This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/go1rZLit0ECxEQHq3kpBk2CE4Qg.roa
File:                     go1rZLit0ECxEQHq3kpBk2CE4Qg.roa (raw, json)
Hash identifier:          hJVabNE+muWiI6lmIeSiA8icGMZrwMb4YKQs1wbCUu8=
Subject key identifier:   82:8D:6B:64:B8:AD:D0:40:B1:11:01:EA:DE:4A:41:93:60:84:E1:08
Certificate issuer:       /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial:       019B77C6CF26BE070417C195EFE94F897F00
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/go1rZLit0ECxEQHq3kpBk2CE4Qg.roa
Signing time:             Thu 01 Jan 2026 04:17:56 +0000
ROA not before:           Thu 01 Jan 2026 04:17:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211922
IP address blocks:        164.215.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 06:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:cf:26:be:07:04:17:c1:95:ef:e9:4f:89:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
        Validity
            Not Before: Jan  1 04:17:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=828d6b64b8add040b11101eade4a41936084e108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9d:19:66:62:c5:0b:41:71:08:4e:7f:ac:56:
                    44:3e:f2:9a:91:1b:c2:ad:b4:31:00:48:26:99:7d:
                    49:bb:22:83:56:de:63:84:75:d2:30:8f:02:cd:9e:
                    3d:41:b9:40:02:ca:90:85:dc:ba:1c:24:31:55:df:
                    c6:da:99:8d:c2:5a:3a:9e:2c:08:88:bf:ce:01:9c:
                    77:86:5c:60:b8:7b:8d:0a:65:4f:64:e9:6a:ad:bc:
                    37:40:6f:4b:6d:d5:6c:c5:7a:61:a4:95:16:8e:a4:
                    37:ea:c9:87:9f:cc:1a:52:a7:9d:d0:9e:12:90:e9:
                    46:cc:7e:e5:34:c1:e0:c7:0c:05:3c:e1:f3:8a:f6:
                    96:d1:65:c7:21:ee:99:1d:2c:33:2d:43:d5:ab:fc:
                    57:db:ed:70:9f:a3:d2:e6:28:fc:90:10:3e:aa:63:
                    a5:a5:0a:63:8f:27:1c:20:c1:45:36:3a:d1:75:5e:
                    e9:a2:4a:f5:75:bb:c2:23:d8:d5:52:0a:45:40:5b:
                    ca:f0:31:55:34:ba:67:e3:c6:3b:3f:d0:72:d9:36:
                    f6:a9:b9:1f:4d:4e:6f:99:67:26:5e:da:19:79:13:
                    88:53:67:07:a4:c6:41:34:6f:c7:80:91:49:c7:cb:
                    72:30:c3:d4:0c:8b:63:32:f7:ee:6f:28:7d:91:d5:
                    6b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8D:6B:64:B8:AD:D0:40:B1:11:01:EA:DE:4A:41:93:60:84:E1:08
            X509v3 Authority Key Identifier:
                keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/go1rZLit0ECxEQHq3kpBk2CE4Qg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.215.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:10:c3:73:fe:ba:5f:a7:df:43:4d:4a:e8:ce:1d:d8:c0:41:
         af:31:d2:45:47:cf:0e:5b:71:15:47:1a:71:01:b1:aa:b8:47:
         84:b2:3c:7d:f8:2f:56:12:11:7a:5d:49:4e:24:90:30:da:61:
         b5:cc:b7:e3:a3:af:79:04:a1:5c:2b:bf:ed:38:1a:f0:d0:d8:
         89:b0:8c:4f:36:f5:f6:91:77:cf:6f:79:4e:68:2e:0e:cb:fb:
         3a:66:8f:4e:0b:92:b2:a1:63:90:c5:fa:8b:d9:f5:81:42:3b:
         d5:59:b2:f7:a0:83:93:7b:0a:ef:d1:92:6a:81:03:ad:3d:a2:
         05:d1:e3:27:90:54:5d:b9:15:76:28:87:7a:fa:f1:8f:92:1a:
         c2:7e:73:09:30:6b:1f:47:2d:19:3f:e2:f2:96:8c:8a:b2:bb:
         5a:a5:ef:15:0c:fe:2f:69:92:7c:2c:a5:45:e3:54:83:bd:f0:
         cf:0b:3d:c5:5f:aa:6f:76:f7:71:dd:56:1b:c9:1d:96:b9:37:
         8b:d7:38:29:46:15:35:ce:51:a3:69:be:21:14:66:be:1c:6c:
         67:81:8e:e7:4d:41:d2:38:79:a7:45:ec:a8:aa:2b:de:ae:53:
         c0:8f:1e:b2:8b:fe:b2:2f:54:09:35:22:fd:5e:f7:73:f0:82:
         21:91:99:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:18:51 2026 by rpki-client