This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/gB_s-WdUnxEPR2XESWswld-SB24.roa
File:                     gB_s-WdUnxEPR2XESWswld-SB24.roa (raw, json)
Hash identifier:          qRp5667FdJ5J3f1BulVc/pqFyv4XSQMc14cF/bbrQac=
Subject key identifier:   80:1F:EC:F9:67:54:9F:11:0F:47:65:C4:49:6B:30:95:DF:92:07:6E
Certificate issuer:       /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial:       019B7A5B7F19BF77969907F7C21169D9C4A4
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/gB_s-WdUnxEPR2XESWswld-SB24.roa
Signing time:             Thu 01 Jan 2026 16:19:35 +0000
ROA not before:           Thu 01 Jan 2026 16:19:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213006
IP address blocks:        185.21.135.0/24 maxlen: 24
                          195.182.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:7f:19:bf:77:96:99:07:f7:c2:11:69:d9:c4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
        Validity
            Not Before: Jan  1 16:19:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=801fecf967549f110f4765c4496b3095df92076e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a8:ed:d4:70:ef:c8:a7:2b:5f:46:31:05:fa:
                    24:c6:59:9d:c0:b3:f7:79:94:2c:51:e1:3d:35:bb:
                    23:63:4e:a9:ea:18:ed:a1:04:76:c1:eb:e6:a7:f4:
                    44:fd:74:90:45:df:34:81:cd:cd:8a:29:90:cf:d6:
                    6f:96:aa:40:b8:a7:a8:9a:db:23:e5:c9:b7:81:9b:
                    f6:87:d0:f9:33:e1:25:c1:9b:92:ff:27:1b:7e:d7:
                    ef:94:c5:60:24:d6:fb:db:d2:fc:7e:c3:b8:7b:23:
                    76:04:76:62:39:4b:58:13:35:5b:11:e8:90:dd:5d:
                    bc:57:98:10:f3:b8:8f:8c:73:fa:3d:ec:36:16:ad:
                    2c:7e:68:6b:c4:ff:f0:58:fe:01:cd:09:1c:2a:5b:
                    2a:ba:01:d3:6f:35:ec:db:8d:71:80:d5:67:68:a9:
                    44:46:17:d0:6e:49:89:c6:99:4f:24:d0:68:62:2f:
                    b4:92:07:9c:cf:a9:bc:1f:fc:28:83:82:0f:58:5e:
                    bb:c4:45:8c:27:46:49:ef:2d:12:ad:e2:cc:19:c2:
                    4d:f0:65:ff:1e:db:14:22:87:d7:f0:cd:63:2c:97:
                    0c:c1:2a:34:1c:37:8f:a8:a6:cd:77:71:b3:04:2e:
                    fa:95:f1:62:c8:6e:ab:86:88:e0:85:bc:0f:81:72:
                    63:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1F:EC:F9:67:54:9F:11:0F:47:65:C4:49:6B:30:95:DF:92:07:6E
            X509v3 Authority Key Identifier:
                keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/gB_s-WdUnxEPR2XESWswld-SB24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.21.135.0/24
                  195.182.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:fd:ca:7b:80:b0:3b:60:a7:50:13:22:33:b9:3d:e4:a7:b1:
         85:1b:ec:38:06:43:89:2b:ed:fa:aa:99:9a:67:41:40:95:4b:
         63:aa:82:3d:65:9e:6c:ff:a0:39:d3:46:14:2a:31:62:8f:86:
         19:87:6b:e9:b9:e0:f4:38:cc:ca:7c:9b:e6:1d:a5:4c:12:f7:
         b1:f4:3a:a9:e9:c3:77:d2:12:a2:73:5a:4f:2e:01:f6:46:e1:
         6c:fd:af:82:d3:b4:df:4e:3f:94:c1:4a:c6:c0:9c:f4:11:6a:
         43:39:4b:22:90:11:7c:8a:78:2c:f0:e8:3e:71:64:a6:46:ec:
         fb:c1:09:c5:b6:85:fc:ed:99:dc:44:e6:63:59:aa:a0:a7:75:
         65:d3:00:4a:b1:e0:f2:3b:b2:e6:98:0b:2b:0f:23:70:8a:3d:
         c4:9a:b4:e4:4c:f6:df:15:3d:0e:af:ab:ac:17:db:85:07:86:
         e2:0d:7a:ff:63:5a:1a:8a:fa:f1:d0:7c:20:1b:d9:df:97:b1:
         16:01:58:15:4b:90:4a:a4:1a:e3:0b:be:91:d4:a6:40:80:0f:
         a1:37:08:78:2b:82:aa:a8:72:90:45:92:ff:0d:d4:85:c4:87:
         7f:3e:40:9a:6b:9a:db:ea:d5:77:43:e3:16:cb:a9:18:fb:4e:
         d9:17:2b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:40:29 2026 by rpki-client