This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/GBJ2X2TfbSwmmzgVVsME19XqtSw.roa
File:                     GBJ2X2TfbSwmmzgVVsME19XqtSw.roa (raw, json)
Hash identifier:          8eDDx0cI0Ia4YPWxch5djmmuUUa69P9GBwa1jUZnCWw=
Subject key identifier:   18:12:76:5F:64:DF:6D:2C:26:9B:38:15:56:C3:04:D7:D5:EA:B5:2C
Certificate issuer:       /CN=d1d23e24119cba9337e83466485bfb106b2e24b6
Certificate serial:       019B79ED1333088661B58F42A049053336D6
Authority key identifier: D1:D2:3E:24:11:9C:BA:93:37:E8:34:66:48:5B:FB:10:6B:2E:24:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/GBJ2X2TfbSwmmzgVVsME19XqtSw.roa
Signing time:             Thu 01 Jan 2026 14:18:58 +0000
ROA not before:           Thu 01 Jan 2026 14:18:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59956
IP address blocks:        194.50.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:13:33:08:86:61:b5:8f:42:a0:49:05:33:36:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1d23e24119cba9337e83466485bfb106b2e24b6
        Validity
            Not Before: Jan  1 14:18:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1812765f64df6d2c269b381556c304d7d5eab52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d2:e4:60:da:0b:56:30:20:f4:25:da:05:8f:
                    2d:51:47:cc:60:e0:e1:cb:23:62:d1:1f:85:f2:e2:
                    f9:9e:95:c4:57:b3:17:c4:cc:4d:5c:68:c9:b0:5b:
                    6e:fa:e4:5a:6f:ac:cf:bc:2a:ff:a5:8c:55:01:39:
                    c5:2c:10:da:c2:99:0b:34:67:4b:c2:b5:9f:1a:7f:
                    33:17:11:30:6a:77:12:08:29:3f:3b:d7:58:52:74:
                    a0:6e:39:37:e4:5f:66:bf:be:7b:ea:9f:f4:54:35:
                    f1:09:5a:8b:f9:98:2b:a9:2f:5b:5b:76:8b:de:91:
                    84:7c:aa:c9:9f:8e:40:ab:4e:6c:b0:f9:9e:28:9e:
                    d7:81:60:31:e9:a7:cc:ad:d0:98:36:79:38:6b:1c:
                    e5:52:2b:34:11:3f:db:14:7f:6d:aa:24:a2:e7:8b:
                    8b:57:cf:77:34:b3:46:bf:54:59:d4:a4:7e:c5:5f:
                    06:54:f3:af:5c:e8:bc:9b:d0:09:c2:e1:60:24:5a:
                    45:aa:bb:82:d4:08:48:3d:2c:a2:f3:4d:e8:52:e0:
                    2a:ba:13:e0:8f:9a:80:9f:f6:fa:36:05:13:0d:a3:
                    cb:cf:32:b7:13:2d:c6:f7:9b:3c:7e:61:8d:f8:ac:
                    d0:af:96:06:83:c4:95:87:49:f1:40:52:f4:a9:47:
                    54:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:12:76:5F:64:DF:6D:2C:26:9B:38:15:56:C3:04:D7:D5:EA:B5:2C
            X509v3 Authority Key Identifier:
                keyid:D1:D2:3E:24:11:9C:BA:93:37:E8:34:66:48:5B:FB:10:6B:2E:24:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/GBJ2X2TfbSwmmzgVVsME19XqtSw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:2c:05:d2:91:1b:37:91:d8:98:2f:8d:ac:7a:25:5f:e7:3e:
         6e:00:22:49:5b:89:28:78:1c:d4:ae:6d:50:55:4d:3f:dd:f4:
         e7:6b:e1:4b:f7:5a:b9:72:79:ad:e9:1c:31:43:8e:9f:d8:ee:
         a7:2e:d2:93:e2:45:69:da:58:ad:45:d3:ee:69:07:81:05:de:
         74:e3:92:10:12:2a:d6:d6:97:00:78:20:c9:f8:cf:5d:58:23:
         02:aa:69:dc:6d:8d:5d:3a:1d:5f:36:3f:60:ec:32:2c:1f:95:
         fe:f3:b7:2e:b7:e8:54:87:dd:af:32:ca:74:13:12:38:80:c2:
         24:02:ee:2e:21:86:b4:cb:d1:ea:aa:8f:28:d7:8d:bc:24:4a:
         e6:fa:f2:be:5a:cb:fd:39:54:19:e0:8b:ae:2b:5c:fd:70:0b:
         3a:2a:08:b1:6e:b8:18:1d:be:a7:8a:ce:a4:0d:26:13:a5:98:
         ee:6a:bf:96:26:ed:bb:e0:23:14:6c:9c:16:9a:3c:50:0b:1e:
         54:9a:ec:9a:b1:c0:ff:51:33:4e:46:a3:05:3a:70:8a:62:79:
         48:88:8e:cf:15:2c:24:69:cb:6e:79:ed:50:40:e1:a7:23:60:
         6f:48:49:bc:ab:a9:f4:05:dd:48:74:dd:3b:f3:16:c8:32:66:
         de:af:1c:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt57RMzCIZhtY9CoEkFMzbWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZDIzZTI0MTE5Y2JhOTMzN2U4MzQ2NjQ4NWJmYjEwNmIy
ZTI0YjYwHhcNMjYwMTAxMTQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODEyNzY1ZjY0ZGY2ZDJjMjY5YjM4MTU1NmMzMDRkN2Q1ZWFiNTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49LkYNoLVjAg9CXaBY8tUUfMYODh
yyNi0R+F8uL5npXEV7MXxMxNXGjJsFtu+uRab6zPvCr/pYxVATnFLBDawpkLNGdL
wrWfGn8zFxEwancSCCk/O9dYUnSgbjk35F9mv7576p/0VDXxCVqL+ZgrqS9bW3aL
3pGEfKrJn45Aq05ssPmeKJ7XgWAx6afMrdCYNnk4axzlUis0ET/bFH9tqiSi54uL
V893NLNGv1RZ1KR+xV8GVPOvXOi8m9AJwuFgJFpFqruC1AhIPSyi803oUuAquhPg
j5qAn/b6NgUTDaPLzzK3Ey3G95s8fmGN+KzQr5YGg8SVh0nxQFL0qUdUxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBgSdl9k320sJps4FVbDBNfV6rUsMB8GA1UdIwQY
MBaAFNHSPiQRnLqTN+g0Zkhb+xBrLiS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGRJLUpCR2N1cE0zNkRSbVNGdjdFR3N1SkxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82YzQwNjQtODUwMy00ZDE2LTkzNTQt
NzRkNGU1YjAxYzM1LzEvR0JKMlgyVGZiU3dtbXpnVlZzTUUxOVhxdFN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy82YzQwNjQtODUwMy00ZDE2LTkzNTQtNzRkNGU1YjAxYzM1
LzEvMGRJLUpCR2N1cE0zNkRSbVNGdjdFR3N1SkxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjKnMA0G
CSqGSIb3DQEBCwUAA4IBAQAcLAXSkRs3kdiYL42seiVf5z5uACJJW4koeBzUrm1Q
VU0/3fTna+FL91q5cnmt6RwxQ46f2O6nLtKT4kVp2litRdPuaQeBBd5045IQEirW
1pcAeCDJ+M9dWCMCqmncbY1dOh1fNj9g7DIsH5X+87cut+hUh92vMsp0ExI4gMIk
Au4uIYa0y9Hqqo8o1428JErm+vK+Wsv9OVQZ4IuuK1z9cAs6KgixbrgYHb6nis6k
DSYTpZjuar+WJu274CMUbJwWmjxQCx5UmuyascD/UTNORqMFOnCKYnlIiI7PFSwk
actuee1QQOGnI2BvSEm8q6n0Bd1IdN078xbIMmberxxo
-----END CERTIFICATE-----
Generated at Mon Jan 26 08:39:56 2026 by rpki-client