This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/GBoQQ8Yn-SioOyNoTDKqDla9z4o.roa
File:                     GBoQQ8Yn-SioOyNoTDKqDla9z4o.roa (raw, json)
Hash identifier:          v9SK5mh7PmHOJWi3iJx6YpyA3GIGwSntwdY41a/SlEI=
Subject key identifier:   18:1A:10:43:C6:27:F9:28:A8:3B:23:68:4C:32:AA:0E:56:BD:CF:8A
Certificate issuer:       /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial:       019B7C80314B113517F8492008EA3A455E86
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/GBoQQ8Yn-SioOyNoTDKqDla9z4o.roa
Signing time:             Fri 02 Jan 2026 02:18:54 +0000
ROA not before:           Fri 02 Jan 2026 02:18:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     21859
IP address blocks:        93.88.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 09:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:31:4b:11:35:17:f8:49:20:08:ea:3a:45:5e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
        Validity
            Not Before: Jan  2 02:18:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=181a1043c627f928a83b23684c32aa0e56bdcf8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:97:5c:8b:b1:eb:b7:4b:f6:cd:9e:1b:20:19:
                    25:16:69:53:d0:89:ab:e2:02:10:bb:fe:9c:0a:66:
                    f3:5c:cd:03:8d:96:b8:74:3a:09:9a:b7:0f:ab:4e:
                    1e:39:b9:f6:75:bf:c8:ca:db:3c:5e:de:76:1f:21:
                    6f:b3:81:d1:80:4b:1e:24:4d:29:23:ee:43:0f:33:
                    55:09:a6:2d:9c:26:f9:51:4f:1a:a8:16:0c:ac:9a:
                    4b:69:4f:41:5e:c0:fd:d5:7d:fb:7c:64:35:72:53:
                    26:94:38:79:44:40:1a:9a:de:76:32:3e:1b:ac:c3:
                    e5:03:5f:6a:e5:0b:53:d6:b2:e2:f0:be:26:88:49:
                    66:7b:bf:af:e6:c6:93:7b:57:20:d7:5b:c1:5d:0e:
                    64:51:2d:31:5e:30:6c:77:2c:d1:77:13:f5:83:d3:
                    01:b0:84:ef:10:90:f4:16:ca:0e:5e:7e:e8:da:e4:
                    b5:cf:4c:5f:9d:13:6e:2b:1a:e3:04:c9:91:46:0c:
                    0a:ab:a9:61:da:79:d3:89:20:52:10:f4:4f:6c:b6:
                    7b:53:7c:55:a6:86:91:74:70:50:2a:5f:b3:09:e9:
                    c0:6e:ac:49:8c:4f:03:0e:74:cf:84:33:22:82:a5:
                    ad:72:b9:06:db:8e:e2:c6:d2:3e:49:a0:a8:e4:bb:
                    b3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1A:10:43:C6:27:F9:28:A8:3B:23:68:4C:32:AA:0E:56:BD:CF:8A
            X509v3 Authority Key Identifier:
                keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/GBoQQ8Yn-SioOyNoTDKqDla9z4o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.88.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:24:f6:25:40:4a:d7:c1:d9:52:be:8c:5e:6b:51:b1:cf:9e:
         54:f1:dc:bf:ad:d7:32:15:88:4d:d2:c9:e4:c9:6e:a1:b8:81:
         84:84:46:61:ca:95:7b:aa:cc:fb:ac:d7:a7:17:84:a8:4e:7f:
         42:bc:5f:f4:19:01:78:e7:db:c8:2a:e0:a4:dd:76:b9:34:4d:
         87:c7:f3:ba:08:17:18:d6:65:83:70:b5:0f:e3:e1:8c:c2:f5:
         f6:d2:68:e9:3f:ac:8c:62:3c:18:c8:69:45:c1:6f:75:96:91:
         fb:20:42:bc:8d:25:84:30:f2:30:33:4e:e3:57:74:fb:ca:01:
         eb:f2:07:05:7f:45:8d:a1:4c:29:6b:f7:6a:b9:f3:12:45:98:
         52:9a:42:66:d7:a2:22:08:11:d8:fa:7e:9a:bf:42:0f:08:87:
         1a:61:73:fc:ee:88:dd:05:e9:f4:70:80:0b:fe:bb:f3:48:3c:
         d2:a8:bb:8f:01:8a:9e:86:33:f1:68:06:fc:c7:90:31:fc:3f:
         c2:e2:9d:5d:52:29:0b:4b:9d:14:88:3c:bb:72:2d:77:db:c4:
         67:4c:a5:e6:2a:6b:12:8e:bc:53:18:33:2a:45:83:c1:e2:ca:
         c9:c7:dd:0f:26:60:61:88:8d:54:40:2c:e1:8a:f8:de:9b:4e:
         fb:bd:1d:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8gDFLETUX+EkgCOo6RV6GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjYwMTAyMDIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODFhMTA0M2M2MjdmOTI4YTgzYjIzNjg0YzMyYWEwZTU2YmRjZjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJdci7Hrt0v2zZ4bIBklFmlT0Imr
4gIQu/6cCmbzXM0DjZa4dDoJmrcPq04eObn2db/Iyts8Xt52HyFvs4HRgEseJE0p
I+5DDzNVCaYtnCb5UU8aqBYMrJpLaU9BXsD91X37fGQ1clMmlDh5REAamt52Mj4b
rMPlA19q5QtT1rLi8L4miElme7+v5saTe1cg11vBXQ5kUS0xXjBsdyzRdxP1g9MB
sITvEJD0FsoOXn7o2uS1z0xfnRNuKxrjBMmRRgwKq6lh2nnTiSBSEPRPbLZ7U3xV
poaRdHBQKl+zCenAbqxJjE8DDnTPhDMigqWtcrkG247ixtI+SaCo5LuzRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBgaEEPGJ/koqDsjaEwyqg5Wvc+KMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEvR0JvUVE4WW4tU2lvT3lOb1RES3FEbGE5ejRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXViaMA0G
CSqGSIb3DQEBCwUAA4IBAQAvJPYlQErXwdlSvoxea1Gxz55U8dy/rdcyFYhN0snk
yW6huIGEhEZhypV7qsz7rNenF4SoTn9CvF/0GQF459vIKuCk3Xa5NE2Hx/O6CBcY
1mWDcLUP4+GMwvX20mjpP6yMYjwYyGlFwW91lpH7IEK8jSWEMPIwM07jV3T7ygHr
8gcFf0WNoUwpa/dqufMSRZhSmkJm16IiCBHY+n6av0IPCIcaYXP87ojdBen0cIAL
/rvzSDzSqLuPAYqehjPxaAb8x5Ax/D/C4p1dUikLS50UiDy7ci1328RnTKXmKmsS
jrxTGDMqRYPB4srJx90PJmBhiI1UQCzhivjem077vR0h
-----END CERTIFICATE-----
Generated at Thu Jan 8 17:25:51 2026 by rpki-client