This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/GyI44ywFgDL-tIZOk-8lHYup6C0.roa
File:                     GyI44ywFgDL-tIZOk-8lHYup6C0.roa (raw, json)
Hash identifier:          G6Has1owART2ONYwMGdXhGXjBMiqm1IjR539vTMUHLc=
Subject key identifier:   1B:22:38:E3:2C:05:80:32:FE:B4:86:4E:93:EF:25:1D:8B:A9:E8:2D
Certificate issuer:       /CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Certificate serial:       019B7C13238CE71AD13BB2F5D7E7BC818F76
Authority key identifier: 64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/GyI44ywFgDL-tIZOk-8lHYup6C0.roa
Signing time:             Fri 02 Jan 2026 00:19:47 +0000
ROA not before:           Fri 02 Jan 2026 00:19:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202049
IP address blocks:        193.162.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:23:8c:e7:1a:d1:3b:b2:f5:d7:e7:bc:81:8f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
        Validity
            Not Before: Jan  2 00:19:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1b2238e32c058032feb4864e93ef251d8ba9e82d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:35:ef:46:38:d5:25:87:02:ca:8b:2e:0d:
                    62:b4:5e:a2:f8:95:10:db:f1:55:5c:6a:49:db:a4:
                    3c:99:15:21:5c:b3:5f:70:73:94:bd:2b:2d:60:a9:
                    2d:da:e3:6f:35:22:c0:fe:d2:e5:e9:fa:83:9f:ed:
                    b7:db:f3:54:d6:88:df:9d:5f:61:46:c9:b5:63:03:
                    e8:79:13:f2:61:5b:71:cb:7d:24:d5:c9:0e:b5:58:
                    3e:25:a4:22:b2:7b:ea:aa:d1:20:fd:bf:08:56:70:
                    44:28:fa:9d:0c:3a:b4:21:21:8b:66:26:c8:cc:90:
                    97:8a:64:5f:1a:c4:9c:16:57:7f:34:b2:11:c5:a7:
                    21:13:ef:0f:95:21:97:5c:0a:25:f7:00:a4:4f:02:
                    12:34:b5:a4:f1:22:73:e2:fb:8a:5c:33:d3:7c:ed:
                    61:8c:4c:92:d1:e5:61:4d:fd:a6:c8:02:4c:a7:78:
                    60:7e:17:60:98:b2:b8:06:da:e6:88:c4:3c:81:39:
                    1c:0e:63:7f:0a:80:2f:0f:5b:0c:f6:b5:7a:ec:ea:
                    f4:f0:01:bb:de:e0:b2:cd:27:69:e1:11:f3:46:cf:
                    75:0e:36:85:e2:10:19:15:bf:54:6d:7b:6e:31:27:
                    3a:03:b5:86:84:5f:e7:04:44:da:13:da:d5:ba:a6:
                    0f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:22:38:E3:2C:05:80:32:FE:B4:86:4E:93:EF:25:1D:8B:A9:E8:2D
            X509v3 Authority Key Identifier:
                keyid:64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/GyI44ywFgDL-tIZOk-8lHYup6C0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.162.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:a8:49:5d:fc:12:f9:ee:2c:c8:87:6b:ef:b6:7f:1f:91:22:
         42:c4:3b:56:5e:ad:b3:94:02:24:e8:38:ac:62:9f:c6:e3:a9:
         60:42:2b:9b:26:a7:0d:2b:74:58:78:2f:38:bf:8a:67:87:02:
         59:cb:ff:cb:8d:54:f1:b5:bf:86:0e:c2:57:7d:42:a3:b0:a8:
         9d:c1:47:61:92:9c:fb:f1:60:18:d7:8c:20:b3:fe:84:fa:39:
         6f:ee:5a:7c:79:1c:5f:76:ea:d2:6a:94:74:9b:0a:2e:bc:f1:
         a7:52:5a:38:92:a6:10:43:9c:0c:06:54:1c:a6:bb:fe:b0:42:
         aa:9d:b9:d0:dc:14:1d:57:95:82:eb:c2:8b:d4:29:ba:a9:0c:
         22:5d:53:d8:10:a2:11:bd:45:56:23:2d:05:b9:84:3e:54:5c:
         00:d8:74:48:f7:0b:58:e1:25:c1:cc:34:c2:f7:e2:8a:9f:d7:
         8d:47:37:88:27:17:ab:e9:ab:df:37:ef:ea:78:6a:cd:1f:33:
         67:98:ec:21:f2:b5:64:55:4b:27:aa:0d:df:d2:7c:d0:ef:b0:
         62:0c:b3:9a:12:b0:c2:66:c9:37:cd:4d:11:bb:53:0e:fc:1d:
         7f:49:2f:26:db:97:28:a5:29:47:c7:74:61:9c:94:e6:77:df:
         29:23:5a:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8EyOM5xrRO7L11+e8gY92MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NDY1YThhMWU4ZTQyZjFhNjBkMjc4MTk4YzMyMGFlYzBm
M2Y3ZGMwHhcNMjYwMTAyMDAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjIyMzhlMzJjMDU4MDMyZmViNDg2NGU5M2VmMjUxZDhiYTllODJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/0170Y41SWHAsqLLg1itF6i+JUQ
2/FVXGpJ26Q8mRUhXLNfcHOUvSstYKkt2uNvNSLA/tLl6fqDn+232/NU1ojfnV9h
Rsm1YwPoeRPyYVtxy30k1ckOtVg+JaQisnvqqtEg/b8IVnBEKPqdDDq0ISGLZibI
zJCXimRfGsScFld/NLIRxachE+8PlSGXXAol9wCkTwISNLWk8SJz4vuKXDPTfO1h
jEyS0eVhTf2myAJMp3hgfhdgmLK4BtrmiMQ8gTkcDmN/CoAvD1sM9rV67Or08AG7
3uCyzSdp4RHzRs91DjaF4hAZFb9UbXtuMSc6A7WGhF/nBETaE9rVuqYPlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBsiOOMsBYAy/rSGTpPvJR2LqegtMB8GA1UdIwQY
MBaAFGRGWooejkLxpg0ngZjDIK7A8/fcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMzhkMzMtNzJjNi00ODAyLWFlZmUt
NzBlNjBlZGJjMWU3LzEvR3lJNDR5d0ZnREwtdElaT2stOGxIWXVwNkMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zMzhkMzMtNzJjNi00ODAyLWFlZmUtNzBlNjBlZGJjMWU3
LzEvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaKGMA0G
CSqGSIb3DQEBCwUAA4IBAQB9qEld/BL57izIh2vvtn8fkSJCxDtWXq2zlAIk6Dis
Yp/G46lgQiubJqcNK3RYeC84v4pnhwJZy//LjVTxtb+GDsJXfUKjsKidwUdhkpz7
8WAY14wgs/6E+jlv7lp8eRxfdurSapR0mwouvPGnUlo4kqYQQ5wMBlQcprv+sEKq
nbnQ3BQdV5WC68KL1Cm6qQwiXVPYEKIRvUVWIy0FuYQ+VFwA2HRI9wtY4SXBzDTC
9+KKn9eNRzeIJxer6avfN+/qeGrNHzNnmOwh8rVkVUsnqg3f0nzQ77BiDLOaErDC
Zsk3zU0Ru1MO/B1/SS8m25copSlHx3RhnJTmd98pI1oY
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:54:49 2026 by rpki-client