This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/gIV-PtLXLT4xOhl2M8ZDrRWJN2c.roa
File:                     gIV-PtLXLT4xOhl2M8ZDrRWJN2c.roa (raw, json)
Hash identifier:          ez0j8r5ZrGXHsarz1DHJ3c6wCD32BsWkJMkUor30YR4=
Subject key identifier:   80:85:7E:3E:D2:D7:2D:3E:31:3A:19:76:33:C6:43:AD:15:89:37:67
Certificate issuer:       /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial:       019B7CEDA6DF76852A6607E58FCA634FC3DB
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/gIV-PtLXLT4xOhl2M8ZDrRWJN2c.roa
Signing time:             Fri 02 Jan 2026 04:18:28 +0000
ROA not before:           Fri 02 Jan 2026 04:18:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203446
IP address blocks:        92.242.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:a6:df:76:85:2a:66:07:e5:8f:ca:63:4f:c3:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
        Validity
            Not Before: Jan  2 04:18:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=80857e3ed2d72d3e313a197633c643ad15893767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:24:5d:24:a3:9f:57:26:02:46:16:c1:60:1d:
                    46:70:94:ea:aa:71:ff:be:9f:3d:f7:e1:f2:01:54:
                    67:c2:a8:75:49:a3:fa:cf:f7:8f:03:0f:04:90:6f:
                    38:c5:db:2d:ee:b8:bf:f2:6a:d7:60:d8:6b:19:9d:
                    b5:0b:a1:c7:30:05:6b:da:f4:31:7f:72:2b:53:34:
                    0d:bc:21:e9:85:e5:be:3a:81:29:ee:5b:50:0f:c6:
                    f9:71:a5:35:b6:2d:f5:c3:6d:34:75:9c:81:d1:15:
                    50:ac:91:70:c5:56:ff:82:a7:eb:8f:19:89:82:ec:
                    22:d4:9e:69:ee:f6:55:9f:a1:77:f1:0e:83:e2:4c:
                    27:71:bd:92:46:7e:50:f4:89:f0:3f:c7:b4:7d:86:
                    03:6d:28:dc:2c:e7:df:1a:48:1a:e8:ff:ad:2c:30:
                    1b:1d:0e:1e:9f:a0:3c:e6:71:3e:90:2d:1f:ce:40:
                    4b:f7:dc:7f:2c:2e:99:5b:41:de:89:85:e0:b1:5a:
                    8c:51:f2:9d:e4:f7:45:b9:49:5f:37:00:7d:77:7e:
                    45:e3:b9:fd:d8:90:94:99:44:1d:61:99:eb:0f:9f:
                    b3:c5:9b:0f:c8:40:cd:a1:b4:93:7f:b2:6f:cf:78:
                    11:b8:df:23:09:8e:a7:73:15:68:19:91:56:2e:17:
                    d1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:85:7E:3E:D2:D7:2D:3E:31:3A:19:76:33:C6:43:AD:15:89:37:67
            X509v3 Authority Key Identifier:
                keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/gIV-PtLXLT4xOhl2M8ZDrRWJN2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.242.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:1b:5f:43:25:61:09:72:96:b0:82:13:21:aa:e5:75:b5:5e:
         c5:86:c7:90:28:c0:5a:6f:32:7b:8b:5f:1f:6f:58:8c:a3:15:
         f3:96:03:c5:08:fe:49:c1:42:1e:be:6c:31:44:20:f5:9a:d4:
         7c:76:30:c2:83:dd:a2:32:12:a1:41:a2:7b:4d:92:4e:b4:01:
         bc:04:51:5c:61:b4:f4:55:31:00:79:72:e1:5d:6d:9b:37:d1:
         d0:27:3c:b0:d3:46:8f:f9:ff:02:cd:0b:5c:f1:66:b1:cf:65:
         db:72:92:88:d2:fe:cc:7b:f1:21:f2:02:78:d5:c2:bb:43:ef:
         cf:fa:8c:95:73:8e:52:78:29:b2:2c:a4:13:12:df:1d:a3:39:
         56:0a:56:31:3e:a9:49:ce:75:9b:17:21:b2:2c:78:eb:3d:c7:
         f4:48:f4:ed:5e:e1:f8:7f:14:a1:cb:1a:d4:76:7a:f0:35:e4:
         ea:8c:03:bb:cc:2d:4c:69:9c:18:20:08:7e:e4:86:b3:41:8b:
         39:7f:5e:5d:85:c7:e6:f3:89:05:c1:40:75:9e:3e:db:fb:da:
         2e:e3:a5:10:6b:3c:aa:d1:9a:2b:30:ea:7d:25:ce:74:d1:37:
         b1:b6:d9:b4:49:1b:cc:da:71:2b:c2:55:5d:5d:94:cd:58:8a:
         af:7d:53:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 09:20:58 2026 by rpki-client