This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GgjQWM36uV4GSfSXLOJQsW5-Vp0.roa
File:                     GgjQWM36uV4GSfSXLOJQsW5-Vp0.roa (raw, json)
Hash identifier:          Y6tX+ihKuOoeM7vLjJWs//R30Rb5hG9YG5XHFzO8vfk=
Subject key identifier:   1A:08:D0:58:CD:FA:B9:5E:06:49:F4:97:2C:E2:50:B1:6E:7E:56:9D
Certificate issuer:       /CN=19b668e56fe25bd6dc53800ee1775061ecc09206
Certificate serial:       019B7E379EEFBE869E1E4F7586DED0256850
Authority key identifier: 19:B6:68:E5:6F:E2:5B:D6:DC:53:80:0E:E1:77:50:61:EC:C0:92:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GgjQWM36uV4GSfSXLOJQsW5-Vp0.roa
Signing time:             Fri 02 Jan 2026 10:18:52 +0000
ROA not before:           Fri 02 Jan 2026 10:18:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50727
IP address blocks:        193.107.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:9e:ef:be:86:9e:1e:4f:75:86:de:d0:25:68:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b668e56fe25bd6dc53800ee1775061ecc09206
        Validity
            Not Before: Jan  2 10:18:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1a08d058cdfab95e0649f4972ce250b16e7e569d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ff:0c:ec:9b:df:d1:39:d9:a2:71:ea:bb:2e:
                    ab:47:3e:bf:4d:6c:16:ca:4d:cb:0e:e4:ac:b6:50:
                    3c:b1:b9:9c:52:69:6f:2f:cd:b3:6d:83:83:7d:8c:
                    21:6a:15:1c:b6:f2:5f:eb:b0:21:3b:42:ca:10:ea:
                    16:db:15:fd:80:ef:31:b7:29:34:96:16:30:48:f4:
                    cb:2b:95:7d:14:fb:71:8b:32:15:62:e6:4e:f2:08:
                    a6:cb:de:35:e9:9e:0e:20:1d:1e:8f:e3:06:99:a0:
                    f7:1f:43:b0:8d:fb:0f:96:a0:7f:90:55:f4:59:41:
                    6d:97:71:7b:a0:f3:9c:37:88:ed:3b:82:1e:44:65:
                    c4:60:0f:13:62:f2:eb:f4:44:ea:1b:3c:32:50:a2:
                    82:a3:b9:0b:d5:84:49:52:0c:6c:1f:7d:be:c3:05:
                    d2:b4:68:65:57:22:bd:8c:7c:73:22:06:5f:2a:05:
                    78:0f:a5:61:37:52:96:28:24:1d:32:d3:10:d3:7f:
                    85:4f:49:35:14:94:a4:d2:f0:26:20:fe:5d:2b:f6:
                    29:0b:9a:15:27:7b:cc:f2:57:59:9e:f4:20:11:e9:
                    6f:4d:5b:f3:b0:e1:b6:43:4d:cc:8a:03:10:0b:9c:
                    0d:45:c8:e4:44:27:e7:7a:5b:15:4e:31:21:c5:74:
                    2d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:08:D0:58:CD:FA:B9:5E:06:49:F4:97:2C:E2:50:B1:6E:7E:56:9D
            X509v3 Authority Key Identifier:
                keyid:19:B6:68:E5:6F:E2:5B:D6:DC:53:80:0E:E1:77:50:61:EC:C0:92:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GgjQWM36uV4GSfSXLOJQsW5-Vp0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.107.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:4a:71:6c:67:51:ec:1a:a5:60:3a:e3:9b:98:6d:5d:4b:db:
         2e:a8:5c:0d:69:3d:fb:c4:fd:c9:a7:fb:0c:e8:41:19:cb:c4:
         17:b3:a4:fa:b8:8d:67:07:77:7f:f8:89:f8:fd:e6:2d:52:72:
         8a:ef:df:82:89:5f:e7:65:7e:8b:16:a4:70:e8:cd:d1:a0:67:
         4f:db:a8:ca:59:49:bb:79:16:e6:8b:6e:ef:09:3b:3b:1c:70:
         a4:97:2a:fc:93:b4:ef:17:09:ce:ee:13:66:28:b8:49:22:70:
         7c:d1:99:61:8c:04:ff:dc:c7:27:d5:a6:74:c3:aa:89:b9:85:
         b4:89:86:62:91:89:32:10:3c:19:62:89:59:5c:55:e4:17:20:
         64:03:7f:2a:3c:38:5d:6d:31:c6:49:57:b2:de:be:d3:ce:1a:
         b1:25:b3:85:72:de:d0:d1:4b:c1:7a:37:f2:0b:ef:4f:a7:82:
         90:2b:b9:b0:d5:f5:ef:3a:6d:b6:34:31:38:3c:44:6a:c8:c1:
         4d:34:34:48:93:f5:88:e2:1e:4a:2b:0f:1a:3f:88:0a:59:d7:
         79:ce:c8:87:30:b9:77:10:ff:b1:08:7e:a5:b1:6a:54:93:e3:
         40:2b:4a:e2:6c:ca:ce:fd:93:2a:8d:ad:43:e8:05:6e:30:7d:
         7c:a3:a0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:09:41 2026 by rpki-client