This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/GRurkR15IRibny01c2SgIJfB2ug.roa
File:                     GRurkR15IRibny01c2SgIJfB2ug.roa (raw, json)
Hash identifier:          HYnLeHjwl0NzFIGJaGbDg+VGhR0vZ/WRcnjZj+Q9dqw=
Subject key identifier:   19:1B:AB:91:1D:79:21:18:9B:9F:2D:35:73:64:A0:20:97:C1:DA:E8
Certificate issuer:       /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial:       019B7C807D63A2221FC2948E206CF4042097
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/GRurkR15IRibny01c2SgIJfB2ug.roa
Signing time:             Fri 02 Jan 2026 02:19:14 +0000
ROA not before:           Fri 02 Jan 2026 02:19:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44989
IP address blocks:        212.163.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:7d:63:a2:22:1f:c2:94:8e:20:6c:f4:04:20:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
        Validity
            Not Before: Jan  2 02:19:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=191bab911d7921189b9f2d357364a02097c1dae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e8:ea:55:ea:06:0d:05:b8:99:6b:1d:62:5e:
                    f4:3a:fa:cb:69:43:71:dd:35:e5:db:d6:97:7c:0d:
                    68:74:b5:66:8d:8b:c6:1a:de:7c:6a:ad:4b:32:da:
                    fa:11:9b:6e:51:fd:45:45:39:03:8a:8e:d5:95:3a:
                    64:39:08:b9:12:33:33:5f:e0:c9:09:91:d1:d5:a1:
                    dc:60:7b:44:5b:ab:cf:9b:1a:48:20:39:3f:7f:46:
                    df:45:3c:67:ff:c0:e0:22:e3:be:0b:b5:b5:60:fb:
                    88:93:e1:11:88:3e:1f:79:ea:d0:93:fa:7a:b8:c9:
                    96:19:2f:62:01:8e:da:39:2b:d2:d3:1d:71:d5:17:
                    e6:d5:1e:af:43:27:6b:74:c8:96:49:83:4a:08:c0:
                    2a:8a:5e:dc:44:28:e3:d7:ad:76:d2:eb:db:65:01:
                    27:bf:54:19:a7:db:3d:94:13:50:f1:46:fa:74:fe:
                    8f:7f:6f:fe:66:fa:95:9d:7e:8c:af:81:e6:82:06:
                    99:3f:d4:8b:aa:a0:72:fb:0f:9b:95:51:31:17:bd:
                    34:55:15:2e:3f:ff:31:0c:27:b1:d0:71:c7:65:54:
                    8f:d9:a0:fc:e4:25:2e:25:c0:b3:61:bb:59:bb:78:
                    87:92:45:34:31:8a:79:8d:0d:41:8a:35:a0:3e:45:
                    96:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:1B:AB:91:1D:79:21:18:9B:9F:2D:35:73:64:A0:20:97:C1:DA:E8
            X509v3 Authority Key Identifier:
                keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/GRurkR15IRibny01c2SgIJfB2ug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.163.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         f0:60:ad:e5:4d:9f:fb:af:59:fd:44:8b:cd:8b:65:dc:ea:02:
         1c:1a:2e:7f:5e:8b:d4:7b:7c:a2:11:12:18:e8:df:ed:81:f2:
         29:62:b9:3c:62:ad:5b:34:cc:49:d9:90:75:b2:e3:b9:36:4e:
         6c:3d:5f:88:ca:94:69:c4:da:49:ac:c2:0a:c9:d6:00:10:b0:
         87:3e:ca:e6:cf:b4:ed:6a:77:b6:62:6a:5f:06:01:f1:fb:42:
         9a:1a:d0:85:db:25:62:0f:64:ac:6b:18:aa:a9:86:10:47:c2:
         70:21:30:04:1e:d7:b1:77:b4:64:a3:b2:bc:84:b0:89:ec:4d:
         14:74:da:33:ff:dd:78:00:5c:12:8e:8c:fd:ab:09:d2:aa:14:
         1a:64:78:40:03:71:8a:9d:2a:76:4b:81:d2:35:e5:05:6e:bb:
         68:73:b0:ba:1d:69:b2:27:18:ae:74:e1:ca:0f:7c:9c:e5:33:
         98:77:38:74:fe:a8:d4:db:5c:ed:1c:b7:52:97:28:95:6e:de:
         57:f4:76:da:12:7c:5a:03:f3:5f:e4:55:cb:c8:e2:fd:e4:8b:
         74:07:9f:21:d5:a1:17:af:2f:56:ea:01:a0:d3:5e:8a:48:71:
         98:8e:26:05:45:2f:d6:fc:ef:7a:b3:24:6a:33:b8:ad:74:86:
         ea:d2:6b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:17:37 2026 by rpki-client