This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/gJauMi46QPPzyKWqDiA5ddI3Cho.roa
File:                     gJauMi46QPPzyKWqDiA5ddI3Cho.roa (raw, json)
Hash identifier:          8cj4UlqGZgB6E6848rUjL+1fRW7cZLYn+yIARbioPjA=
Subject key identifier:   80:96:AE:32:2E:3A:40:F3:F3:C8:A5:AA:0E:20:39:75:D2:37:0A:1A
Certificate issuer:       /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial:       019B7B36AC23B3C43960A20416A01AD2CB50
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/gJauMi46QPPzyKWqDiA5ddI3Cho.roa
Signing time:             Thu 01 Jan 2026 20:18:59 +0000
ROA not before:           Thu 01 Jan 2026 20:18:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     20473
IP address blocks:        185.83.113.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:ac:23:b3:c4:39:60:a2:04:16:a0:1a:d2:cb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
        Validity
            Not Before: Jan  1 20:18:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8096ae322e3a40f3f3c8a5aa0e203975d2370a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fa:d5:24:fb:aa:90:0b:83:70:7e:ac:6b:e4:
                    7d:dc:83:02:ce:18:65:b1:f6:e4:2a:c5:89:8b:a3:
                    d5:c5:5f:23:a7:3c:08:5a:97:8a:8d:ef:b0:59:72:
                    09:16:f4:83:37:31:23:c1:a9:19:52:e8:c8:9c:ee:
                    74:91:47:c2:78:af:6c:ac:2c:c9:d1:02:fc:de:3d:
                    8c:75:50:d9:20:06:9d:c1:df:5b:e0:30:f5:8a:30:
                    d6:d2:6f:c0:4c:bb:02:b8:67:d3:af:78:64:ce:0c:
                    51:ac:07:60:25:a4:1e:d7:fc:56:62:bb:fd:f1:9a:
                    e3:da:38:93:62:59:eb:69:f1:6c:cc:5c:2a:2f:6c:
                    af:f0:5c:80:f8:83:db:96:4c:c6:5d:28:b6:4c:02:
                    9c:1a:ef:ee:25:be:af:7a:8f:19:db:e8:44:cf:9e:
                    97:3d:51:26:e3:9d:af:cd:d4:73:e8:b4:09:8e:a2:
                    fc:63:44:a2:e9:a3:74:d6:a6:c3:d4:5c:21:09:ee:
                    72:29:b5:3b:15:bd:7e:f0:51:a0:8d:52:0a:b9:be:
                    72:70:bf:03:99:55:b6:36:2d:ac:de:d1:41:35:aa:
                    20:37:d0:32:11:d9:a5:67:07:3a:ac:b9:a9:3c:6c:
                    8f:c6:0d:fa:aa:84:a2:a9:87:6e:cc:27:f1:5e:3f:
                    ea:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:96:AE:32:2E:3A:40:F3:F3:C8:A5:AA:0E:20:39:75:D2:37:0A:1A
            X509v3 Authority Key Identifier:
                keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/gJauMi46QPPzyKWqDiA5ddI3Cho.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:02:4a:d9:db:fd:26:f5:f5:42:96:15:db:a0:41:b0:21:ce:
         f0:2e:f7:e2:69:73:59:25:d8:9f:49:3c:dc:d4:ae:89:e4:90:
         f5:49:7b:22:29:a5:2c:84:d3:06:c4:34:d8:6c:91:60:a2:e9:
         da:d6:4d:a3:7a:7f:9f:4d:74:dc:8e:12:a8:7f:80:2d:15:e8:
         b6:49:05:19:bd:55:e7:07:9a:90:d0:46:03:24:15:79:e5:93:
         93:c1:f8:8c:85:6f:d0:91:e0:7d:92:48:a7:8e:fa:3e:00:47:
         55:cd:58:fc:65:08:89:4c:59:78:6b:14:39:67:ce:dc:82:19:
         d3:db:e8:5c:23:bb:db:6d:fa:7c:e4:75:b0:e4:84:74:4b:e8:
         5c:38:e7:51:ca:2d:2d:8b:83:fb:f5:d7:09:c2:6c:e8:31:94:
         c5:56:48:e6:fa:b9:b6:e8:c4:97:c8:d6:f6:90:04:30:c3:09:
         98:af:f1:74:a6:41:bb:40:c5:76:db:a1:b0:61:13:06:34:35:
         2f:d4:3c:28:e4:33:eb:4c:7f:e6:8d:fc:60:ed:75:f6:cb:c6:
         48:9a:b4:cd:c9:72:a3:d2:b8:91:58:d3:67:f4:64:75:1f:87:
         11:63:7a:39:da:95:8e:db:7f:c4:7f:61:0b:fc:d2:b3:b3:b2:
         e0:c6:fa:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:40:40 2026 by rpki-client