This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Ge_F9ExwO8_45uYKevZJ8TRrhLI.roa
File:                     Ge_F9ExwO8_45uYKevZJ8TRrhLI.roa (raw, json)
Hash identifier:          Kx5DX+vDs5UGFHjBPSnm22s/IMa2TGmIuIccjRdHY/A=
Subject key identifier:   19:EF:C5:F4:4C:70:3B:CF:F8:E6:E6:0A:7A:F6:49:F1:34:6B:84:B2
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       019B78344717E34F8469E89B61345E63D90D
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Ge_F9ExwO8_45uYKevZJ8TRrhLI.roa
Signing time:             Thu 01 Jan 2026 06:17:30 +0000
ROA not before:           Thu 01 Jan 2026 06:17:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     23858
IP address blocks:        45.14.105.0/24 maxlen: 32
                          45.14.107.0/24 maxlen: 32
                          45.87.92.0/24 maxlen: 32
                          45.87.93.0/24 maxlen: 32
                          45.87.95.0/24 maxlen: 32
                          45.135.40.0/22 maxlen: 32
                          45.139.192.0/24 maxlen: 32
                          45.139.195.0/24 maxlen: 32
                          92.118.188.0/24 maxlen: 32
                          185.194.54.0/24 maxlen: 32
                          185.248.87.0/24 maxlen: 32
                          195.245.219.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:47:17:e3:4f:84:69:e8:9b:61:34:5e:63:d9:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Jan  1 06:17:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=19efc5f44c703bcff8e6e60a7af649f1346b84b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:67:fe:44:c2:9f:38:b5:d4:53:fb:d0:7d:52:
                    db:80:c1:b9:3b:67:14:a2:cd:48:37:26:59:b2:66:
                    04:b4:cd:7d:f1:56:67:e0:3c:86:a8:60:a2:5d:d9:
                    7f:58:64:b2:93:b6:02:e0:12:c8:e4:41:af:f9:63:
                    8c:3f:41:4f:02:e9:6c:b6:c3:0a:10:e5:f4:ed:8d:
                    e7:0e:06:c0:f8:ea:32:d6:28:30:6d:d0:d9:18:59:
                    7e:93:59:2c:fc:11:03:ba:57:3b:ca:1a:96:c6:32:
                    62:10:d8:80:c5:28:59:8a:ce:97:96:08:f8:76:f9:
                    36:28:38:b0:43:77:43:f5:a0:98:fc:41:0c:b3:21:
                    4b:51:c6:23:9b:7a:1e:94:e4:3f:f7:9f:60:87:e4:
                    72:c6:e7:7d:07:8d:46:09:79:ec:f7:41:e1:6b:75:
                    57:f8:a8:f2:39:65:2d:8c:27:b4:a3:0c:f7:38:a4:
                    ec:35:cb:2e:15:d6:23:8c:22:09:e8:05:2c:fd:45:
                    53:09:ec:c3:44:44:4c:75:c3:e8:54:a2:95:10:fe:
                    15:f5:b2:99:bd:ee:3a:14:3e:c5:50:4a:92:b7:c2:
                    88:a2:e3:ac:07:af:e4:be:e7:a4:f9:8a:65:04:2a:
                    c8:a9:0f:58:c4:c9:45:b8:31:28:77:b4:4c:5c:2d:
                    c2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EF:C5:F4:4C:70:3B:CF:F8:E6:E6:0A:7A:F6:49:F1:34:6B:84:B2
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Ge_F9ExwO8_45uYKevZJ8TRrhLI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.14.105.0/24
                  45.14.107.0/24
                  45.87.92.0/23
                  45.87.95.0/24
                  45.135.40.0/22
                  45.139.192.0/24
                  45.139.195.0/24
                  92.118.188.0/24
                  185.194.54.0/24
                  185.248.87.0/24
                  195.245.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:f7:0e:02:f6:9b:36:c1:20:78:8c:4b:59:81:a1:d4:88:65:
         3b:41:cd:2e:bc:d1:15:bb:d5:7b:d8:c3:f1:e4:69:c0:ff:5e:
         31:f2:d8:d8:9c:68:ae:90:7f:47:25:ad:13:82:18:b9:f3:86:
         0d:f3:c9:31:b3:d4:7d:97:0d:f0:91:39:a9:35:fa:5d:10:34:
         93:78:7e:20:5a:e4:96:09:49:53:f9:7e:0e:39:70:27:0f:74:
         44:74:a1:f3:e5:84:7d:41:aa:a6:f3:be:bf:70:2a:30:2c:c1:
         20:b7:4c:6e:27:9a:e3:fd:b2:27:73:ae:9a:a0:fc:9b:93:89:
         48:07:7b:e9:b7:7d:81:32:bb:0f:d4:ff:4e:83:7f:3f:87:aa:
         f0:fb:cc:07:c7:dd:6e:bf:6a:3e:37:84:03:ab:80:ac:23:9a:
         59:09:6e:61:75:00:80:c4:7b:88:7f:1e:9d:90:6a:4e:9d:61:
         47:50:df:32:8d:f1:fa:f4:d6:a0:49:a4:91:e6:85:b2:83:b3:
         ba:7d:5f:03:7e:1c:e0:a5:b1:2d:6e:56:2e:d0:8a:de:16:21:
         10:67:73:7f:7e:93:4f:ff:9c:16:8b:c8:76:b8:2b:18:75:65:
         da:62:db:7b:36:be:a1:96:88:3b:35:e6:68:ce:9f:4f:a8:36:
         63:82:f3:0a
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZt4NEcX40+EaeibYTReY9kNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjYwMTAxMDYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWVmYzVmNDRjNzAzYmNmZjhlNmU2MGE3YWY2NDlmMTM0NmI4NGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9mf+RMKfOLXUU/vQfVLbgMG5O2cU
os1INyZZsmYEtM198VZn4DyGqGCiXdl/WGSyk7YC4BLI5EGv+WOMP0FPAulstsMK
EOX07Y3nDgbA+Ooy1igwbdDZGFl+k1ks/BEDulc7yhqWxjJiENiAxShZis6Xlgj4
dvk2KDiwQ3dD9aCY/EEMsyFLUcYjm3oelOQ/959gh+Ryxud9B41GCXns90Hha3VX
+KjyOWUtjCe0owz3OKTsNcsuFdYjjCIJ6AUs/UVTCezDRERMdcPoVKKVEP4V9bKZ
ve46FD7FUEqSt8KIouOsB6/kvuek+YplBCrIqQ9YxMlFuDEod7RMXC3CowIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFBnvxfRMcDvP+ObmCnr2SfE0a4SyMB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvR2VfRjlFeHdPOF80NXVZS2V2Wko4VFJyaExJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQALQ5pAwQA
LQ5rAwQBLVdcAwQALVdfAwQCLYcoAwQALYvAAwQALYvDAwQAXHa8AwQAucI2AwQA
ufhXAwQAw/XbMA0GCSqGSIb3DQEBCwUAA4IBAQBG9w4C9ps2wSB4jEtZgaHUiGU7
Qc0uvNEVu9V72MPx5GnA/14x8tjYnGiukH9HJa0Tghi584YN88kxs9R9lw3wkTmp
NfpdEDSTeH4gWuSWCUlT+X4OOXAnD3REdKHz5YR9Qaqm876/cCowLMEgt0xuJ5rj
/bInc66aoPybk4lIB3vpt32BMrsP1P9Og38/h6rw+8wHx91uv2o+N4QDq4CsI5pZ
CW5hdQCAxHuIfx6dkGpOnWFHUN8yjfH69NagSaSR5oWyg7O6fV8DfhzgpbEtblYu
0IreFiEQZ3N/fpNP/5wWi8h2uCsYdWXaYtt7Nr6hlog7NeZozp9PqDZjgvMK
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:35:22 2026 by rpki-client