This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/GDZOZ4mtCEcJoiMuaJ1tLH9DlTI.roa
File:                     GDZOZ4mtCEcJoiMuaJ1tLH9DlTI.roa (raw, json)
Hash identifier:          WoAoGW+naW99uV6BTxJozPE3sFVXXT3q0KzaYKTdNGk=
Subject key identifier:   18:36:4E:67:89:AD:08:47:09:A2:23:2E:68:9D:6D:2C:7F:43:95:32
Certificate issuer:       /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial:       019B7D5C914FD232512C53B1760322A721DD
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/GDZOZ4mtCEcJoiMuaJ1tLH9DlTI.roa
Signing time:             Fri 02 Jan 2026 06:19:37 +0000
ROA not before:           Fri 02 Jan 2026 06:19:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60192
IP address blocks:        95.105.80.0/22 maxlen: 22
                          95.105.80.0/23 maxlen: 23
                          95.105.80.0/24 maxlen: 24
                          95.105.81.0/24 maxlen: 24
                          95.105.82.0/23 maxlen: 23
                          95.105.82.0/24 maxlen: 24
                          95.105.83.0/24 maxlen: 24
                          185.162.32.0/22 maxlen: 22
                          185.162.32.0/23 maxlen: 23
                          185.162.32.0/24 maxlen: 24
                          185.162.33.0/24 maxlen: 24
                          185.162.34.0/23 maxlen: 23
                          185.162.34.0/24 maxlen: 24
                          185.162.35.0/24 maxlen: 24
                          193.104.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:91:4f:d2:32:51:2c:53:b1:76:03:22:a7:21:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
        Validity
            Not Before: Jan  2 06:19:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=18364e6789ad084709a2232e689d6d2c7f439532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b9:a5:69:6f:0e:78:a2:5f:4e:a3:8e:0f:05:
                    9a:82:9b:bd:a8:82:96:4f:fc:45:a5:0c:e5:58:14:
                    18:58:77:72:79:63:f1:a4:89:76:ca:87:2b:fe:4b:
                    15:01:28:98:64:d5:49:1c:f4:00:4b:67:85:8d:62:
                    88:35:79:e3:bd:30:59:88:9b:ea:66:37:2b:54:b2:
                    d6:7e:6c:34:29:97:e6:e4:66:c3:0b:18:dc:c3:ae:
                    36:7f:53:2c:24:2e:8c:66:55:c3:f2:1c:cf:bb:a0:
                    f0:38:e4:8f:9d:4b:5f:e8:c6:83:8d:d1:9e:0e:c7:
                    70:af:9d:15:fb:f5:f0:5a:d6:17:fc:6b:d2:63:ff:
                    f4:41:35:23:9d:5d:c5:66:59:ad:87:24:33:04:c4:
                    85:78:d9:16:14:2f:0b:be:bd:db:60:73:9d:b5:51:
                    4d:cd:26:ec:29:93:4b:10:9f:75:93:4f:d1:c5:81:
                    0a:23:30:6b:b4:ad:f7:c2:b3:a2:f7:e1:62:eb:c3:
                    aa:6b:33:2c:03:99:65:5e:54:e4:55:91:8e:c5:74:
                    d2:59:32:fb:57:08:45:76:9c:77:5f:d9:db:ed:5e:
                    9b:03:e7:11:a1:60:24:6f:b5:94:5f:6a:98:9c:70:
                    f6:82:a2:14:c8:5d:30:d8:61:88:f7:8d:9f:6f:48:
                    91:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:36:4E:67:89:AD:08:47:09:A2:23:2E:68:9D:6D:2C:7F:43:95:32
            X509v3 Authority Key Identifier:
                keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/GDZOZ4mtCEcJoiMuaJ1tLH9DlTI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.105.80.0/22
                  185.162.32.0/22
                  193.104.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:c6:6b:4c:4d:02:2f:57:2f:ca:4b:34:cf:52:62:63:62:0e:
         f3:25:1d:96:ce:0c:ab:1d:db:57:0b:49:95:cb:c6:a2:3e:07:
         7c:6b:62:d9:16:41:ca:64:42:72:66:00:73:8e:68:35:a8:66:
         70:82:5d:3e:4d:6c:83:f4:ee:f2:ef:e3:cf:d2:48:0b:55:9a:
         d2:06:2b:18:38:9e:64:75:35:b1:d3:0c:e6:95:ed:2c:cc:cf:
         30:a6:d1:92:7a:c3:85:ec:7d:8a:fd:ef:34:40:c3:d3:d1:5d:
         2d:ae:a7:1d:2f:52:3c:0f:7e:60:6d:dc:21:25:39:eb:aa:87:
         1a:3b:93:a0:9c:2b:c2:5a:cf:94:ba:14:3a:2a:61:21:8c:0a:
         f8:2f:50:68:5c:a5:bb:f8:c0:d2:c5:fc:ba:b3:6b:40:80:e1:
         d3:24:3f:d0:de:6f:f4:d2:82:c5:6a:99:ee:dd:c3:24:e2:09:
         b4:ef:63:a9:28:79:4b:21:32:ff:93:01:51:ea:fb:2e:07:38:
         b9:98:bb:19:2d:64:63:5b:55:7d:58:06:ce:38:6d:76:15:90:
         6c:55:ea:4e:6e:fc:d9:62:06:46:cf:ac:4d:a7:65:60:c3:74:
         5b:0c:22:fd:a2:96:71:8f:5b:b4:7f:08:cc:7d:76:42:98:c2:
         76:49:17:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:05 2026 by rpki-client