This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/GzLunkiuJrZT29GjfYzrNoKzi0o.roa
File:                     GzLunkiuJrZT29GjfYzrNoKzi0o.roa (raw, json)
Hash identifier:          z0qcndllBOvCrIDRa+Y5b8LPZSiodfnEHp+s+Xs1Z38=
Subject key identifier:   1B:32:EE:9E:48:AE:26:B6:53:DB:D1:A3:7D:8C:EB:36:82:B3:8B:4A
Certificate issuer:       /CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
Certificate serial:       019B7EA732D10D3E4308BC7DFBFB3F732B30
Authority key identifier: E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/GzLunkiuJrZT29GjfYzrNoKzi0o.roa
Signing time:             Fri 02 Jan 2026 12:20:45 +0000
ROA not before:           Fri 02 Jan 2026 12:20:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48391
IP address blocks:        193.200.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a7:32:d1:0d:3e:43:08:bc:7d:fb:fb:3f:73:2b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
        Validity
            Not Before: Jan  2 12:20:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1b32ee9e48ae26b653dbd1a37d8ceb3682b38b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ba:c0:99:f5:eb:ba:c6:fc:de:86:44:57:5c:
                    9f:ea:44:50:d1:15:01:15:2e:99:64:bf:1b:c1:07:
                    cb:e1:53:10:83:22:81:55:00:a4:1d:ce:52:6e:4a:
                    fa:cf:96:e9:c3:0c:37:60:6d:67:97:68:20:71:70:
                    64:aa:5b:00:34:25:c4:6a:af:bb:f3:10:31:ab:71:
                    ff:da:5c:b4:68:ed:d7:47:bd:6d:12:a6:ed:59:3d:
                    9d:3a:bc:9f:a8:84:40:89:05:a1:08:bc:6d:16:31:
                    55:64:71:26:1f:ea:07:2f:d6:95:88:d0:5c:b5:9c:
                    e3:c9:d3:53:d4:6b:2e:b2:bb:34:61:51:ba:6f:ad:
                    aa:33:c7:ad:7c:68:00:41:2e:ad:97:10:14:94:1b:
                    71:e0:7b:30:34:86:06:94:01:66:ab:5b:d2:ab:6f:
                    f0:ac:52:e8:7e:1c:8e:b0:61:35:47:1d:f6:f3:66:
                    2a:8e:77:4d:e9:ae:77:a9:a3:77:ef:b4:6b:38:6c:
                    88:1e:ba:3c:b8:9b:90:8f:ca:e1:a1:11:e4:b7:93:
                    04:5e:04:4c:91:a4:87:3a:41:9a:d0:31:43:a8:c0:
                    06:d1:ac:54:63:75:59:e7:de:c5:4e:92:d9:00:10:
                    03:f9:15:e1:d5:b9:ad:cd:5a:98:97:dc:fc:63:30:
                    1a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:32:EE:9E:48:AE:26:B6:53:DB:D1:A3:7D:8C:EB:36:82:B3:8B:4A
            X509v3 Authority Key Identifier:
                keyid:E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/GzLunkiuJrZT29GjfYzrNoKzi0o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.200.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:3f:48:07:3a:2a:4c:6b:8b:89:1f:2e:2c:73:6c:f0:18:df:
         7b:02:7a:92:ec:3b:49:74:57:d8:50:6b:ad:1e:23:f2:e4:33:
         75:e3:59:ca:7a:73:58:3c:3e:99:a4:6d:2f:0e:15:49:cd:f2:
         f7:61:92:f2:a0:9a:82:bc:af:0c:55:b6:68:2d:3d:1a:07:45:
         7e:72:3c:0f:f6:b7:fd:44:cc:ea:96:ac:59:05:c3:07:99:2c:
         5d:41:04:7a:7e:a2:d4:1f:d6:af:7e:1a:46:02:7b:c6:af:9e:
         2b:45:08:43:3c:7d:68:dd:d8:1d:f0:70:c0:d5:f1:a7:03:51:
         30:08:74:93:07:2f:c3:f7:34:cc:d8:4d:f0:7c:f7:b2:30:a8:
         14:18:af:82:d6:5a:a2:14:14:3f:3e:71:4f:51:51:17:c8:79:
         c1:da:fc:6b:c6:74:eb:68:e6:4c:59:c2:8b:37:a5:c3:dd:a0:
         02:48:cb:12:12:50:3b:c4:20:61:51:fd:aa:f3:a5:a2:03:4c:
         ca:ce:79:1f:79:41:95:9b:c1:f9:8d:70:7a:71:e2:f2:f2:bb:
         46:e3:fd:9e:6f:d6:1a:06:83:2e:6f:1d:72:c2:4e:60:b5:ab:
         38:38:f2:4f:98:ef:4e:82:53:c2:7e:ab:45:64:88:5f:c9:3f:
         c1:ec:a6:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+pzLRDT5DCLx9+/s/cyswMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MDZmYzk3MjkwMzRiZmIwNDY0ZGQ0Yzk4NWYxNGJhMjEw
ZTgxZTMwHhcNMjYwMTAyMTIyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjMyZWU5ZTQ4YWUyNmI2NTNkYmQxYTM3ZDhjZWIzNjgyYjM4YjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LrAmfXrusb83oZEV1yf6kRQ0RUB
FS6ZZL8bwQfL4VMQgyKBVQCkHc5Sbkr6z5bpwww3YG1nl2ggcXBkqlsANCXEaq+7
8xAxq3H/2ly0aO3XR71tEqbtWT2dOryfqIRAiQWhCLxtFjFVZHEmH+oHL9aViNBc
tZzjydNT1Gsusrs0YVG6b62qM8etfGgAQS6tlxAUlBtx4HswNIYGlAFmq1vSq2/w
rFLofhyOsGE1Rx3282YqjndN6a53qaN377RrOGyIHro8uJuQj8rhoRHkt5MEXgRM
kaSHOkGa0DFDqMAG0axUY3VZ597FTpLZABAD+RXh1bmtzVqYl9z8YzAagwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBsy7p5Iria2U9vRo32M6zaCs4tKMB8GA1UdIwQY
MBaAFOcG/JcpA0v7BGTdTJhfFLohDoHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80NzYzODMtZjZkYS00ZTBlLThlMTIt
ZDJkY2YwNWQzMzc2LzEvR3pMdW5raXVKclpUMjlHamZZenJOb0t6aTBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80NzYzODMtZjZkYS00ZTBlLThlMTItZDJkY2YwNWQzMzc2
LzEvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwciUMA0G
CSqGSIb3DQEBCwUAA4IBAQAUP0gHOipMa4uJHy4sc2zwGN97AnqS7DtJdFfYUGut
HiPy5DN141nKenNYPD6ZpG0vDhVJzfL3YZLyoJqCvK8MVbZoLT0aB0V+cjwP9rf9
RMzqlqxZBcMHmSxdQQR6fqLUH9avfhpGAnvGr54rRQhDPH1o3dgd8HDA1fGnA1Ew
CHSTBy/D9zTM2E3wfPeyMKgUGK+C1lqiFBQ/PnFPUVEXyHnB2vxrxnTraOZMWcKL
N6XD3aACSMsSElA7xCBhUf2q86WiA0zKznkfeUGVm8H5jXB6ceLy8rtG4/2eb9Ya
BoMubx1ywk5gtas4OPJPmO9OglPCfqtFZIhfyT/B7Kab
-----END CERTIFICATE-----
Generated at Mon Jan 26 15:01:44 2026 by rpki-client