This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/GLvPs0b1150wgYEEGQh-rwy7VDM.roa
File:                     GLvPs0b1150wgYEEGQh-rwy7VDM.roa (raw, json)
Hash identifier:          yvNeNIbqO4LTnxIc0b0IA4sXErDdh1eRPLh4/uTPm/4=
Subject key identifier:   18:BB:CF:B3:46:F5:D7:9D:30:81:81:04:19:08:7E:AF:0C:BB:54:33
Certificate issuer:       /CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Certificate serial:       019B7F151D6FE02DFB983368E0BB1D541F84
Authority key identifier: C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/GLvPs0b1150wgYEEGQh-rwy7VDM.roa
Signing time:             Fri 02 Jan 2026 14:20:48 +0000
ROA not before:           Fri 02 Jan 2026 14:20:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199845
IP address blocks:        178.211.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:1d:6f:e0:2d:fb:98:33:68:e0:bb:1d:54:1f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ce0814167eaa8189fd84d390270eadf29482cb
        Validity
            Not Before: Jan  2 14:20:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=18bbcfb346f5d79d3081810419087eaf0cbb5433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e7:cf:68:c4:d2:f9:55:ca:24:98:49:35:7f:
                    75:69:e0:51:d4:a7:29:11:2a:27:3c:0e:60:6f:36:
                    6e:e6:dd:51:31:65:d5:53:3f:2f:a7:30:16:ed:e8:
                    a6:56:ea:6c:90:e1:fc:41:5c:be:d4:18:0a:ae:cc:
                    84:d6:16:0b:f6:92:e5:47:aa:d9:f8:99:38:0a:c5:
                    ea:92:c9:f5:1f:03:18:85:d8:1d:03:30:87:f3:c7:
                    27:97:ba:35:22:94:1c:6c:5d:54:4b:ff:6d:28:4a:
                    d6:4f:6e:78:3a:bf:87:01:0d:7e:bb:be:bc:2f:3b:
                    e2:ce:3c:fb:25:22:43:5a:61:b5:5a:a6:0d:80:12:
                    71:32:41:3a:88:ca:27:7c:42:38:c3:21:ab:10:4c:
                    a4:27:be:4e:d9:40:1d:25:11:14:15:28:8b:e5:86:
                    73:ac:52:b0:0e:9e:49:75:ce:9b:69:fe:ad:d9:0c:
                    ec:44:c6:56:ed:07:59:79:c1:58:ef:e0:1d:96:68:
                    bb:a0:9d:cb:6a:54:22:74:14:6d:0e:d0:f7:5d:62:
                    fa:0b:52:92:8c:5c:32:4a:f4:80:34:3d:f7:38:48:
                    e7:0d:92:98:ce:14:f8:22:81:10:6b:9b:52:a3:c3:
                    6d:2d:02:c7:13:87:1f:54:31:be:2d:1b:e7:3d:2e:
                    66:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BB:CF:B3:46:F5:D7:9D:30:81:81:04:19:08:7E:AF:0C:BB:54:33
            X509v3 Authority Key Identifier:
                keyid:C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/GLvPs0b1150wgYEEGQh-rwy7VDM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.211.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:fc:03:5e:fa:5e:1d:fd:d9:52:49:bd:11:f1:49:9a:cd:b4:
         e9:09:8d:a8:82:97:59:1d:c9:9a:b8:6e:13:f4:56:06:57:fb:
         ac:43:5c:ca:9a:3c:48:fd:36:62:e1:09:f4:97:31:3e:37:b7:
         c0:31:51:24:a3:e7:a6:01:dc:8a:7c:2e:92:d0:10:02:54:be:
         ac:38:e7:25:2e:d4:f2:cf:6e:32:1d:a0:5d:00:39:dd:2d:7e:
         31:09:30:34:e9:eb:9d:1b:f3:0b:c3:3f:d8:39:8a:68:10:e9:
         3c:29:40:da:64:ae:4d:5d:ad:02:fe:09:25:cd:23:f2:3f:fa:
         af:94:43:fe:f4:8a:83:f8:21:da:b1:99:48:c8:74:ff:c0:32:
         e6:66:26:10:82:c8:52:c6:01:2e:5c:f0:37:27:73:cd:5c:75:
         da:f1:b2:82:bb:bf:1a:0b:10:f1:ba:50:b4:e8:2f:45:3c:8f:
         d3:a8:dc:ca:a2:9f:21:9e:a3:44:29:35:4c:87:43:6b:c3:c1:
         51:37:9a:a3:67:13:d2:7a:a2:3e:e8:eb:10:e6:d0:64:03:e8:
         02:3d:1d:66:7a:1c:7a:ee:26:cf:1d:15:80:ae:4b:3e:5c:03:
         2b:0c:af:1b:31:e6:e7:dd:93:3e:0e:41:cf:a9:08:b0:ff:14:
         4c:d1:1f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:31:43 2026 by rpki-client