This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/G1Ty4WndBpOGD61GKAs-CwP5c2w.roa
File:                     G1Ty4WndBpOGD61GKAs-CwP5c2w.roa (raw, json)
Hash identifier:          l0eAmw+GJHiz9ePv9I+0pPo3dWb64rnkIyzrqbPQk6o=
Subject key identifier:   1B:54:F2:E1:69:DD:06:93:86:0F:AD:46:28:0B:3E:0B:03:F9:73:6C
Certificate issuer:       /CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Certificate serial:       019B76EB3B68A5C9C89E691ACAABA4178649
Authority key identifier: 57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/G1Ty4WndBpOGD61GKAs-CwP5c2w.roa
Signing time:             Thu 01 Jan 2026 00:18:06 +0000
ROA not before:           Thu 01 Jan 2026 00:18:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216352
IP address blocks:        2a10:a642:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:3b:68:a5:c9:c8:9e:69:1a:ca:ab:a4:17:86:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
        Validity
            Not Before: Jan  1 00:18:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1b54f2e169dd0693860fad46280b3e0b03f9736c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1f:e1:f0:14:5f:60:9a:c7:16:0d:99:ae:9d:
                    b8:ae:5b:5b:21:1a:4f:35:99:15:b8:da:04:b1:90:
                    c2:33:dc:a7:87:0e:c3:a0:f9:7e:bd:55:58:7c:c8:
                    2e:1d:aa:5f:c4:69:a2:ab:0a:2b:bf:f7:6c:63:ab:
                    7b:74:7f:6c:c4:29:6a:37:28:cf:04:e8:93:52:62:
                    e7:f8:8f:67:06:d5:2c:4f:e5:f8:08:59:97:13:22:
                    20:3e:a0:71:52:cf:5a:db:55:dd:14:e8:3b:b9:fa:
                    3b:1d:eb:89:85:8e:06:74:6d:56:7f:90:ab:44:36:
                    8b:40:25:e9:c6:e8:7d:13:ff:ef:e3:04:72:45:cb:
                    77:8e:8a:bb:93:fd:dc:1b:8b:6e:9f:90:28:65:5b:
                    99:32:a1:4c:c1:66:54:42:e8:b0:36:53:21:6d:0e:
                    08:ea:1b:27:3f:59:3d:4a:8a:eb:0f:72:78:f3:ea:
                    44:08:8d:0c:91:fb:cd:50:96:84:11:07:0a:aa:c7:
                    db:db:2d:f1:69:05:a4:17:d0:57:d9:f3:c5:c2:b1:
                    d7:47:e7:1e:0e:2e:e1:cf:5a:e4:a2:f7:1e:c6:1c:
                    25:0a:b4:10:f9:40:33:0f:3e:82:16:39:01:29:0e:
                    4a:68:52:ef:d5:45:e2:2e:6d:5a:59:45:c3:38:f4:
                    07:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:54:F2:E1:69:DD:06:93:86:0F:AD:46:28:0B:3E:0B:03:F9:73:6C
            X509v3 Authority Key Identifier:
                keyid:57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/G1Ty4WndBpOGD61GKAs-CwP5c2w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:a642:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:e2:13:36:07:05:3c:18:74:e6:20:33:cc:60:d7:98:a1:d2:
         fd:b1:ec:b0:ba:cd:f0:50:24:81:22:f6:43:f2:92:9c:b4:34:
         fd:ad:31:79:8a:4b:bb:ae:46:81:cd:b4:21:e3:1e:32:65:68:
         1e:56:5f:e3:ef:a8:eb:e4:6d:54:ac:c8:29:eb:86:30:ec:07:
         ab:0f:3d:1e:9b:27:4b:ba:21:1f:82:20:71:d0:93:97:2d:57:
         01:a6:d2:a4:b1:96:0d:57:9f:06:19:7e:d5:21:e1:23:c8:2a:
         84:d1:e5:3d:67:1b:d6:3a:67:b2:1a:60:df:c8:e7:d7:2e:45:
         70:8d:d0:55:7b:7d:3a:76:23:8a:7f:5c:00:7b:be:22:c3:c2:
         be:99:e0:a2:28:2b:69:72:be:11:85:d2:82:c2:b7:60:1f:8f:
         73:f4:48:7b:05:2c:ce:8e:78:d4:6b:93:e6:92:b8:00:79:00:
         34:8b:b0:72:c1:f2:75:c5:a1:af:bc:2c:f8:cc:8b:10:e7:f3:
         1f:ba:0d:ca:dd:af:55:35:4c:e9:3a:ca:0e:30:e1:11:66:f7:
         0f:3e:97:c3:ec:32:0e:e5:76:8e:38:1c:25:d1:35:6d:ed:d3:
         fc:74:43:ef:0e:90:03:da:1c:da:bc:ba:51:cb:5d:e8:78:87:
         ee:21:0b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:31:41 2026 by rpki-client