This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Gg6X3rP4M_HU28IjArylySmkiPs.roa
File:                     Gg6X3rP4M_HU28IjArylySmkiPs.roa (raw, json)
Hash identifier:          re0xx12aRVyU3Oz5YoKZNUQdKDWH3+edRSy/XUXja/E=
Subject key identifier:   1A:0E:97:DE:B3:F8:33:F1:D4:DB:C2:23:02:BC:A5:C9:29:A4:88:FB
Certificate issuer:       /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial:       019A969B8A6F9E506E11BD3A8B27ABB9B560
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Gg6X3rP4M_HU28IjArylySmkiPs.roa
Signing time:             Tue 18 Nov 2025 10:56:07 +0000
ROA not before:           Tue 18 Nov 2025 10:56:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     204154
IP address blocks:        92.118.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:96:9b:8a:6f:9e:50:6e:11:bd:3a:8b:27:ab:b9:b5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
        Validity
            Not Before: Nov 18 10:56:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1a0e97deb3f833f1d4dbc22302bca5c929a488fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f1:2c:d6:f3:db:fd:6a:61:cd:e5:7f:65:9b:
                    8a:8d:88:8b:fc:2d:f6:26:7e:fe:b8:8f:34:e5:bd:
                    11:d9:41:d5:16:a9:3e:f3:0d:91:59:8e:34:ee:e4:
                    6d:6a:6c:11:64:96:38:75:1a:72:ce:ad:5a:d3:ae:
                    ee:4e:d6:fe:41:8e:18:07:f2:db:97:0f:fe:73:2d:
                    df:e1:3e:77:e9:b7:20:de:32:cc:5c:4b:e8:54:6f:
                    c7:84:82:35:72:9a:ee:a7:1c:71:08:99:65:69:5c:
                    9a:f2:36:c6:26:3a:81:c1:24:8d:b8:60:67:0c:5c:
                    88:60:82:d7:0b:51:65:c6:01:56:be:9f:13:0c:78:
                    ff:b3:cf:e9:4c:8e:ff:94:03:07:27:96:00:35:96:
                    a4:01:d9:46:c1:fe:16:96:92:48:70:db:9c:cd:9f:
                    23:5d:06:79:97:72:00:5d:dd:43:89:11:42:22:1a:
                    3f:e9:c1:33:6f:06:ee:c2:02:8c:96:9c:71:e1:6a:
                    1d:9b:cc:16:ca:2b:b9:96:47:19:c6:c4:f2:a7:96:
                    7c:ea:03:77:32:40:c3:dc:9a:93:f3:b2:c3:3c:5a:
                    87:7e:15:ab:97:02:33:bc:17:6b:0b:44:ad:c4:d1:
                    cf:84:77:1e:33:5c:51:68:0a:41:4e:d3:7b:ca:71:
                    76:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0E:97:DE:B3:F8:33:F1:D4:DB:C2:23:02:BC:A5:C9:29:A4:88:FB
            X509v3 Authority Key Identifier:
                keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Gg6X3rP4M_HU28IjArylySmkiPs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:6f:5d:5a:67:51:5c:dd:d6:07:30:89:bd:cd:20:95:5e:cb:
         44:0a:8a:60:3f:8d:a5:9e:33:e8:1f:1d:00:17:00:32:fb:93:
         88:4b:a2:af:4e:55:b7:98:de:d5:07:d5:f8:73:c2:9a:ce:52:
         ec:7c:10:be:22:ef:d1:89:24:6c:42:0e:12:8c:77:56:0a:bb:
         5f:97:88:4a:79:ed:4a:36:c4:e3:ca:6f:ed:aa:1c:e0:3f:04:
         ab:68:fc:bf:6d:21:1c:dc:fd:ac:a9:8d:f9:08:fc:50:c6:db:
         42:2a:0b:eb:80:09:0d:60:ad:40:b0:28:3f:d0:bd:79:f2:87:
         bc:6c:e0:0e:e1:15:32:28:a4:29:ba:92:1a:d5:a6:c5:cc:5a:
         f7:f4:bc:17:2c:ae:c9:3b:82:8b:4d:51:af:18:af:8c:28:d0:
         4a:ea:f2:57:9f:75:c6:59:7b:dd:1f:2a:8c:1e:d8:22:ac:fb:
         25:1a:bc:05:49:c7:4f:7d:47:05:67:82:7d:c0:a6:f0:cc:61:
         f3:6c:2d:93:df:b5:14:a8:d9:d2:f2:ad:a8:be:73:e6:b5:d9:
         89:86:39:96:11:c7:15:30:33:9a:4c:9d:ce:28:e0:84:2e:59:
         5f:28:b4:64:b8:2a:6d:8a:79:7b:39:48:17:3c:c0:d0:e8:c8:
         ba:e6:e1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 20:32:59 2025 by rpki-client