This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/GJE_tPOgXeLJ3DgOojgp5O691hA.roa
File:                     GJE_tPOgXeLJ3DgOojgp5O691hA.roa (raw, json)
Hash identifier:          4D2iI83061LtWXrvOvTMbMz1c4sOHyfoyv2X47hDDUo=
Subject key identifier:   18:91:3F:B4:F3:A0:5D:E2:C9:DC:38:0E:A2:38:29:E4:EE:BD:D6:10
Certificate issuer:       /CN=d897faea94815e0520b46f185c3ebec29b376ef0
Certificate serial:       019B7C1191DBB92EF5257E2494490C75CDE4
Authority key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/GJE_tPOgXeLJ3DgOojgp5O691hA.roa
Signing time:             Fri 02 Jan 2026 00:18:04 +0000
ROA not before:           Fri 02 Jan 2026 00:18:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        95.130.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 15:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:11:91:db:b9:2e:f5:25:7e:24:94:49:0c:75:cd:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d897faea94815e0520b46f185c3ebec29b376ef0
        Validity
            Not Before: Jan  2 00:18:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=18913fb4f3a05de2c9dc380ea23829e4eebdd610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ea:46:e4:08:aa:e5:6a:d9:a3:b1:c1:50:40:
                    b0:dd:df:0a:8f:fb:cd:19:ce:cb:ad:f5:1c:02:14:
                    80:38:e5:6d:bc:76:47:33:f5:22:6c:01:08:be:59:
                    40:5f:49:53:19:bf:21:2a:ee:f8:18:69:7a:46:08:
                    76:da:af:65:d3:b3:94:b6:69:15:50:2f:a2:9d:3d:
                    f6:e3:29:24:13:db:b9:9f:54:68:7c:43:24:19:2f:
                    83:46:2b:6e:9f:db:d7:19:2f:fc:31:93:6f:70:2d:
                    5d:ff:a0:8c:ff:ba:04:51:5d:31:d1:66:e9:c2:c8:
                    55:e6:98:3a:86:22:9d:50:80:93:59:e9:b3:2b:4e:
                    51:35:d8:e5:b9:c4:21:91:74:16:29:94:2c:94:c3:
                    90:1f:53:64:ea:c5:cf:c5:bc:4a:de:9b:ea:31:99:
                    70:cd:36:61:15:ed:a4:31:30:e0:d1:87:d2:b1:8c:
                    49:6e:13:d2:09:90:a2:f6:54:e0:f0:7c:fa:08:39:
                    1f:af:f6:38:ff:8d:f3:be:ba:82:d7:9f:11:f5:59:
                    4f:8a:c5:bd:82:30:e8:0c:0f:4b:d7:81:8f:aa:2b:
                    24:83:0d:6c:0e:1a:a9:3f:bf:d8:53:33:c4:f9:c7:
                    f9:61:7f:ff:cd:5d:e2:79:70:28:b6:dc:c4:fe:06:
                    1d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:91:3F:B4:F3:A0:5D:E2:C9:DC:38:0E:A2:38:29:E4:EE:BD:D6:10
            X509v3 Authority Key Identifier:
                keyid:D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/GJE_tPOgXeLJ3DgOojgp5O691hA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.130.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:c0:63:ba:24:87:4f:96:95:70:52:ab:e5:2a:4d:51:f4:5a:
         8f:19:ae:72:99:9d:9e:bd:a1:db:84:f1:ae:88:72:f5:49:8a:
         49:89:62:03:15:ea:ba:fb:ff:f6:39:a1:a7:f3:0b:8b:31:73:
         9d:ed:f2:63:e4:39:a3:1d:70:7f:59:bb:c7:b7:c1:45:e3:f0:
         36:d6:2e:72:07:0a:87:db:ae:06:5b:7a:75:c3:8f:60:dd:6e:
         69:1c:80:74:58:be:98:84:a9:d6:c1:1b:10:27:4e:49:48:b8:
         52:e7:e1:50:f0:d4:8c:37:c9:fd:25:3e:85:da:4e:55:3e:99:
         f2:43:38:7b:76:84:cd:c6:13:72:49:c0:c3:87:2b:e8:62:2f:
         a4:91:19:cd:20:76:e4:40:01:0f:98:2d:cf:79:40:3f:ca:c9:
         be:8e:75:12:cb:fb:a9:c6:3b:18:1b:93:48:e2:d0:8f:25:99:
         d7:54:e3:53:ed:34:91:46:5b:7d:3e:83:86:64:84:cf:34:8e:
         5e:b4:72:ee:b3:aa:84:fa:cf:44:f8:ed:07:14:da:8d:f8:ec:
         b1:c2:d3:a8:31:ea:b4:11:34:bd:13:38:c3:03:e9:55:39:05:
         fb:97:9f:9f:b0:b4:94:68:96:18:67:2e:17:be:e9:49:2f:0a:
         67:54:49:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:47:42 2026 by rpki-client