This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/GbzVHVPV7fqmfNx03Nok7Xwc57w.roa
File:                     GbzVHVPV7fqmfNx03Nok7Xwc57w.roa (raw, json)
Hash identifier:          zeJi6kvcTN0CQfz2lKYhPJQbiGipkfJNH0B8vGsiI7o=
Subject key identifier:   19:BC:D5:1D:53:D5:ED:FA:A6:7C:DC:74:DC:DA:24:ED:7C:1C:E7:BC
Certificate issuer:       /CN=984503d4d18140b92aa8923193101d0f3eafe2c3
Certificate serial:       019B7C7FF1A547221295184CA683906DE519
Authority key identifier: 98:45:03:D4:D1:81:40:B9:2A:A8:92:31:93:10:1D:0F:3E:AF:E2:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/GbzVHVPV7fqmfNx03Nok7Xwc57w.roa
Signing time:             Fri 02 Jan 2026 02:18:38 +0000
ROA not before:           Fri 02 Jan 2026 02:18:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     52183
IP address blocks:        193.5.116.0/24 maxlen: 24
                          193.5.117.0/24 maxlen: 24
                          193.5.118.0/24 maxlen: 24
                          193.5.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:f1:a5:47:22:12:95:18:4c:a6:83:90:6d:e5:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984503d4d18140b92aa8923193101d0f3eafe2c3
        Validity
            Not Before: Jan  2 02:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=19bcd51d53d5edfaa67cdc74dcda24ed7c1ce7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f4:36:8f:d7:dd:9d:fb:b1:56:09:3e:47:1d:
                    2b:1e:f7:3c:ba:68:9c:6d:d7:80:a8:85:2f:be:b1:
                    3c:20:0e:98:0b:4c:0d:9c:f1:9c:3a:6c:b4:b6:43:
                    87:74:d1:e4:aa:31:b4:8e:03:72:9a:a1:5e:d4:8f:
                    dd:a8:a4:cb:f7:1a:a2:93:ce:ff:fa:f6:4d:35:9e:
                    8e:ca:af:94:66:1d:69:be:7e:4d:ad:16:a5:e7:83:
                    c4:fc:89:56:07:b9:0a:0f:11:f3:2b:76:c4:6d:65:
                    24:1a:e2:3f:d5:51:ed:6b:b5:80:44:ac:08:85:6c:
                    4a:57:0c:20:8b:dc:aa:10:3d:58:71:8d:38:02:4f:
                    3b:ad:e1:82:2a:86:53:2b:7b:fb:79:0c:91:13:d4:
                    b2:71:79:ed:d3:d8:62:aa:69:98:34:d3:a2:cb:63:
                    17:c1:5b:01:d9:01:6d:07:28:46:c5:09:1c:9e:47:
                    9a:8e:18:d6:8a:1a:6f:5e:ca:64:96:9a:85:1a:f6:
                    c4:cd:70:49:4c:57:1c:66:40:88:c8:c2:9c:e4:b4:
                    83:5f:64:70:6c:c5:70:6b:f8:04:0e:9b:0f:18:8d:
                    51:0e:48:f3:12:f9:4b:31:e3:4c:ab:4f:3b:16:ca:
                    da:0b:95:fa:96:e3:95:e5:7a:a1:4c:b0:dc:30:33:
                    4a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BC:D5:1D:53:D5:ED:FA:A6:7C:DC:74:DC:DA:24:ED:7C:1C:E7:BC
            X509v3 Authority Key Identifier:
                keyid:98:45:03:D4:D1:81:40:B9:2A:A8:92:31:93:10:1D:0F:3E:AF:E2:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEUD1NGBQLkqqJIxkxAdDz6v4sM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/GbzVHVPV7fqmfNx03Nok7Xwc57w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ca9f2c-526e-453f-8b32-60feecea9aa4/1/mEUD1NGBQLkqqJIxkxAdDz6v4sM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.5.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:d7:f9:b0:33:59:58:79:02:f2:c8:76:69:ad:79:ec:75:c7:
         8a:f0:8d:d0:18:4d:92:47:b8:17:5f:34:a6:16:82:bc:05:e2:
         aa:44:6d:2c:c2:f5:d6:f6:f8:f2:fa:e5:64:f9:02:28:48:07:
         7f:c8:38:3e:ae:e8:57:07:15:db:1b:1e:0e:3d:b2:64:9c:9f:
         91:1e:55:fc:bf:81:f5:79:c4:e4:f1:d1:40:65:90:be:1a:e9:
         e1:6d:d2:4c:f3:92:d3:37:be:14:f4:9e:21:72:3f:76:45:47:
         d6:17:3f:1d:4b:c2:a8:95:e0:c8:34:75:c8:ca:c6:06:dc:2d:
         40:89:55:d3:55:32:14:88:05:4d:1f:b3:74:d6:c9:c5:4a:a9:
         6d:16:f6:35:1c:72:1f:c4:4b:5b:ff:d8:88:26:b6:37:1f:33:
         39:99:9c:f5:13:f7:5b:04:8b:08:8e:cf:0c:8f:87:32:30:60:
         ca:17:21:a9:61:45:74:58:84:6b:a8:14:9b:9d:a7:fa:43:68:
         e1:66:89:2d:5b:64:18:06:f2:a0:04:b8:1f:b9:01:1a:32:0b:
         9d:60:7d:b9:dd:98:1f:36:ef:1f:41:00:15:6d:51:29:fc:93:
         1d:ff:6b:05:7c:61:86:b0:47:5e:5f:49:65:75:de:e0:00:e3:
         79:75:35:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:58:25 2026 by rpki-client