This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/g-zatH8Oq_MQYmoyLk3Vs9WWR7o.roa
File:                     g-zatH8Oq_MQYmoyLk3Vs9WWR7o.roa (raw, json)
Hash identifier:          l290wYJLj+aGbmI/IPkEFk5Ctmd1idN85NIe9PSePV0=
Subject key identifier:   83:EC:DA:B4:7F:0E:AB:F3:10:62:6A:32:2E:4D:D5:B3:D5:96:47:BA
Certificate issuer:       /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial:       019AB0D9CF099B326EF10740B277B21490CB
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/g-zatH8Oq_MQYmoyLk3Vs9WWR7o.roa
Signing time:             Sun 23 Nov 2025 13:14:15 +0000
ROA not before:           Sun 23 Nov 2025 13:14:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213449
IP address blocks:        2a14:c380:390::/48 maxlen: 48
                          2a14:c380:391::/48 maxlen: 48
                          2a14:c380:392::/48 maxlen: 48
                          2a14:c380:393::/48 maxlen: 48
                          2a14:c380:394::/48 maxlen: 48
                          2a14:c380:395::/48 maxlen: 48
                          2a14:c380:396::/48 maxlen: 48
                          2a14:c380:397::/48 maxlen: 48
                          2a14:c380:398::/48 maxlen: 48
                          2a14:c380:399::/48 maxlen: 48
                          2a14:c380:39a::/48 maxlen: 48
                          2a14:c380:39b::/48 maxlen: 48
                          2a14:c380:39c::/48 maxlen: 48
                          2a14:c380:39d::/48 maxlen: 48
                          2a14:c380:39e::/48 maxlen: 48
                          2a14:c380:39f::/48 maxlen: 48
                          2a14:c380:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:b0:d9:cf:09:9b:32:6e:f1:07:40:b2:77:b2:14:90:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
        Validity
            Not Before: Nov 23 13:14:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=83ecdab47f0eabf310626a322e4dd5b3d59647ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0b:0d:36:3f:77:6d:ff:03:93:64:d5:78:f2:
                    38:79:b8:4a:f2:83:61:39:87:51:59:81:1d:fb:37:
                    0b:10:39:8e:83:9a:ad:36:e8:b1:15:95:26:76:e6:
                    65:88:fd:80:59:bf:c9:fa:ab:c7:0f:2a:6b:eb:9f:
                    55:5c:7d:54:0b:63:90:46:d7:a0:ed:10:5e:64:84:
                    58:66:2d:8f:01:fb:5e:11:0f:a0:63:58:b5:60:77:
                    da:b0:f7:8f:13:c2:3d:00:9b:be:fa:33:6c:12:76:
                    f8:1b:35:3b:e9:9d:90:05:da:90:e6:ae:13:a8:5c:
                    ed:59:80:48:96:08:41:69:bd:0d:54:ed:3c:d9:04:
                    8b:8d:37:93:d9:8a:12:4d:74:c0:27:00:f0:ef:02:
                    83:8a:aa:67:1c:62:49:3c:6b:ad:9c:70:90:17:1a:
                    74:98:70:bf:0f:4a:c4:79:94:30:e3:e8:7e:ed:f9:
                    2e:bc:f9:ce:5c:54:c7:ad:6f:ea:39:4d:dd:a0:28:
                    38:7e:a4:20:74:2a:e1:c9:2c:3e:9d:5f:f2:b8:71:
                    e6:53:a9:7e:a0:99:4f:27:38:ee:0b:cb:c3:e7:5c:
                    5a:8b:6c:c9:1a:52:5b:2e:cc:3b:8d:f4:be:c3:d6:
                    e9:60:7f:ae:86:dd:e2:d3:f3:75:b9:ba:43:9d:c2:
                    56:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EC:DA:B4:7F:0E:AB:F3:10:62:6A:32:2E:4D:D5:B3:D5:96:47:BA
            X509v3 Authority Key Identifier:
                keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/g-zatH8Oq_MQYmoyLk3Vs9WWR7o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:c380:390::/44
                  2a14:c380:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:db:a2:e8:09:06:fd:72:c0:7e:72:73:1b:c1:23:1f:76:f5:
         c5:26:6a:9e:f6:bb:58:4a:9f:3e:3a:6c:6f:84:66:6a:4b:de:
         49:30:53:0f:b3:1e:57:12:fd:c6:7d:88:3c:6f:64:5b:c8:8a:
         fd:f7:46:30:ea:b2:96:02:94:9e:69:3b:95:c7:c8:94:8a:86:
         f6:f0:65:09:c9:5b:97:85:07:c0:1f:67:82:66:bb:8a:f0:9c:
         f9:bc:06:22:21:bd:65:70:d7:11:f4:c1:ef:54:04:e7:8d:86:
         54:c8:3e:70:39:ef:04:35:b6:11:58:ee:c0:e9:c8:1f:39:49:
         b8:73:82:4f:bd:b2:e1:b9:6c:5e:34:c2:32:ca:03:96:8e:b8:
         c6:f4:e9:cd:a7:12:06:ac:c4:83:ac:b8:16:a1:5c:0f:33:82:
         9f:03:10:bf:9f:00:78:7f:f1:e1:1f:0a:e7:18:f6:36:50:fb:
         59:9e:de:47:fc:c7:85:3c:fa:5f:a8:2d:14:4c:c9:bb:b3:03:
         1b:49:6c:bf:cf:3b:75:98:61:90:ec:8b:5c:48:31:87:74:fc:
         c5:2a:32:d8:8c:d9:29:10:db:16:61:49:79:08:ab:7e:85:d8:
         92:cb:93:69:e5:14:66:23:b2:c5:27:0a:3b:98:2b:c1:f4:88:
         b5:d9:04:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:37:10 2025 by rpki-client