This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/GrG7vPu708RcvR9EyQrpPJIP9FA.roa
File:                     GrG7vPu708RcvR9EyQrpPJIP9FA.roa (raw, json)
Hash identifier:          wSkBFPUkGNeEscBpQyvJ2k6O4BBwKNzgZko0/pGwIN8=
Subject key identifier:   1A:B1:BB:BC:FB:BB:D3:C4:5C:BD:1F:44:C9:0A:E9:3C:92:0F:F4:50
Certificate issuer:       /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial:       019B7B36065867188E0CE0A175407C984C6F
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/GrG7vPu708RcvR9EyQrpPJIP9FA.roa
Signing time:             Thu 01 Jan 2026 20:18:16 +0000
ROA not before:           Thu 01 Jan 2026 20:18:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41043
IP address blocks:        89.45.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:06:58:67:18:8e:0c:e0:a1:75:40:7c:98:4c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
        Validity
            Not Before: Jan  1 20:18:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1ab1bbbcfbbbd3c45cbd1f44c90ae93c920ff450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fb:46:33:5d:dc:ba:07:e5:f2:71:6b:8a:df:
                    2f:86:8e:c1:97:55:8c:00:9c:21:b5:28:cc:53:3e:
                    53:18:91:b9:52:66:41:ee:8f:2d:10:20:9e:73:12:
                    c3:f4:d3:02:44:7c:7f:ea:ad:d6:8a:81:70:bc:2f:
                    4b:bd:d6:2c:40:54:72:df:57:ff:5f:b2:6c:d3:f1:
                    43:85:db:6b:de:e0:71:16:89:8c:f4:d5:70:24:71:
                    88:bc:60:72:31:3e:d7:6c:69:d1:23:f8:d1:d6:3a:
                    63:34:c5:30:ca:d8:4a:77:ed:64:ee:57:1e:db:75:
                    52:46:e2:32:2c:a3:64:98:65:c0:58:a4:e6:c5:e5:
                    ab:eb:6b:c2:c5:de:ac:f9:5f:79:d1:7e:51:71:b6:
                    f5:aa:f8:6b:3d:89:9b:14:dc:18:ac:e6:4f:99:a4:
                    1c:cd:df:3d:c0:eb:66:2d:83:ff:46:be:c4:b3:66:
                    c4:47:37:0f:79:aa:29:0c:4d:91:6a:c3:bd:81:22:
                    99:8b:4e:60:a4:d6:56:ec:49:08:f6:02:ba:91:06:
                    dc:5b:13:5a:fc:ff:31:56:a2:bf:79:10:cc:2c:09:
                    9a:a2:98:46:1e:0a:e9:ed:9d:a4:cd:8a:37:d6:cd:
                    a4:c5:8d:40:29:67:1b:c2:dd:f8:a6:1e:0b:76:e8:
                    1e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B1:BB:BC:FB:BB:D3:C4:5C:BD:1F:44:C9:0A:E9:3C:92:0F:F4:50
            X509v3 Authority Key Identifier:
                keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/GrG7vPu708RcvR9EyQrpPJIP9FA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.45.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:81:a7:36:00:53:cd:fe:71:23:9a:1e:43:8b:99:29:ef:fa:
         70:c5:48:17:f8:c5:53:08:05:2a:02:8c:fb:3a:ed:c7:31:0a:
         8b:ef:df:5a:cf:71:bc:b6:76:d2:02:8f:60:b5:95:01:b8:73:
         33:cf:5e:29:f1:ca:3f:f0:af:07:23:ba:c0:84:68:60:9e:0d:
         d9:6c:4b:13:c7:dd:87:4e:40:31:4e:c2:73:a4:1e:1f:68:3f:
         45:22:3c:4f:6f:f4:8b:4d:22:d1:d8:47:9d:9d:35:bc:6d:fe:
         05:b8:73:23:a8:b3:c4:8b:ba:39:9f:f1:b2:47:df:55:fe:7b:
         b9:4b:ac:ff:5b:23:91:d9:7d:62:93:7e:ce:38:77:59:97:97:
         a8:aa:2c:00:d0:6b:cd:ac:64:4b:82:a2:22:92:0d:c4:d6:72:
         39:c2:f3:ed:22:cd:c2:c9:c1:12:a4:cf:77:51:20:a8:73:74:
         96:41:ee:0f:07:bb:97:f6:cf:48:0a:42:53:88:6e:2e:44:b2:
         c1:c8:80:9d:8e:ed:31:71:a9:e7:55:81:ac:d2:ad:06:e8:80:
         a7:a2:7a:9a:82:7b:18:7a:71:53:8b:5e:fe:8e:50:24:3e:96:
         76:31:06:de:6f:f1:27:67:49:0c:52:d5:bc:f8:9e:27:5c:20:
         8e:e3:25:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7NgZYZxiODOChdUB8mExvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm
NmMxNGMwHhcNMjYwMTAxMjAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWIxYmJiY2ZiYmJkM2M0NWNiZDFmNDRjOTBhZTkzYzkyMGZmNDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvtGM13cugfl8nFrit8vho7Bl1WM
AJwhtSjMUz5TGJG5UmZB7o8tECCecxLD9NMCRHx/6q3WioFwvC9LvdYsQFRy31f/
X7Js0/FDhdtr3uBxFomM9NVwJHGIvGByMT7XbGnRI/jR1jpjNMUwythKd+1k7lce
23VSRuIyLKNkmGXAWKTmxeWr62vCxd6s+V950X5Rcbb1qvhrPYmbFNwYrOZPmaQc
zd89wOtmLYP/Rr7Es2bERzcPeaopDE2RasO9gSKZi05gpNZW7EkI9gK6kQbcWxNa
/P8xVqK/eRDMLAmaophGHgrp7Z2kzYo31s2kxY1AKWcbwt34ph4LdugeJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBqxu7z7u9PEXL0fRMkK6TySD/RQMB8GA1UdIwQY
MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt
OTc3ODY3NGVkYzk3LzEvR3JHN3ZQdTcwOFJjdlI5RXlRcnBQSklQOUZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3
LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWS0vMA0G
CSqGSIb3DQEBCwUAA4IBAQADgac2AFPN/nEjmh5Di5kp7/pwxUgX+MVTCAUqAoz7
Ou3HMQqL799az3G8tnbSAo9gtZUBuHMzz14p8co/8K8HI7rAhGhgng3ZbEsTx92H
TkAxTsJzpB4faD9FIjxPb/SLTSLR2EednTW8bf4FuHMjqLPEi7o5n/GyR99V/nu5
S6z/WyOR2X1ik37OOHdZl5eoqiwA0GvNrGRLgqIikg3E1nI5wvPtIs3CycESpM93
USCoc3SWQe4PB7uX9s9ICkJTiG4uRLLByICdju0xcannVYGs0q0G6ICnonqagnsY
enFTi17+jlAkPpZ2MQbeb/EnZ0kMUtW8+J4nXCCO4yUm
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:24:35 2026 by rpki-client