This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/GW786ZAo9o6aG6R8or6IyYUM610.roa
File:                     GW786ZAo9o6aG6R8or6IyYUM610.roa (raw, json)
Hash identifier:          5S3yILVPVQsvYnYYATkA7sNaoSvTWdIxhm26IIo2wDM=
Subject key identifier:   19:6E:FC:E9:90:28:F6:8E:9A:1B:A4:7C:A2:BE:88:C9:85:0C:EB:5D
Certificate issuer:       /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial:       019B7B36E57D53F20C5BEBAE0530F9CE23CA
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/GW786ZAo9o6aG6R8or6IyYUM610.roa
Signing time:             Thu 01 Jan 2026 20:19:13 +0000
ROA not before:           Thu 01 Jan 2026 20:19:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152460
IP address blocks:        79.110.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 14:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:e5:7d:53:f2:0c:5b:eb:ae:05:30:f9:ce:23:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
        Validity
            Not Before: Jan  1 20:19:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=196efce99028f68e9a1ba47ca2be88c9850ceb5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ea:cb:f6:f0:56:28:7b:60:b3:20:7a:01:70:
                    d8:a3:49:a3:1a:16:f2:74:27:b1:c6:82:6c:b0:f7:
                    0b:4f:bd:4c:00:cf:5b:0d:58:89:6f:25:17:6e:e3:
                    da:f6:45:fd:a5:15:0c:75:5c:bd:14:40:09:4a:c5:
                    d6:32:93:08:31:06:35:4c:1b:97:98:92:84:18:7b:
                    12:40:05:ce:01:ba:53:13:3f:77:f5:5b:5a:3d:02:
                    99:dd:d8:ee:53:c4:bb:62:f2:14:ec:8a:4e:07:c3:
                    27:79:c9:c7:e9:8f:45:9e:03:3f:82:27:8a:3a:95:
                    03:36:e0:15:82:96:ed:40:52:26:e8:3a:76:15:ab:
                    70:c9:a8:84:d0:9f:fd:95:d0:68:0a:1c:fe:4a:af:
                    5f:5e:12:b3:7e:a6:44:c9:94:da:e8:e5:34:e7:62:
                    bc:e2:8a:d0:91:be:df:fa:2b:76:21:cc:45:e2:b0:
                    79:fe:2d:ba:5e:dd:da:b7:80:7e:68:4e:5b:e8:1e:
                    80:2d:4b:6b:7e:ef:9e:16:2b:d7:2c:e6:25:8f:26:
                    5f:05:80:9f:ce:8d:15:4b:cc:68:33:47:67:6e:a4:
                    14:b8:92:51:b8:8e:a3:63:d5:66:d9:ed:75:b4:0c:
                    10:20:58:59:78:04:dd:19:ed:0a:f6:0a:77:17:d7:
                    62:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6E:FC:E9:90:28:F6:8E:9A:1B:A4:7C:A2:BE:88:C9:85:0C:EB:5D
            X509v3 Authority Key Identifier:
                keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/GW786ZAo9o6aG6R8or6IyYUM610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:a5:de:69:8e:8c:1b:38:37:ac:fc:59:3c:7b:9c:c8:90:2b:
         4c:7e:37:62:6a:fe:fa:a7:ad:a0:6a:f4:50:95:2e:5f:76:94:
         52:f5:0e:f2:85:68:c7:51:7c:2e:31:90:d2:d3:94:f4:8e:ad:
         da:78:a3:f1:7d:a9:4f:07:af:dd:29:fc:53:86:a7:df:f5:95:
         17:51:88:4d:b1:e8:8e:38:5c:58:ec:70:de:32:4f:26:0f:6b:
         51:4c:65:bc:f8:74:7a:61:8b:e8:00:ba:6e:45:79:fc:9c:1d:
         df:f2:7e:ec:00:52:85:8e:2a:0d:e8:b7:a0:88:c9:73:6f:ae:
         ff:8b:d8:3d:8e:68:61:9c:47:3d:1f:b9:cb:00:3f:b1:f7:a8:
         4a:c5:92:93:22:e9:bd:cd:e9:ad:a5:a3:31:b5:28:7b:e9:a7:
         3b:b0:18:bf:68:df:e0:24:40:3d:ad:70:31:46:27:d2:7c:5d:
         79:e4:84:ab:55:8f:24:df:ef:2d:2f:58:93:46:b8:39:63:44:
         b1:e0:76:5e:28:5c:4b:4f:b0:52:fa:c2:7c:2d:25:ea:ca:3f:
         53:0a:38:bb:01:e1:a6:34:a5:0a:82:f1:e1:bb:2b:c2:c9:81:
         56:34:ec:49:2b:23:20:46:d3:21:c1:cb:19:14:1a:8c:c4:a0:
         8f:3e:99:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7NuV9U/IMW+uuBTD5ziPKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODM4NDFiYzA5ZjFmZDRmZTNkZTk5MTAxNmMwYjcxMjZm
YmE1MmUwHhcNMjYwMTAxMjAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTZlZmNlOTkwMjhmNjhlOWExYmE0N2NhMmJlODhjOTg1MGNlYjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+rL9vBWKHtgsyB6AXDYo0mjGhby
dCexxoJssPcLT71MAM9bDViJbyUXbuPa9kX9pRUMdVy9FEAJSsXWMpMIMQY1TBuX
mJKEGHsSQAXOAbpTEz939VtaPQKZ3djuU8S7YvIU7IpOB8MnecnH6Y9FngM/gieK
OpUDNuAVgpbtQFIm6Dp2FatwyaiE0J/9ldBoChz+Sq9fXhKzfqZEyZTa6OU052K8
4orQkb7f+it2IcxF4rB5/i26Xt3at4B+aE5b6B6ALUtrfu+eFivXLOYljyZfBYCf
zo0VS8xoM0dnbqQUuJJRuI6jY9Vm2e11tAwQIFhZeATdGe0K9gp3F9diyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBlu/OmQKPaOmhukfKK+iMmFDOtdMB8GA1UdIwQY
MBaAFCmDhBvAnx/U/j3pkQFsC3Em+6UuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2It
MWRkNWRhYjM2ZjlmLzEvR1c3ODZaQW85bzZhRzZSOG9yNkl5WVVNNjEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2ItMWRkNWRhYjM2Zjlm
LzEvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT26kMA0G
CSqGSIb3DQEBCwUAA4IBAQCApd5pjowbODes/Fk8e5zIkCtMfjdiav76p62gavRQ
lS5fdpRS9Q7yhWjHUXwuMZDS05T0jq3aeKPxfalPB6/dKfxThqff9ZUXUYhNseiO
OFxY7HDeMk8mD2tRTGW8+HR6YYvoALpuRXn8nB3f8n7sAFKFjioN6LegiMlzb67/
i9g9jmhhnEc9H7nLAD+x96hKxZKTIum9zemtpaMxtSh76ac7sBi/aN/gJEA9rXAx
RifSfF155ISrVY8k3+8tL1iTRrg5Y0Sx4HZeKFxLT7BS+sJ8LSXqyj9TCji7AeGm
NKUKgvHhuyvCyYFWNOxJKyMgRtMhwcsZFBqMxKCPPpl/
-----END CERTIFICATE-----
Generated at Sat Jan 10 00:27:20 2026 by rpki-client