This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/gP563nxVMA_mNyBlWZLFCY-wLxE.roa
File:                     gP563nxVMA_mNyBlWZLFCY-wLxE.roa (raw, json)
Hash identifier:          aJwn1metHDcgL3IPWwXXHA6UIOyTz7dqDhcJZeynSIg=
Subject key identifier:   80:FE:7A:DE:7C:55:30:0F:E6:37:20:65:59:92:C5:09:8F:B0:2F:11
Certificate issuer:       /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial:       019B7758896FDFFDC67313D1B68372F5A896
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/gP563nxVMA_mNyBlWZLFCY-wLxE.roa
Signing time:             Thu 01 Jan 2026 02:17:29 +0000
ROA not before:           Thu 01 Jan 2026 02:17:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15557
IP address blocks:        193.54.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 23:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:89:6f:df:fd:c6:73:13:d1:b6:83:72:f5:a8:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
        Validity
            Not Before: Jan  1 02:17:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=80fe7ade7c55300fe63720655992c5098fb02f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:61:e8:c3:0e:32:ca:32:a5:4c:8a:2e:06:99:
                    bd:c2:15:f4:e5:3f:84:51:cd:3c:be:fa:1f:31:57:
                    d1:96:35:cf:5c:1f:99:51:74:7a:fc:bf:f3:9e:b2:
                    75:b2:1d:dd:4e:c0:c3:c8:27:3c:3e:58:af:ba:24:
                    0c:15:2e:22:30:cd:16:02:77:f7:00:64:8e:f7:b1:
                    6a:51:06:11:35:88:10:99:e8:0e:56:0a:0d:20:b8:
                    c9:05:de:38:86:f0:9d:ed:41:7f:ae:8f:a1:02:60:
                    b3:8a:2e:c8:1b:28:f0:d1:3e:52:5c:fe:11:0d:e3:
                    3e:50:93:ae:8c:4d:db:fa:6f:41:fd:d0:28:ab:78:
                    e7:3e:6e:90:85:46:15:1c:04:c7:85:ad:9e:0c:6a:
                    6d:95:2f:73:28:4f:0a:96:e5:98:a3:03:d6:51:3b:
                    7e:07:28:26:24:23:67:71:b0:86:90:a5:b4:2b:d6:
                    4d:7f:22:ca:57:94:fd:ee:1f:40:89:13:b4:f9:19:
                    be:24:84:f8:74:15:0e:bb:07:c9:b3:12:1a:ad:26:
                    12:6c:67:67:40:d8:a4:d2:39:db:4e:f3:b2:52:96:
                    52:a0:b3:a6:cc:6c:7f:ae:cf:1d:4a:7f:e9:1e:de:
                    93:63:b1:b2:a3:a3:fe:44:79:52:be:ce:7e:f6:08:
                    cd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FE:7A:DE:7C:55:30:0F:E6:37:20:65:59:92:C5:09:8F:B0:2F:11
            X509v3 Authority Key Identifier:
                keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/gP563nxVMA_mNyBlWZLFCY-wLxE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.54.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:f7:4f:c6:40:c2:d4:6c:aa:94:70:94:4e:88:c1:f8:06:b3:
         49:46:16:fe:1d:45:c1:50:c2:a3:f9:03:69:0b:24:b7:ad:42:
         de:e4:23:22:e0:06:02:87:b7:8e:aa:81:24:64:a6:22:ce:11:
         e3:41:3c:04:66:b7:2d:5e:c5:2b:89:c0:ab:61:47:18:5d:66:
         0f:ac:ac:0d:34:36:be:10:5c:a4:ea:ed:d6:5f:3a:0e:13:72:
         20:7e:16:7d:cc:39:5e:7a:d3:a1:e1:23:68:28:6d:f2:eb:55:
         e5:20:4d:e9:a3:1a:d1:a1:2f:b7:f2:41:ce:23:79:63:b6:14:
         37:d1:67:d5:c9:49:67:48:fe:67:d0:02:55:a4:8a:af:22:65:
         78:dd:e1:6e:41:87:a7:7a:24:84:86:af:9b:b9:87:cf:70:9c:
         f3:f8:65:df:d0:1b:02:d4:5a:c0:ef:77:eb:a1:5a:0b:04:e4:
         12:d7:9d:7d:de:a4:73:93:f9:c9:5f:5d:de:6c:be:ce:45:7d:
         af:d9:28:3c:4c:f5:82:27:e1:5f:6e:4a:42:42:37:50:0e:26:
         2b:fb:eb:29:fe:68:ad:45:af:17:ee:6e:16:15:32:2c:6b:93:
         fa:b8:ed:f5:fb:d4:dd:5b:dc:47:bc:df:0e:8c:69:69:55:67:
         62:c5:a4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 06:07:47 2026 by rpki-client