This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/GjDvHORk0ZTTkeBswMrRLVZ-LLI.roa
File:                     GjDvHORk0ZTTkeBswMrRLVZ-LLI.roa (raw, json)
Hash identifier:          Db1fgaGn7etJ5E1mwpRZEwGFqG7OR6Nk/1MVMZkhMcg=
Subject key identifier:   1A:30:EF:1C:E4:64:D1:94:D3:91:E0:6C:C0:CA:D1:2D:56:7E:2C:B2
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       019AE9B16ACBE7DD01276578765C674F1325
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/GjDvHORk0ZTTkeBswMrRLVZ-LLI.roa
Signing time:             Thu 04 Dec 2025 14:08:29 +0000
ROA not before:           Thu 04 Dec 2025 14:08:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215245
IP address blocks:        31.22.76.0/24 maxlen: 24
                          31.22.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e9:b1:6a:cb:e7:dd:01:27:65:78:76:5c:67:4f:13:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Dec  4 14:08:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1a30ef1ce464d194d391e06cc0cad12d567e2cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:39:e1:e5:47:4c:be:f1:14:0a:77:c4:c6:7d:
                    a7:67:1d:49:6c:70:45:be:d0:8a:f0:8e:0d:a3:da:
                    24:b9:14:a4:fa:c0:b2:d0:7a:df:80:26:2a:bf:88:
                    77:65:a4:76:ba:3a:9e:1c:b6:8f:84:70:c5:70:44:
                    87:64:52:10:59:7c:bc:d5:a5:85:a2:8b:aa:c5:c2:
                    93:ae:d6:06:c9:4f:9f:84:f1:c9:2c:1b:75:c9:08:
                    1c:5d:73:70:b2:23:6f:aa:b9:33:c5:24:5f:8f:8b:
                    29:c4:51:0a:3c:73:7c:a9:43:90:2f:c9:2d:87:71:
                    b3:1d:9f:0f:cd:18:09:d2:ce:c6:a4:2a:aa:48:6f:
                    4d:ed:63:07:a9:07:fe:96:4d:17:7e:67:69:c6:56:
                    56:06:35:e0:b1:a9:30:85:6f:a9:0e:8d:27:51:31:
                    e0:49:be:53:22:5d:82:15:dc:c5:bc:ac:d8:70:73:
                    cd:69:14:a7:82:36:98:2c:c6:34:19:91:96:45:3d:
                    87:a6:61:0c:13:24:c9:9a:99:71:5e:f6:61:c2:aa:
                    b0:12:e8:78:25:f0:44:84:c3:6c:b7:71:d4:62:18:
                    d0:5e:56:65:41:65:20:29:d5:4e:2a:a0:a0:4f:2c:
                    58:71:00:89:35:66:c9:6b:31:de:67:29:34:6f:f5:
                    b5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:30:EF:1C:E4:64:D1:94:D3:91:E0:6C:C0:CA:D1:2D:56:7E:2C:B2
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/GjDvHORk0ZTTkeBswMrRLVZ-LLI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.22.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:44:74:87:81:84:ae:ab:15:31:49:f1:db:ab:10:15:bc:ce:
         27:c6:44:4d:80:29:5e:f5:b1:77:d2:7c:2c:c2:48:a6:33:f9:
         3a:cc:cd:97:6d:7d:12:a1:26:63:5d:0d:f5:24:06:e2:a0:3b:
         b0:ad:fc:c5:2a:0e:91:97:76:3a:87:b7:67:a0:b3:4a:13:62:
         e7:5c:1f:7f:af:88:3c:a1:ec:da:1d:db:bb:1f:e9:f6:49:5a:
         e6:97:3a:a7:49:28:08:f4:4a:1e:83:6b:9a:2b:bf:29:d9:16:
         fa:b2:62:ee:16:ef:b0:ad:00:c0:4b:5e:29:17:07:e1:c0:80:
         37:b2:b2:ff:14:07:2e:9c:b3:2c:d1:2e:c3:61:54:1f:d9:3c:
         14:ec:5e:10:dc:c7:d8:72:c4:56:85:02:2b:ec:8c:3e:d2:38:
         2e:e9:a0:5f:57:ce:71:f7:6e:ed:92:8f:44:b0:e6:1e:4c:02:
         7c:d9:f1:5c:7b:50:c7:22:da:44:81:32:02:8f:32:37:65:e6:
         e3:24:1c:81:7a:86:34:c2:c0:81:8e:b2:29:8e:d8:2c:04:40:
         09:01:f8:af:d8:f9:28:c2:fd:b8:de:7e:c1:58:95:76:09:0e:
         0a:32:41:fc:cc:b2:33:9c:36:88:75:3c:8f:8c:c7:d6:6c:a4:
         44:c9:8d:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZrpsWrL590BJ2V4dlxnTxMlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx
YmM3N2YwHhcNMjUxMjA0MTQwODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTMwZWYxY2U0NjRkMTk0ZDM5MWUwNmNjMGNhZDEyZDU2N2UyY2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTnh5UdMvvEUCnfExn2nZx1JbHBF
vtCK8I4No9okuRSk+sCy0HrfgCYqv4h3ZaR2ujqeHLaPhHDFcESHZFIQWXy81aWF
oouqxcKTrtYGyU+fhPHJLBt1yQgcXXNwsiNvqrkzxSRfj4spxFEKPHN8qUOQL8kt
h3GzHZ8PzRgJ0s7GpCqqSG9N7WMHqQf+lk0XfmdpxlZWBjXgsakwhW+pDo0nUTHg
Sb5TIl2CFdzFvKzYcHPNaRSngjaYLMY0GZGWRT2HpmEMEyTJmplxXvZhwqqwEuh4
JfBEhMNst3HUYhjQXlZlQWUgKdVOKqCgTyxYcQCJNWbJazHeZyk0b/W1rwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBow7xzkZNGU05HgbMDK0S1WfiyyMB8GA1UdIwQY
MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt
YWE2ZWQ0ZGFmYjNiLzEvR2pEdkhPUmswWlRUa2VCc3dNclJMVlotTExJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi
LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHxZMMA0G
CSqGSIb3DQEBCwUAA4IBAQAURHSHgYSuqxUxSfHbqxAVvM4nxkRNgCle9bF30nws
wkimM/k6zM2XbX0SoSZjXQ31JAbioDuwrfzFKg6Rl3Y6h7dnoLNKE2LnXB9/r4g8
oezaHdu7H+n2SVrmlzqnSSgI9Eoeg2uaK78p2Rb6smLuFu+wrQDAS14pFwfhwIA3
srL/FAcunLMs0S7DYVQf2TwU7F4Q3MfYcsRWhQIr7Iw+0jgu6aBfV85x927tko9E
sOYeTAJ82fFce1DHItpEgTICjzI3ZebjJByBeoY0wsCBjrIpjtgsBEAJAfiv2Pko
wv243n7BWJV2CQ4KMkH8zLIznDaIdTyPjMfWbKREyY2m
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:48:27 2025 by rpki-client