This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/Gb_AwXxUin8Mn5gcEsrwou3NXAA.roa
File:                     Gb_AwXxUin8Mn5gcEsrwou3NXAA.roa (raw, json)
Hash identifier:          48NbX0kO+A48lwBzWI9azRgsJ0FS4CNgxNIjVsLWo4g=
Subject key identifier:   19:BF:C0:C1:7C:54:8A:7F:0C:9F:98:1C:12:CA:F0:A2:ED:CD:5C:00
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       019B7E371CD18A0D36B81B7E9DCC08F7F472
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/Gb_AwXxUin8Mn5gcEsrwou3NXAA.roa
Signing time:             Fri 02 Jan 2026 10:18:19 +0000
ROA not before:           Fri 02 Jan 2026 10:18:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60006
IP address blocks:        79.133.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:1c:d1:8a:0d:36:b8:1b:7e:9d:cc:08:f7:f4:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Jan  2 10:18:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=19bfc0c17c548a7f0c9f981c12caf0a2edcd5c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1f:09:f4:73:bb:61:84:ee:a8:6d:1d:b9:f2:
                    b4:68:70:0a:82:1f:31:ee:95:91:b1:dc:f1:24:1e:
                    77:ce:f7:80:66:49:25:ae:8d:db:f3:0b:df:c5:dc:
                    22:a9:23:6b:c6:52:d5:78:f5:d8:16:9a:4c:1d:5f:
                    f9:7a:37:78:6b:1a:e4:2c:66:fd:3c:6f:fc:02:82:
                    1c:ed:ee:3f:b5:5f:da:b6:f6:a5:b7:8e:b4:c8:23:
                    f5:10:cd:2e:5b:ac:ac:1a:3c:6b:3c:88:71:c8:ac:
                    9a:be:ef:bd:12:dd:9a:15:04:6d:7c:7c:be:60:47:
                    6a:2d:6a:6b:f5:cf:98:30:35:8a:37:93:e3:c6:c2:
                    7c:9c:58:cd:72:1d:6a:54:fc:ec:de:fb:ab:e0:2e:
                    74:7a:63:5e:d0:c0:e3:16:29:79:ca:b8:c1:c3:a8:
                    f6:eb:ee:77:3f:4e:3a:99:e7:dc:52:5c:a7:bf:3b:
                    55:7c:37:08:4f:ba:a5:8d:40:05:2c:64:88:17:1b:
                    2e:49:65:d8:87:64:8e:32:1b:c6:1d:8c:bf:ad:03:
                    4a:f9:32:b0:20:79:aa:16:28:7d:73:0b:52:36:28:
                    b5:d6:a8:36:99:84:e1:a2:e5:31:0a:08:82:3f:5a:
                    f6:72:9f:22:83:fb:48:72:52:96:cf:f9:e1:70:c6:
                    6c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BF:C0:C1:7C:54:8A:7F:0C:9F:98:1C:12:CA:F0:A2:ED:CD:5C:00
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/Gb_AwXxUin8Mn5gcEsrwou3NXAA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.133.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:d3:16:ee:4f:fa:a9:25:a3:7a:7d:4d:77:dc:27:be:be:3e:
         c8:6f:9b:05:e8:55:bf:59:54:ec:28:8b:16:ff:88:d8:ab:af:
         e3:8b:aa:e2:4b:5b:f9:45:6d:39:c4:68:3b:d6:8a:41:67:56:
         4f:57:b7:bd:b6:a4:10:2d:cc:17:02:bd:5d:74:fd:c3:c9:99:
         79:84:4e:d1:4b:36:93:e2:4f:c4:77:de:20:50:f5:d6:a0:6c:
         ad:94:b6:de:1c:61:3e:a0:c5:87:c2:f1:c7:ad:91:de:33:d1:
         8a:3d:17:3e:6f:33:64:b0:49:5d:d7:33:5d:09:e9:01:e4:e2:
         6b:d0:0c:e8:22:9c:0c:40:39:65:1e:f4:13:31:10:c6:cc:90:
         87:67:80:58:90:3d:85:18:ec:70:4b:af:39:fa:32:d3:8c:01:
         2d:ec:5b:6c:b8:af:c0:1e:0a:9f:ab:29:3b:8b:8d:7e:d8:b2:
         22:cf:c9:97:0c:6d:a8:ec:1b:6b:6b:0c:5f:5c:2f:0d:ae:f9:
         0c:4b:b7:0f:59:dc:8d:ca:52:65:ad:64:e1:1c:71:24:45:d9:
         f0:45:37:a3:95:86:ed:5e:dd:2e:c8:92:fb:83:58:bd:13:fa:
         8e:a8:ed:18:94:fe:e7:72:6f:d2:9c:05:79:08:d5:e8:0a:b2:
         a3:ed:73:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:32:28 2026 by rpki-client