This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/gvs0UvHWJjRzgW_Syd97phf7MKo.roa
File:                     gvs0UvHWJjRzgW_Syd97phf7MKo.roa (raw, json)
Hash identifier:          fexk3vqFl5jqXokxQAei7fGYBfpuoLUr1xwGug2Wu34=
Subject key identifier:   82:FB:34:52:F1:D6:26:34:73:81:6F:D2:C9:DF:7B:A6:17:FB:30:AA
Certificate issuer:       /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial:       019B7C11EA0D90635F7522B2F3107EBB22E3
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/gvs0UvHWJjRzgW_Syd97phf7MKo.roa
Signing time:             Fri 02 Jan 2026 00:18:27 +0000
ROA not before:           Fri 02 Jan 2026 00:18:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     30885
IP address blocks:        91.212.110.0/24 maxlen: 24
                          178.216.11.0/24 maxlen: 24
                          194.102.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:11:ea:0d:90:63:5f:75:22:b2:f3:10:7e:bb:22:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
        Validity
            Not Before: Jan  2 00:18:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=82fb3452f1d6263473816fd2c9df7ba617fb30aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:fb:8c:d1:74:3f:bf:11:b1:14:be:57:0b:
                    9b:72:70:da:7a:b6:09:f2:be:68:bc:98:be:df:1b:
                    d6:8f:b5:c2:b8:41:fd:33:2b:28:71:03:3e:5c:4f:
                    bf:c1:78:30:be:39:dc:7a:64:d5:5e:95:ec:c7:55:
                    bf:c6:5b:bf:29:d5:d9:fc:3a:cc:48:fa:82:d1:e3:
                    c2:42:3e:d4:cb:2f:1f:a4:a8:bc:cb:17:ef:11:61:
                    80:22:63:63:d9:f0:4e:62:bf:23:a6:6d:b6:4e:9f:
                    71:00:af:78:43:fd:da:3d:0e:b2:77:6f:1a:cb:32:
                    c5:f8:31:48:2d:5d:62:12:6f:1a:2e:bc:30:7f:6c:
                    54:bd:7c:bd:ea:99:e4:a4:08:6b:52:01:6c:b8:08:
                    f5:1e:7f:c9:23:59:58:08:79:e8:f1:52:f4:0a:54:
                    e3:4f:63:6b:88:fe:45:63:54:b2:b5:76:84:82:0c:
                    37:bf:4a:20:b6:e3:66:b2:a3:c5:b6:34:22:2b:af:
                    d1:81:bb:47:58:72:b4:dd:f0:0b:e5:75:b1:95:b2:
                    f7:59:e2:67:0c:d0:99:98:2d:3e:fe:d5:e9:bd:a6:
                    ef:a5:0e:68:c6:ac:57:e2:fd:f9:6f:02:e2:c3:58:
                    f0:ad:f3:52:92:4b:4c:dd:08:2e:84:7f:08:25:57:
                    76:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FB:34:52:F1:D6:26:34:73:81:6F:D2:C9:DF:7B:A6:17:FB:30:AA
            X509v3 Authority Key Identifier:
                keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/gvs0UvHWJjRzgW_Syd97phf7MKo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.212.110.0/24
                  178.216.11.0/24
                  194.102.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:47:00:97:6f:54:dd:f1:78:53:90:dc:8f:03:6f:ba:3d:14:
         63:93:05:e8:3e:ab:2c:ff:c7:c1:89:da:4f:04:ae:12:83:3a:
         c2:de:08:9d:b9:ff:05:a2:d8:40:58:12:ef:f1:5a:80:81:45:
         43:7c:c6:d9:ad:43:67:84:40:b5:43:31:0f:64:65:b0:99:13:
         35:02:ba:27:8f:39:79:a8:a6:8e:01:a7:bc:14:2d:e5:87:d7:
         3d:e5:01:71:c7:8a:59:a5:44:97:21:15:0d:13:3f:c5:25:4c:
         89:c0:bd:85:0f:da:e8:fc:7a:a3:30:d8:b5:ac:bc:f6:93:32:
         7f:e1:ef:d0:46:7a:2b:67:e2:71:52:1d:8f:2d:23:f0:aa:8f:
         a0:17:be:6d:c7:2e:b7:bf:ad:95:9f:7c:7c:d6:69:bb:98:35:
         6e:fb:f6:81:5d:cf:dc:49:ec:dc:62:64:f1:da:71:80:6d:08:
         44:9a:a8:e8:28:91:19:ec:fc:0c:c9:a1:22:e2:3d:f7:39:f1:
         78:5b:3c:ff:54:83:b8:a6:8d:47:9b:26:04:4e:90:aa:b9:af:
         86:62:bb:7d:6d:b2:50:85:4f:38:5a:73:ca:f1:ba:66:7d:0f:
         70:9f:73:f8:75:9d:66:bf:85:54:e6:f6:60:10:9a:26:09:39:
         08:33:42:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:57:43 2026 by rpki-client