This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/GOZiBZULhoFFmaHL2yxQxnkayVo.roa
File:                     GOZiBZULhoFFmaHL2yxQxnkayVo.roa (raw, json)
Hash identifier:          K59MASYAVTroX7NO0F0NOzkvk97vAMGiQGmARVEdwuI=
Subject key identifier:   18:E6:62:05:95:0B:86:81:45:99:A1:CB:DB:2C:50:C6:79:1A:C9:5A
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       019B7758F236C4FFFEAA591680302D64E321
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/GOZiBZULhoFFmaHL2yxQxnkayVo.roa
Signing time:             Thu 01 Jan 2026 02:17:56 +0000
ROA not before:           Thu 01 Jan 2026 02:17:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41097
IP address blocks:        193.192.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:f2:36:c4:ff:fe:aa:59:16:80:30:2d:64:e3:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 02:17:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=18e66205950b86814599a1cbdb2c50c6791ac95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9d:65:59:67:a5:0f:07:e3:9d:67:b5:75:4f:
                    91:6b:d8:63:d0:12:3b:b3:ee:11:87:85:92:6e:27:
                    35:39:5b:1e:9c:e0:d9:b4:0f:2a:13:93:17:a7:10:
                    f8:5e:11:8b:8e:af:e9:b1:e6:a7:ee:51:69:e5:de:
                    77:17:d0:5a:e1:0a:3d:1b:e9:8e:4e:4d:16:3b:65:
                    34:fe:9b:3c:f3:eb:a6:78:27:a3:9a:bb:66:26:63:
                    62:68:b4:91:26:e9:12:d2:84:e5:43:86:00:ec:e5:
                    9d:f1:b5:34:63:7b:95:92:39:5f:e5:7f:cc:62:70:
                    54:00:29:06:e1:a2:07:47:31:39:c7:bf:db:a2:24:
                    84:95:d7:0d:d5:d5:3b:06:07:b9:95:17:05:1f:91:
                    2a:8e:2e:56:c9:99:b9:07:01:7f:6a:d3:73:d9:c9:
                    bd:c1:ee:4c:14:01:0e:b8:b0:c8:c1:fa:e1:61:ac:
                    eb:18:d9:76:6b:1a:29:bf:3a:c5:1a:bf:9c:29:e3:
                    fd:39:46:f7:36:80:84:1c:52:0e:a3:fe:f6:73:29:
                    88:6d:b8:fd:47:70:7c:9d:03:46:c6:f6:05:b1:c9:
                    f3:78:f0:c0:4b:26:83:1e:2a:9d:f8:8c:c1:88:9a:
                    bd:61:9a:ea:00:b6:18:f8:4b:65:97:1d:ed:de:6a:
                    f7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E6:62:05:95:0B:86:81:45:99:A1:CB:DB:2C:50:C6:79:1A:C9:5A
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/GOZiBZULhoFFmaHL2yxQxnkayVo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.192.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:de:b1:4b:21:86:16:01:fe:e0:cc:75:83:a0:58:80:8c:de:
         02:e5:02:03:38:1a:cd:7f:85:cf:53:ae:e8:d1:53:97:71:e3:
         db:f6:79:48:ee:53:a6:e9:f9:97:04:39:44:94:23:60:ac:46:
         5c:57:81:30:72:99:3b:ed:4f:64:26:6a:3a:f2:84:84:99:6c:
         6f:0c:5d:74:9b:34:78:ba:9e:54:0f:67:2e:fb:a8:1d:64:ed:
         9f:f5:a0:1a:0d:91:ca:85:d1:ba:dd:79:c0:7b:e1:9c:69:9a:
         ca:d4:6e:6c:1b:d7:a2:4c:ca:54:a9:1c:d5:b5:42:ee:a2:47:
         b3:37:65:7a:e5:fe:68:64:f3:da:bb:4a:ec:3a:9e:a2:6e:c3:
         6b:0d:b3:53:41:21:b0:6b:ce:15:0e:e6:ab:ed:96:7c:c7:c9:
         1b:ed:c7:73:67:2e:fd:2c:27:2a:bf:79:98:14:71:22:fc:cc:
         20:f3:fd:2f:2b:9f:ae:5e:3d:b8:b1:d5:e8:77:b5:38:2c:a8:
         28:a6:56:c6:36:cf:69:8a:79:2c:7e:0c:4c:12:1d:4f:1c:4d:
         1b:db:94:45:dc:85:ff:77:16:74:e7:73:38:de:74:1a:05:52:
         12:dc:9d:74:e3:a9:ec:75:fa:16:bb:a4:51:85:9b:de:74:f5:
         15:1a:85:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WPI2xP/+qlkWgDAtZOMhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGU2NjIwNTk1MGI4NjgxNDU5OWExY2JkYjJjNTBjNjc5MWFjOTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp1lWWelDwfjnWe1dU+Ra9hj0BI7
s+4Rh4WSbic1OVsenODZtA8qE5MXpxD4XhGLjq/psean7lFp5d53F9Ba4Qo9G+mO
Tk0WO2U0/ps88+umeCejmrtmJmNiaLSRJukS0oTlQ4YA7OWd8bU0Y3uVkjlf5X/M
YnBUACkG4aIHRzE5x7/boiSEldcN1dU7Bge5lRcFH5Eqji5WyZm5BwF/atNz2cm9
we5MFAEOuLDIwfrhYazrGNl2axopvzrFGr+cKeP9OUb3NoCEHFIOo/72cymIbbj9
R3B8nQNGxvYFscnzePDASyaDHiqd+IzBiJq9YZrqALYY+Etllx3t3mr3XwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBjmYgWVC4aBRZmhy9ssUMZ5GslaMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvR09aaUJaVUxob0ZGbWFITDJ5eFF4bmtheVZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcC/MA0G
CSqGSIb3DQEBCwUAA4IBAQAB3rFLIYYWAf7gzHWDoFiAjN4C5QIDOBrNf4XPU67o
0VOXcePb9nlI7lOm6fmXBDlElCNgrEZcV4Ewcpk77U9kJmo68oSEmWxvDF10mzR4
up5UD2cu+6gdZO2f9aAaDZHKhdG63XnAe+GcaZrK1G5sG9eiTMpUqRzVtULuokez
N2V65f5oZPPau0rsOp6ibsNrDbNTQSGwa84VDuar7ZZ8x8kb7cdzZy79LCcqv3mY
FHEi/Mwg8/0vK5+uXj24sdXod7U4LKgoplbGNs9pinksfgxMEh1PHE0b25RF3IX/
dxZ053M43nQaBVIS3J1046nsdfoWu6RRhZvedPUVGoVs
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:31:23 2026 by rpki-client