This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/gUsfRW5v6N4S4q5wR9juMArT4gY.roa
File:                     gUsfRW5v6N4S4q5wR9juMArT4gY.roa (raw, json)
Hash identifier:          75aFyyp5OXyu2pt0nss+h3JtO3zNLiVM+h5iKxCtB54=
Subject key identifier:   81:4B:1F:45:6E:6F:E8:DE:12:E2:AE:70:47:D8:EE:30:0A:D3:E2:06
Certificate issuer:       /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial:       019B7CED0336C02890CF1A04CA8D7167F23A
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/gUsfRW5v6N4S4q5wR9juMArT4gY.roa
Signing time:             Fri 02 Jan 2026 04:17:46 +0000
ROA not before:           Fri 02 Jan 2026 04:17:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203735
IP address blocks:        92.119.62.0/24 maxlen: 24
                          92.119.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:03:36:c0:28:90:cf:1a:04:ca:8d:71:67:f2:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
        Validity
            Not Before: Jan  2 04:17:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=814b1f456e6fe8de12e2ae7047d8ee300ad3e206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ae:f6:26:6e:fb:f9:87:85:69:6d:3e:96:2b:
                    96:1a:78:57:ba:5a:2e:64:75:4b:80:dc:c4:b8:a4:
                    0e:2a:b3:33:05:d9:16:b3:9b:b8:a9:f8:5c:5e:31:
                    2c:15:07:0d:79:42:50:f5:a6:00:05:67:8c:24:a4:
                    8e:61:c7:01:78:1e:4b:c3:75:45:44:58:02:81:c0:
                    3c:ca:c2:9a:88:9b:89:a5:c1:cf:8d:3d:95:1d:81:
                    57:aa:58:05:cb:ca:d5:62:a9:0d:a5:67:96:9b:13:
                    ef:77:d1:3b:f4:cd:ae:5b:9a:9b:6b:8e:24:4c:df:
                    87:c2:30:17:52:82:8a:f3:67:77:4a:98:c8:e2:bc:
                    43:e7:1b:01:1f:5a:bd:aa:82:53:39:27:57:d8:5d:
                    bf:f0:8b:0c:ae:c4:49:a9:be:c0:22:52:27:aa:24:
                    1d:eb:00:36:22:e7:16:47:1c:f7:1a:57:2e:80:50:
                    fd:5e:c6:c6:9f:8e:1e:ea:21:6c:bd:d4:4e:9d:e8:
                    2b:ea:eb:cc:06:04:2f:3a:1c:59:4a:51:64:54:5c:
                    95:57:c0:ee:b7:18:b5:f8:bf:77:7f:6f:8a:6e:59:
                    47:0b:51:38:83:f8:c3:a6:a8:cb:0a:25:a2:3a:dc:
                    ef:1e:5b:85:50:e8:8c:d5:12:a5:8b:66:80:6b:32:
                    51:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4B:1F:45:6E:6F:E8:DE:12:E2:AE:70:47:D8:EE:30:0A:D3:E2:06
            X509v3 Authority Key Identifier:
                keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/gUsfRW5v6N4S4q5wR9juMArT4gY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:5d:02:1f:a3:72:df:cd:97:a3:c2:a7:c3:4a:26:ab:aa:fe:
         19:75:c8:17:48:11:21:84:8b:e7:35:7f:65:5a:2c:5a:5e:94:
         9f:f1:3b:56:b4:36:05:c0:a3:4f:35:ad:15:4f:40:6f:1f:62:
         92:ab:9a:31:10:82:1f:c0:5b:84:8a:ee:81:1b:98:dd:84:e3:
         22:25:75:1f:be:84:96:02:b9:47:22:20:02:90:4d:70:12:9f:
         03:ab:c6:7e:4b:29:1e:1d:74:81:4d:2e:46:33:fb:f3:4c:8f:
         67:19:e3:1c:db:f6:21:df:40:a3:13:e3:3a:bf:1d:8b:40:ec:
         13:ab:51:aa:a5:bc:48:c6:ec:af:33:5b:2e:96:94:af:ec:aa:
         2d:4f:73:07:3e:1c:8d:21:4e:6f:09:9e:4c:31:92:c0:e7:70:
         c4:8b:cf:7e:85:8e:49:b8:95:bc:0d:1a:c8:65:95:1f:65:55:
         9a:a2:ca:5d:97:7c:1d:1f:fa:1e:9e:1b:b1:25:ab:af:1d:2a:
         2d:af:3e:56:47:4c:2f:ca:e3:76:23:f4:21:6c:ee:6b:d5:36:
         11:a0:5f:9e:d3:13:07:13:e4:24:f9:0d:34:c5:49:70:0b:c4:
         5e:f3:8d:60:44:8d:7f:48:3a:57:bf:11:bd:01:00:71:09:46:
         fc:69:f6:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt87QM2wCiQzxoEyo1xZ/I6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYjZkOTAyNjM3MmNmY2U4ZmRlODIzYzNlZjljOWY3OTBh
YWUxNGYwHhcNMjYwMTAyMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTRiMWY0NTZlNmZlOGRlMTJlMmFlNzA0N2Q4ZWUzMDBhZDNlMjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK72Jm77+YeFaW0+liuWGnhXulou
ZHVLgNzEuKQOKrMzBdkWs5u4qfhcXjEsFQcNeUJQ9aYABWeMJKSOYccBeB5Lw3VF
RFgCgcA8ysKaiJuJpcHPjT2VHYFXqlgFy8rVYqkNpWeWmxPvd9E79M2uW5qba44k
TN+HwjAXUoKK82d3SpjI4rxD5xsBH1q9qoJTOSdX2F2/8IsMrsRJqb7AIlInqiQd
6wA2IucWRxz3GlcugFD9XsbGn44e6iFsvdROnegr6uvMBgQvOhxZSlFkVFyVV8Du
txi1+L93f2+KbllHC1E4g/jDpqjLCiWiOtzvHluFUOiM1RKli2aAazJR9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIFLH0Vub+jeEuKucEfY7jAK0+IGMB8GA1UdIwQY
MBaAFLO22QJjcs/Oj96CPD75yfeQquFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdiWkFtTnl6ODZQM29JOFB2bko5NUNxNFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84MzFkNTMtMDRlMC00NTczLWFjZjct
ZDRmMTJiMzdhMzE4LzEvZ1VzZlJXNXY2TjRTNHE1d1I5anVNQXJUNGdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy84MzFkNTMtMDRlMC00NTczLWFjZjctZDRmMTJiMzdhMzE4
LzEvczdiWkFtTnl6ODZQM29JOFB2bko5NUNxNFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXHc+MA0G
CSqGSIb3DQEBCwUAA4IBAQByXQIfo3LfzZejwqfDSiarqv4ZdcgXSBEhhIvnNX9l
WixaXpSf8TtWtDYFwKNPNa0VT0BvH2KSq5oxEIIfwFuEiu6BG5jdhOMiJXUfvoSW
ArlHIiACkE1wEp8Dq8Z+SykeHXSBTS5GM/vzTI9nGeMc2/Yh30CjE+M6vx2LQOwT
q1GqpbxIxuyvM1sulpSv7KotT3MHPhyNIU5vCZ5MMZLA53DEi89+hY5JuJW8DRrI
ZZUfZVWaospdl3wdH/oenhuxJauvHSotrz5WR0wvyuN2I/QhbO5r1TYRoF+e0xMH
E+Qk+Q00xUlwC8Re841gRI1/SDpXvxG9AQBxCUb8afZi
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:21:14 2026 by rpki-client