This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/gsmGiuBcv0H2dNMyzqGYlvMZgB8.roa
File:                     gsmGiuBcv0H2dNMyzqGYlvMZgB8.roa (raw, json)
Hash identifier:          YAjRepSXiV21hnlqtzGBka5AQsC2Q/c9dyI4/lADp+0=
Subject key identifier:   82:C9:86:8A:E0:5C:BF:41:F6:74:D3:32:CE:A1:98:96:F3:19:80:1F
Certificate issuer:       /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial:       019B7D5C99284B3CEA888B167A720B04BF65
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/gsmGiuBcv0H2dNMyzqGYlvMZgB8.roa
Signing time:             Fri 02 Jan 2026 06:19:38 +0000
ROA not before:           Fri 02 Jan 2026 06:19:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50053
IP address blocks:        84.19.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:99:28:4b:3c:ea:88:8b:16:7a:72:0b:04:bf:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
        Validity
            Not Before: Jan  2 06:19:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=82c9868ae05cbf41f674d332cea19896f319801f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1c:89:a7:cd:13:e4:4e:3b:7d:36:39:2b:87:
                    6a:af:ad:a6:13:8a:1a:f0:b0:b9:9e:e7:20:f5:3b:
                    d4:62:3e:a3:12:5e:52:1d:4b:10:2c:ad:1c:ba:4c:
                    fc:19:2b:62:db:15:22:cd:58:73:25:9b:c6:55:4a:
                    cc:87:31:01:33:ad:40:f3:d9:89:7c:1c:4f:17:5b:
                    ac:cc:79:88:87:df:c4:a6:a6:08:49:aa:70:ec:b5:
                    fc:d0:b6:58:8b:44:3e:af:08:24:cc:d8:4d:1f:77:
                    19:6b:10:51:37:36:fe:62:55:76:28:dc:34:19:5c:
                    ef:8e:80:e6:c9:bf:5e:b6:c7:fd:c1:69:b0:7a:04:
                    0e:5b:b7:89:6a:e8:8e:3c:98:91:6a:ec:78:18:af:
                    73:0d:74:bf:b3:64:14:15:68:38:ba:80:4d:94:74:
                    81:c6:18:d8:6d:c2:b8:f4:70:56:6a:16:aa:70:6c:
                    a2:66:59:fe:15:18:36:9e:7c:05:22:bb:4b:7c:26:
                    3a:e4:39:d3:f2:d7:f8:d3:f3:46:1f:6d:68:40:83:
                    df:83:87:4f:94:dc:96:b8:4f:e0:70:d1:9c:da:b7:
                    d8:e4:89:89:bc:e4:8e:84:78:70:0e:34:44:97:ca:
                    7b:ba:de:49:5a:9e:22:21:bd:ea:78:a1:cf:51:d3:
                    4d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C9:86:8A:E0:5C:BF:41:F6:74:D3:32:CE:A1:98:96:F3:19:80:1F
            X509v3 Authority Key Identifier:
                keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/gsmGiuBcv0H2dNMyzqGYlvMZgB8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.19.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:93:36:0f:cb:11:07:28:90:aa:21:f9:d6:ff:df:72:63:90:
         d8:cc:1e:78:71:ec:a0:ec:9e:34:ae:e4:4e:09:9e:f2:8c:cc:
         00:3d:da:7b:10:dd:5d:78:5c:d5:99:05:e4:9f:29:df:82:c6:
         03:6f:ca:0c:66:07:02:c4:f1:0a:40:7e:9e:09:95:31:2d:dc:
         2c:03:72:dd:43:bd:e7:e0:96:fa:31:09:a9:63:c8:42:3a:6b:
         21:99:3a:30:7d:22:fc:b2:ed:26:bc:81:c5:f9:47:e8:e0:c5:
         30:09:29:c1:37:99:a8:0a:fa:56:54:3d:27:b6:3e:f4:ff:8a:
         0a:48:8d:70:7b:ee:45:6d:c6:cc:d0:86:dd:66:3d:61:82:5b:
         0a:bc:47:40:d2:bf:f9:e0:b0:00:e5:ac:6d:9e:20:53:b6:27:
         bf:6c:8c:af:89:5b:f0:e4:6c:5b:f8:fe:cb:e5:68:6e:44:43:
         0f:18:c9:80:92:a1:82:6d:dd:3d:17:ef:23:3c:0a:ac:40:7c:
         b1:a3:ae:88:a4:08:09:42:bf:81:fe:b5:ff:04:a1:1b:01:9d:
         87:21:4d:3e:94:e7:ac:5b:02:8f:72:8f:30:d0:fb:8c:62:21:
         37:e8:1d:d5:c2:46:ec:63:4f:aa:a7:77:2e:14:e5:2b:83:b2:
         05:d8:c1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:39:59 2026 by rpki-client