5:8c:3f:98:b5:39:83:54:f5:1d:da:
         20:29:76:a5:2b:00:57:b0:d6:1e:9f:ea:bd:d2:4a:22:d9:27:
         76:f3:74:1e:4d:63:a4:b5:c8:80:cf:d2:07:3c:70:66:a4:e5:
         95:fd:69:79:df:67:90:2e:f1:d6:4c:b0:53:b0:2e:64:f0:c7:
         6d:b0:7c:9f:de:e9:53:db:06:89:35:63:9d:63:3e:d7:4d:2c:
         cb:3f:55:ee:8f:e6:02:c9:85:b9:b4:4d:bf:c5:a2:77:50:96:
         75:95:0c:29:55:da:d2:fc:90:09:37:ec:49:53:35:06:c9:71:
         a0:d7:dd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 10:37:11 2026 by rpki-client