This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/GQ-SbgfC8MIeM9gcufA_-1qzAXc.roa
File:                     GQ-SbgfC8MIeM9gcufA_-1qzAXc.roa (raw, json)
Hash identifier:          KV1JNt34o+H7DaSa9GDJPYnWz3s55bQ0FiJGe7uGgr0=
Subject key identifier:   19:0F:92:6E:07:C2:F0:C2:1E:33:D8:1C:B9:F0:3F:FB:5A:B3:01:77
Certificate issuer:       /CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Certificate serial:       019B7CEDDFC42539A4C664C5113AFB124675
Authority key identifier: 78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/GQ-SbgfC8MIeM9gcufA_-1qzAXc.roa
Signing time:             Fri 02 Jan 2026 04:18:42 +0000
ROA not before:           Fri 02 Jan 2026 04:18:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201223
IP address blocks:        193.134.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:df:c4:25:39:a4:c6:64:c5:11:3a:fb:12:46:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
        Validity
            Not Before: Jan  2 04:18:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=190f926e07c2f0c21e33d81cb9f03ffb5ab30177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:75:ad:f1:b0:cf:45:1a:b1:4a:34:0b:02:4f:
                    f1:aa:e1:5e:65:26:e9:f3:0d:34:db:7b:09:ff:1b:
                    81:51:90:60:12:68:c0:73:ed:36:b4:3c:15:17:7b:
                    a7:74:87:05:df:11:77:5a:e9:dd:58:07:1c:3d:af:
                    26:bd:ae:3e:e3:a8:4e:78:ac:db:79:4d:5a:00:0b:
                    4c:59:1c:fa:e4:d6:43:73:60:c7:5e:d8:8e:d2:5d:
                    17:8b:ff:b6:2f:16:a5:ab:a2:d9:57:0b:c6:02:bc:
                    f1:18:da:5f:74:78:53:b2:f1:52:5f:f3:83:9c:eb:
                    80:cd:fb:0e:ca:fb:90:5c:f2:78:bd:0b:06:99:90:
                    14:8d:59:c8:56:50:70:f6:56:38:ef:55:2c:c6:10:
                    46:cf:25:72:e7:79:93:5f:8c:a8:f7:dd:8f:e7:89:
                    ce:a7:83:6e:55:c8:79:dc:bf:9f:38:ca:93:05:0a:
                    92:a6:6c:de:47:a7:95:5e:d2:48:fe:15:76:98:53:
                    0f:6b:8b:52:22:ef:d8:2c:ad:51:64:63:f2:fd:ce:
                    31:57:ec:5d:2e:f4:33:03:ff:90:cd:47:95:ee:81:
                    c2:18:d9:9e:0f:3e:e1:66:49:e8:ea:0a:df:9e:fe:
                    27:81:89:35:bb:e5:d8:41:59:c9:06:d4:26:b8:cb:
                    74:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0F:92:6E:07:C2:F0:C2:1E:33:D8:1C:B9:F0:3F:FB:5A:B3:01:77
            X509v3 Authority Key Identifier:
                keyid:78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/GQ-SbgfC8MIeM9gcufA_-1qzAXc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.134.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:ba:7e:fd:08:80:02:07:af:b2:d3:42:77:6b:7e:7d:dd:1d:
         e2:c8:ac:ef:62:2a:db:9e:a2:91:dc:13:91:b9:da:7d:9a:33:
         10:78:fd:35:fb:d9:74:2a:23:d2:82:d2:9b:6a:b6:9e:fe:6e:
         0c:aa:23:17:0b:57:da:ea:7a:c9:c5:4a:88:30:71:df:30:2b:
         64:96:d3:f0:57:94:3b:35:23:a2:4b:6d:ac:ef:70:c2:ee:90:
         0a:b1:6e:57:36:95:5f:ad:97:c7:71:90:46:aa:1c:85:3a:f6:
         95:a8:bc:4f:d9:ab:02:a7:00:00:18:84:14:aa:ab:24:6c:d6:
         e8:a4:57:11:b2:77:2b:23:d2:e5:ad:49:d7:51:45:73:68:1f:
         34:a2:51:66:16:f3:8c:5f:9e:ec:b1:a0:0f:34:48:b1:da:83:
         a8:df:92:b7:d6:4c:c4:b0:1a:66:9b:84:2e:f0:f3:35:a0:1c:
         77:1d:e2:5f:00:cf:ce:21:65:58:f9:87:6b:e4:ca:2b:ed:71:
         3a:be:93:9c:61:85:29:be:50:3a:73:ad:c6:a9:90:be:94:f7:
         6f:2e:ca:ef:90:7d:f4:32:aa:39:65:93:4e:a8:9d:85:e2:ac:
         a9:a8:37:9d:f3:20:92:13:70:d5:95:5a:55:86:fa:e5:e2:ca:
         cf:3b:6a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:35 2026 by rpki-client