This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/Gk-3Xu_izSB_f9RVT4Mx95fzdwQ.roa
File:                     Gk-3Xu_izSB_f9RVT4Mx95fzdwQ.roa (raw, json)
Hash identifier:          qSiZYwUebITVF7msT4gMb3T5zA9NBTdfmsfNp4wHc7k=
Subject key identifier:   1A:4F:B7:5E:EF:E2:CD:20:7F:7F:D4:55:4F:83:31:F7:97:F3:77:04
Certificate issuer:       /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial:       019B76EAEBEBD98291B4389E6CA54C544162
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/Gk-3Xu_izSB_f9RVT4Mx95fzdwQ.roa
Signing time:             Thu 01 Jan 2026 00:17:45 +0000
ROA not before:           Thu 01 Jan 2026 00:17:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201706
IP address blocks:        92.53.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:eb:eb:d9:82:91:b4:38:9e:6c:a5:4c:54:41:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
        Validity
            Not Before: Jan  1 00:17:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1a4fb75eefe2cd207f7fd4554f8331f797f37704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:86:c1:f4:c6:49:61:05:ea:d6:0c:59:26:53:
                    bb:be:9e:b1:91:8e:4a:c2:f7:46:6a:1a:ee:75:17:
                    15:3a:6d:02:f6:4f:69:5c:e7:ef:89:87:9d:4a:c2:
                    e6:b9:08:4f:cc:49:dc:e4:fd:80:80:90:75:34:34:
                    b2:ba:92:5e:69:c0:d5:53:ba:75:8f:51:83:7e:eb:
                    62:88:4e:eb:4f:85:60:20:b6:99:32:3f:d5:66:14:
                    30:da:f8:90:81:47:d7:d4:34:4d:83:c4:af:b8:3d:
                    b2:0e:9f:23:2b:65:fa:e8:08:8b:e6:43:35:8e:d0:
                    96:36:bd:26:8d:a4:54:6e:0c:c5:0e:51:67:e9:12:
                    f5:43:8f:f4:0f:38:9c:81:7f:a5:a0:11:42:e5:41:
                    ca:e0:c5:fe:49:24:d0:2e:4b:80:a3:29:ba:85:3e:
                    53:4f:b9:c6:d3:49:d5:e9:e4:9e:28:f4:08:27:c6:
                    2a:40:14:04:aa:4b:4a:87:06:20:84:cf:6d:78:42:
                    e7:6d:ad:16:cf:6e:1a:a3:bc:31:c5:da:6b:89:5b:
                    a7:00:1b:61:cd:4e:de:c2:c8:d4:b2:b5:71:03:0f:
                    6d:60:6a:c1:a3:ee:72:d5:1b:1b:2f:04:3e:c7:76:
                    be:99:3c:89:7e:fe:15:ba:bc:fe:1d:9d:59:88:4e:
                    cc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4F:B7:5E:EF:E2:CD:20:7F:7F:D4:55:4F:83:31:F7:97:F3:77:04
            X509v3 Authority Key Identifier:
                keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/Gk-3Xu_izSB_f9RVT4Mx95fzdwQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.53.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:cc:8b:f0:07:db:0e:98:d3:d0:41:af:80:c5:a6:e7:07:12:
         c3:06:7c:2f:6b:c3:9b:a4:4c:32:47:59:c5:6a:75:b3:c6:17:
         56:2b:aa:22:4b:29:8b:a6:74:74:c2:60:00:07:6b:12:6a:4e:
         09:c0:fd:95:5d:9d:e8:7f:76:56:25:fd:8f:71:66:9e:cd:29:
         d4:dc:e5:98:07:79:d8:b2:60:99:c5:88:f7:2e:f8:2a:c9:c5:
         4e:4f:b4:7d:ca:44:ad:8a:ec:9a:0d:39:90:9c:f8:2f:ff:b1:
         73:11:57:c0:8e:b1:98:89:19:7d:da:8a:12:a8:f8:25:70:b3:
         5c:83:79:49:07:a8:0b:08:b7:53:57:8b:af:46:3f:a6:10:0e:
         43:e5:06:73:97:0e:8d:f1:fb:68:97:e5:86:1a:07:5d:f4:8d:
         52:03:a0:b6:4a:9e:56:eb:e0:ee:77:31:2a:7e:13:0f:5f:11:
         e0:23:d3:5f:97:1b:a7:65:e2:80:df:8e:7b:72:b8:c0:5a:dd:
         3a:c0:24:c3:c8:43:13:28:d4:59:50:24:5e:c7:f7:84:bb:ed:
         74:4f:fb:45:92:62:ad:4d:67:8e:1b:59:4c:fa:20:f0:d3:40:
         e1:6c:ae:08:52:ea:ce:3d:b9:b8:9c:71:31:b6:66:f2:de:57:
         95:4d:f8:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt26uvr2YKRtDiebKVMVEFiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYjY5YjU5ZDE5ZjI5ODdlNDlmMTg1MmQ2MGJiMTc3N2Y4
MGEzMDEwHhcNMjYwMTAxMDAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTRmYjc1ZWVmZTJjZDIwN2Y3ZmQ0NTU0ZjgzMzFmNzk3ZjM3NzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIbB9MZJYQXq1gxZJlO7vp6xkY5K
wvdGahrudRcVOm0C9k9pXOfviYedSsLmuQhPzEnc5P2AgJB1NDSyupJeacDVU7p1
j1GDfutiiE7rT4VgILaZMj/VZhQw2viQgUfX1DRNg8SvuD2yDp8jK2X66AiL5kM1
jtCWNr0mjaRUbgzFDlFn6RL1Q4/0DzicgX+loBFC5UHK4MX+SSTQLkuAoym6hT5T
T7nG00nV6eSeKPQIJ8YqQBQEqktKhwYghM9teELnba0Wz24ao7wxxdpriVunABth
zU7ewsjUsrVxAw9tYGrBo+5y1RsbLwQ+x3a+mTyJfv4Vurz+HZ1ZiE7MBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBpPt17v4s0gf3/UVU+DMfeX83cEMB8GA1UdIwQY
MBaAFBG2m1nRnymH5J8YUtYLsXd/gKMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTIt
ZDE2OWMwODhiNDEyLzEvR2stM1h1X2l6U0JfZjlSVlQ0TXg5NWZ6ZHdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTItZDE2OWMwODhiNDEy
LzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXDVBMA0G
CSqGSIb3DQEBCwUAA4IBAQCnzIvwB9sOmNPQQa+AxabnBxLDBnwva8ObpEwyR1nF
anWzxhdWK6oiSymLpnR0wmAAB2sSak4JwP2VXZ3of3ZWJf2PcWaezSnU3OWYB3nY
smCZxYj3LvgqycVOT7R9ykStiuyaDTmQnPgv/7FzEVfAjrGYiRl92ooSqPglcLNc
g3lJB6gLCLdTV4uvRj+mEA5D5QZzlw6N8ftol+WGGgdd9I1SA6C2Sp5W6+DudzEq
fhMPXxHgI9NflxunZeKA3457crjAWt06wCTDyEMTKNRZUCRex/eEu+10T/tFkmKt
TWeOG1lM+iDw00DhbK4IUurOPbm4nHExtmby3leVTfi+
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:32:53 2026 by rpki-client