This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/gsF1NmgMnu9Ca4ZyyOypgxhgV0g.roa
File:                     gsF1NmgMnu9Ca4ZyyOypgxhgV0g.roa (raw, json)
Hash identifier:          TJu260zcK4vOdWrtlvkrVASOWCULxHs+p/9+8TiE4mQ=
Subject key identifier:   82:C1:75:36:68:0C:9E:EF:42:6B:86:72:C8:EC:A9:83:18:60:57:48
Certificate issuer:       /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial:       019B76EB0DAC194BF2FDEE19724F283EE8E6
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/gsF1NmgMnu9Ca4ZyyOypgxhgV0g.roa
Signing time:             Thu 01 Jan 2026 00:17:54 +0000
ROA not before:           Thu 01 Jan 2026 00:17:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50820
IP address blocks:        46.46.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:0d:ac:19:4b:f2:fd:ee:19:72:4f:28:3e:e8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
        Validity
            Not Before: Jan  1 00:17:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=82c17536680c9eef426b8672c8eca98318605748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e9:73:1b:47:f4:75:82:ee:63:95:62:60:b6:
                    d6:1f:56:af:6a:49:06:8d:ff:fd:99:4f:fa:e9:ee:
                    8f:93:fc:a8:69:59:1c:62:f4:93:b4:0b:02:2e:9c:
                    59:91:14:ef:5d:f9:97:c0:f1:49:29:d4:da:cd:55:
                    a6:84:d8:d9:cb:79:10:dd:69:c5:bf:6a:37:a9:ff:
                    4d:a8:d0:5f:ac:20:1e:c1:6c:6a:e3:7d:e4:28:0b:
                    88:72:0d:7b:ac:bd:5a:65:9f:cb:55:eb:2c:97:54:
                    4a:3d:3c:be:d4:d5:6d:26:84:0c:c7:6a:68:a6:b9:
                    39:f7:3e:16:0d:9b:f5:a6:9e:78:2b:d7:68:f3:5a:
                    39:b6:31:37:dc:d6:bf:0f:49:fc:be:a4:5c:71:7d:
                    49:d1:b2:59:a4:e9:49:a2:3a:5e:53:52:32:6f:91:
                    19:be:db:7f:96:19:b6:4e:3d:f8:fa:6b:66:d9:41:
                    d1:f3:4c:64:30:4f:b8:e4:e9:b3:cf:f3:17:e2:39:
                    91:e3:37:aa:a9:12:88:df:3f:4d:7a:38:a4:b5:84:
                    0d:0f:26:f1:a6:75:23:96:f7:f7:94:13:86:e5:18:
                    f2:73:cf:2b:9d:d7:fc:6d:8e:80:f5:f5:aa:e3:43:
                    cd:be:cc:fb:30:fa:c2:6c:19:81:fc:bb:54:92:54:
                    3d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C1:75:36:68:0C:9E:EF:42:6B:86:72:C8:EC:A9:83:18:60:57:48
            X509v3 Authority Key Identifier:
                keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/gsF1NmgMnu9Ca4ZyyOypgxhgV0g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.46.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:8a:53:63:2e:50:9e:0f:ac:46:ba:f9:fb:63:1a:ff:94:c3:
         0a:ad:71:bd:e1:b0:a6:96:ce:86:c3:23:f3:c2:75:c9:58:4a:
         80:3c:cb:b1:e8:4e:c3:f2:1f:2a:e5:03:55:82:f0:72:99:fe:
         bc:79:39:e5:14:67:75:4a:75:0c:fd:9f:7f:47:94:7c:a4:f0:
         d2:05:02:aa:96:02:9f:2d:e0:95:b5:17:d2:3a:3f:37:e9:72:
         38:29:da:3c:69:f9:8a:87:84:12:d3:cb:86:bd:ec:36:6c:e9:
         9f:cf:4a:49:7c:29:97:58:3b:a0:d4:a9:b8:48:04:8b:cd:03:
         b5:e4:b9:09:14:ad:5d:7f:57:3a:e8:bb:0d:49:44:7f:96:df:
         07:36:d7:0d:97:43:37:71:b6:07:cb:d4:d3:e2:07:11:17:fc:
         c5:6e:a0:44:71:9c:73:b5:91:c4:ca:65:6b:b8:e0:66:8d:81:
         d7:38:6d:0e:40:d8:4a:9d:8d:87:53:66:7e:48:2b:68:9e:0a:
         09:28:60:f7:8f:73:c7:4e:62:c1:7b:14:65:20:e6:dd:c6:57:
         a8:af:c3:5c:0c:8f:27:10:bb:05:8c:53:84:7f:ed:2c:b4:61:
         8f:4a:f1:27:b8:06:58:30:09:a4:9d:fb:37:4b:42:41:86:b7:
         63:f7:18:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:39:31 2026 by rpki-client