This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/gn0GsRmdZbgRGRE5nk1WdDzsB1A.roa
File:                     gn0GsRmdZbgRGRE5nk1WdDzsB1A.roa (raw, json)
Hash identifier:          o5KxH9QZzWV8zM3xyrC7VmrZls0HWwNUivlcklVN+Ag=
Subject key identifier:   82:7D:06:B1:19:9D:65:B8:11:19:11:39:9E:4D:56:74:3C:EC:07:50
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       019B7758EC70ABC2A5E127CD7E99CF485EAC
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/gn0GsRmdZbgRGRE5nk1WdDzsB1A.roa
Signing time:             Thu 01 Jan 2026 02:17:54 +0000
ROA not before:           Thu 01 Jan 2026 02:17:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15587
IP address blocks:        93.159.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:ec:70:ab:c2:a5:e1:27:cd:7e:99:cf:48:5e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 02:17:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=827d06b1199d65b8111911399e4d56743cec0750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:38:cd:7d:b5:a6:2c:17:69:78:62:23:59:f2:
                    72:f4:b7:bd:80:51:7b:1c:2e:db:f8:f1:a9:23:51:
                    74:4e:b1:a8:5f:95:ee:91:0a:1f:fe:74:a8:b6:1c:
                    39:64:12:91:67:03:4a:8d:cc:75:de:10:52:ea:92:
                    9c:90:34:0c:cd:09:0e:8d:de:10:63:ea:9a:15:4b:
                    ce:ca:00:55:a3:19:4f:a8:a2:f3:f1:36:10:94:5a:
                    57:b2:63:1b:f0:02:b4:a1:84:aa:1d:1c:b2:13:a5:
                    3d:ab:0a:82:b3:ac:0c:af:96:0a:4d:5b:b7:df:d3:
                    fc:26:dd:78:21:98:cf:92:e3:01:dc:71:41:e4:4c:
                    a0:d3:a8:de:99:d1:f8:e5:41:e0:8f:ca:0f:5d:f9:
                    23:a1:b9:26:a6:6b:ca:02:9e:6e:0a:b3:ad:36:0f:
                    b8:39:f4:ff:e3:c2:5b:ab:b0:e5:8f:17:5c:2d:c8:
                    40:2a:03:1f:b0:3a:40:9c:0f:8f:0a:2d:d2:16:a6:
                    24:a2:b4:89:a4:b2:92:49:40:2e:79:de:01:44:c0:
                    e7:63:0c:7c:d4:60:28:ee:a0:ab:01:d6:17:c6:a6:
                    08:91:fb:fd:d2:52:c3:cd:34:1f:ab:43:9f:9f:2c:
                    2c:96:00:e5:5a:90:0b:5d:e0:e6:9d:11:67:64:35:
                    c7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7D:06:B1:19:9D:65:B8:11:19:11:39:9E:4D:56:74:3C:EC:07:50
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/gn0GsRmdZbgRGRE5nk1WdDzsB1A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.159.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:c3:0c:0b:15:78:9d:ff:f5:a6:75:6a:12:a3:10:df:3e:9a:
         14:77:3b:f1:3c:54:ce:65:17:2b:bf:fc:75:4f:c5:e6:93:32:
         2d:6c:a9:10:7d:84:fd:45:7e:45:44:90:ad:1b:ba:b3:d9:6b:
         8b:f4:42:be:2f:39:fc:4c:45:e3:a3:9e:22:fa:4a:79:12:f3:
         d3:4d:11:7f:d5:c9:4e:d7:83:e7:26:9b:c0:41:54:79:f0:88:
         8f:6c:0c:c8:09:4a:ee:f5:5c:b3:36:8a:87:e8:c1:07:3a:31:
         7c:32:97:66:a2:b4:ec:58:64:0e:bd:b0:a2:ad:3a:b4:e0:41:
         7f:87:0c:31:94:b8:a8:20:51:e7:22:14:4e:1d:52:30:09:ec:
         c2:7e:d5:83:b5:c7:e7:a3:40:3c:e3:1e:32:e7:78:06:36:83:
         08:95:f8:5c:83:01:95:de:7d:7a:41:4d:88:c8:d5:21:2b:af:
         5a:6d:ad:68:30:09:a1:b6:4f:37:48:f7:61:4e:05:07:46:37:
         02:f1:5b:1e:d7:2a:f3:04:94:72:43:28:1b:9c:f5:1c:6f:fc:
         7d:4f:ad:d3:e9:2e:0a:5b:9e:eb:df:1c:e8:55:e7:18:fc:39:
         44:1f:a1:6a:52:f8:32:55:b1:15:5d:be:70:c9:be:59:5c:f9:
         b0:a3:97:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WOxwq8Kl4SfNfpnPSF6sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjYwMTAxMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjdkMDZiMTE5OWQ2NWI4MTExOTExMzk5ZTRkNTY3NDNjZWMwNzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjjNfbWmLBdpeGIjWfJy9Le9gFF7
HC7b+PGpI1F0TrGoX5XukQof/nSothw5ZBKRZwNKjcx13hBS6pKckDQMzQkOjd4Q
Y+qaFUvOygBVoxlPqKLz8TYQlFpXsmMb8AK0oYSqHRyyE6U9qwqCs6wMr5YKTVu3
39P8Jt14IZjPkuMB3HFB5Eyg06jemdH45UHgj8oPXfkjobkmpmvKAp5uCrOtNg+4
OfT/48Jbq7DljxdcLchAKgMfsDpAnA+PCi3SFqYkorSJpLKSSUAued4BRMDnYwx8
1GAo7qCrAdYXxqYIkfv90lLDzTQfq0OfnywslgDlWpALXeDmnRFnZDXH8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIJ9BrEZnWW4ERkROZ5NVnQ87AdQMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvZ24wR3NSbWRaYmdSR1JFNW5rMVdkRHpzQjFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXZ8+MA0G
CSqGSIb3DQEBCwUAA4IBAQAowwwLFXid//WmdWoSoxDfPpoUdzvxPFTOZRcrv/x1
T8XmkzItbKkQfYT9RX5FRJCtG7qz2WuL9EK+Lzn8TEXjo54i+kp5EvPTTRF/1clO
14PnJpvAQVR58IiPbAzICUru9VyzNoqH6MEHOjF8MpdmorTsWGQOvbCirTq04EF/
hwwxlLioIFHnIhROHVIwCezCftWDtcfno0A84x4y53gGNoMIlfhcgwGV3n16QU2I
yNUhK69aba1oMAmhtk83SPdhTgUHRjcC8Vse1yrzBJRyQygbnPUcb/x9T63T6S4K
W57r3xzoVecY/DlEH6FqUvgyVbEVXb5wyb5ZXPmwo5dU
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:30:05 2026 by rpki-client