This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/gGP5a4m9bqAKT7-QVYaan-KR00I.roa
File:                     gGP5a4m9bqAKT7-QVYaan-KR00I.roa (raw, json)
Hash identifier:          mPbwa7sA/SB0OJubO3AAY0Oa/zRc0RaIx2vSZkJEB4w=
Subject key identifier:   80:63:F9:6B:89:BD:6E:A0:0A:4F:BF:90:55:86:9A:9F:E2:91:D3:42
Certificate issuer:       /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial:       019B78A309644D5A87AC04CA542848F0D49B
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/gGP5a4m9bqAKT7-QVYaan-KR00I.roa
Signing time:             Thu 01 Jan 2026 08:18:29 +0000
ROA not before:           Thu 01 Jan 2026 08:18:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50889
IP address blocks:        193.246.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:09:64:4d:5a:87:ac:04:ca:54:28:48:f0:d4:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
        Validity
            Not Before: Jan  1 08:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8063f96b89bd6ea00a4fbf9055869a9fe291d342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d0:70:b1:45:b8:7c:52:b4:0a:22:82:d0:92:
                    3f:ac:20:52:b4:42:3b:15:77:a1:f0:4e:2c:0f:00:
                    7b:21:fd:0c:1a:29:b9:16:d6:8e:e3:e8:ba:2d:57:
                    f2:57:d6:83:6d:bb:3a:61:62:d0:f5:ab:0f:e4:61:
                    91:95:ae:90:96:d6:55:4e:36:42:9e:03:e4:bc:97:
                    51:f4:bd:c1:b4:ca:6c:67:ea:5e:62:1e:a0:26:f0:
                    3c:0a:e3:c5:52:74:71:59:33:df:b3:2b:ed:6d:5b:
                    8f:29:b2:2d:e0:70:21:85:4e:28:91:87:b6:e4:2e:
                    c5:96:4f:48:85:46:7c:bf:c9:ad:1c:91:4d:80:25:
                    06:1f:68:38:b8:2f:b2:8c:15:96:72:bb:75:26:c1:
                    bd:9b:b8:cc:9c:1d:01:fe:52:96:76:24:2d:10:31:
                    e3:3d:2e:08:48:d5:d9:f3:df:12:21:72:0c:45:29:
                    33:59:87:c2:8d:08:cc:17:8d:ce:c0:81:7e:a4:f9:
                    ce:a1:12:94:18:7f:1c:75:1d:b5:b9:2d:2e:1b:bf:
                    e7:f0:11:5a:8a:8e:f8:a6:c7:04:be:17:ab:08:57:
                    80:11:c8:d7:c4:f0:62:8d:3a:92:be:47:5d:7b:55:
                    47:6e:68:40:dd:33:70:05:04:b4:66:42:a6:58:54:
                    fe:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:63:F9:6B:89:BD:6E:A0:0A:4F:BF:90:55:86:9A:9F:E2:91:D3:42
            X509v3 Authority Key Identifier:
                keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/gGP5a4m9bqAKT7-QVYaan-KR00I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.246.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:3f:38:72:68:1d:c6:3f:f0:a2:05:25:de:e6:25:ea:54:47:
         e9:24:93:64:fa:8d:47:68:09:34:12:a8:01:95:cc:77:55:19:
         ea:49:57:a9:a9:62:62:20:37:2b:74:81:f7:54:69:00:02:06:
         72:19:15:ee:0d:e2:81:42:d6:ea:ef:9d:39:42:ed:19:2e:27:
         9f:aa:ab:3c:b5:28:63:e9:c5:1a:9d:13:59:10:d3:a4:67:34:
         ac:a0:30:57:cc:be:be:b5:8e:ef:60:70:20:2c:f4:38:34:6e:
         8b:7a:9f:7e:55:31:fc:f7:63:a8:fc:a4:a7:4e:fa:fe:bf:93:
         56:a8:0c:e7:70:a6:ca:33:21:3f:17:b9:92:0c:45:66:64:c2:
         0e:90:7e:f0:0d:37:68:2f:50:61:15:79:f7:6f:4b:27:f8:d9:
         9b:c7:cd:1f:62:2e:a9:ae:e7:a9:2d:69:12:69:e0:15:44:2b:
         fe:28:79:29:db:ce:78:4e:13:4e:2e:97:5d:2f:16:ab:71:67:
         25:60:65:d7:85:39:03:92:ea:55:e0:5d:4c:e4:11:5f:50:ba:
         0a:ad:36:52:6c:a5:61:90:78:e8:a0:26:fa:8c:16:df:a9:08:
         21:3c:9f:51:60:43:9a:43:cd:90:a8:90:2b:09:9b:97:f0:06:
         77:c0:9d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:59:01 2026 by rpki-client