This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/GLlV_QNfxAHgbPbOQuZSom8Go7k.roa
File:                     GLlV_QNfxAHgbPbOQuZSom8Go7k.roa (raw, json)
Hash identifier:          7Gk5aFbSltujIpc/l7EhPu0VuZTxlAcLmjwbJVWm0p8=
Subject key identifier:   18:B9:55:FD:03:5F:C4:01:E0:6C:F6:CE:42:E6:52:A2:6F:06:A3:B9
Certificate issuer:       /CN=0dd441c3ffae829842249e944b03851081f4d9e0
Certificate serial:       019B79ECE31D975628CCC511500FB88A2F3C
Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/GLlV_QNfxAHgbPbOQuZSom8Go7k.roa
Signing time:             Thu 01 Jan 2026 14:18:46 +0000
ROA not before:           Thu 01 Jan 2026 14:18:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207456
IP address blocks:        185.82.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:e3:1d:97:56:28:cc:c5:11:50:0f:b8:8a:2f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0
        Validity
            Not Before: Jan  1 14:18:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=18b955fd035fc401e06cf6ce42e652a26f06a3b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ce:37:62:35:72:8b:5d:25:f0:09:ee:4d:1a:
                    14:dd:d3:e4:23:57:b7:01:4d:fc:dd:e9:6d:99:82:
                    17:bc:71:02:75:8d:77:0f:99:d9:66:cb:53:8b:13:
                    89:80:9b:dc:d0:fa:d5:c7:0b:02:52:dd:c6:1b:6d:
                    ce:19:1d:10:25:db:6f:b1:d3:d8:56:9a:00:54:28:
                    3d:ab:ae:74:13:b0:bf:bd:35:b5:ff:00:f2:10:67:
                    f3:fa:f2:fc:30:6d:a8:02:fa:22:2a:7b:92:cc:6f:
                    d2:5f:0a:5e:93:fd:09:b8:a0:c4:07:13:6e:95:1e:
                    7b:16:1b:b3:ac:79:f8:5c:55:66:5a:3d:35:9a:cd:
                    82:be:ba:36:53:6d:b6:8e:44:d1:e7:56:1e:0b:e8:
                    e1:53:5b:4a:6a:6f:9a:fc:7f:35:f3:73:37:2e:90:
                    f4:42:4f:e5:ef:8b:69:41:1d:44:dc:bb:f3:5e:e6:
                    1a:d8:55:33:b1:e4:4b:40:17:27:a9:6a:dd:ca:df:
                    b3:ac:83:c7:e9:2d:e5:19:fc:ae:f1:e1:c3:c0:17:
                    02:c1:3d:f0:40:a9:e6:9a:56:fe:bc:29:c2:ce:7d:
                    c5:0a:25:64:7d:d9:1a:ed:b0:ef:61:81:e2:d1:85:
                    d2:ff:64:19:ce:f3:fe:46:71:2c:76:37:b5:7b:af:
                    f8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B9:55:FD:03:5F:C4:01:E0:6C:F6:CE:42:E6:52:A2:6F:06:A3:B9
            X509v3 Authority Key Identifier:
                keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/GLlV_QNfxAHgbPbOQuZSom8Go7k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.82.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:04:2e:4d:be:a4:1a:55:f4:49:c3:a0:f5:bd:3f:2e:a8:b3:
         f7:7f:00:8c:53:14:50:05:64:1a:06:5d:fd:9d:5b:0a:22:4c:
         64:82:c8:33:2f:f9:86:bc:9d:84:8e:91:7c:8e:2d:87:25:c2:
         3e:cd:cd:84:71:12:20:c9:30:66:6c:f4:bf:a8:ac:07:75:fc:
         2e:04:2e:dd:b2:e0:73:74:a4:48:39:89:ef:fb:e9:a1:23:a4:
         38:54:96:00:c3:2a:7f:20:90:b2:d5:07:ae:3d:ca:da:b0:b8:
         ad:2d:a2:48:83:0e:35:78:81:5e:22:d3:59:f5:79:b1:63:96:
         03:b2:6a:a2:2c:51:da:76:2e:8c:27:4a:86:f3:ea:a9:82:82:
         b6:4f:aa:31:ee:68:10:0e:ef:be:43:d4:e1:5b:6f:d6:3e:ec:
         b0:68:03:f6:e7:8c:54:63:dd:9e:6a:e6:29:a3:da:79:ac:13:
         f9:41:2a:ba:7c:a7:06:b0:12:48:1c:97:c7:bd:8f:36:48:5b:
         5f:54:ec:40:d7:51:f1:b5:9b:c0:c0:29:1a:b0:9c:5f:cb:27:
         b1:60:29:f5:9f:42:fd:52:28:ba:de:86:46:bf:6c:98:5b:bc:
         10:98:60:44:36:d0:24:15:d7:a4:83:eb:0b:7b:03:52:93:3e:
         e7:5b:78:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:35:47 2026 by rpki-client