This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/sGobVjVtmpTG3eIQoRngSBlxcMU.roa
File:                     sGobVjVtmpTG3eIQoRngSBlxcMU.roa (raw, json)
Hash identifier:          UMoTBGpuj0hrOh47PvNUlOhwfEbv/t4MSoG5XZ2RuSo=
Subject key identifier:   B0:6A:1B:56:35:6D:9A:94:C6:DD:E2:10:A1:19:E0:48:19:71:70:C5
Certificate issuer:       /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Certificate serial:       019B77C6C894BACA85A4D2F9CEE97942F081
Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/sGobVjVtmpTG3eIQoRngSBlxcMU.roa
Signing time:             Thu 01 Jan 2026 04:17:54 +0000
ROA not before:           Thu 01 Jan 2026 04:17:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48279
IP address blocks:        94.154.192.0/18 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 22:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:c8:94:ba:ca:85:a4:d2:f9:ce:e9:79:42:f0:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
        Validity
            Not Before: Jan  1 04:17:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b06a1b56356d9a94c6dde210a119e048197170c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4d:ae:46:d9:12:a1:5b:81:c7:cb:ac:2b:77:
                    f7:83:05:be:7b:8d:b9:e6:a5:6a:32:d2:83:79:66:
                    ff:c4:8b:ea:18:87:45:22:f1:db:7a:80:c8:7a:da:
                    95:8f:77:e6:43:eb:ab:6f:d9:56:75:b9:93:f8:15:
                    04:45:ad:2f:36:87:51:37:36:de:d1:67:d7:92:c5:
                    ae:c1:70:d5:3b:ad:ac:22:32:19:68:95:6f:b3:c8:
                    d6:ff:a5:3e:33:97:43:8c:aa:3a:0d:9f:ec:d9:dc:
                    c7:3d:10:f5:d8:50:5a:df:25:ec:3d:5d:00:f8:fc:
                    2b:9f:c3:42:a2:bb:6f:ca:0d:3c:ad:52:54:d9:44:
                    f3:e0:55:57:89:b5:f2:89:b9:b5:dd:c1:98:10:f9:
                    9a:04:b2:df:7e:8c:6c:7d:b8:aa:ae:14:fc:cb:ae:
                    e4:3a:dc:a7:b9:a6:68:58:96:47:64:85:6b:84:12:
                    8d:7c:b9:f7:ed:66:ab:95:77:40:b8:88:b4:36:01:
                    c8:9f:8b:ef:3f:2e:89:41:96:92:40:69:15:d5:8d:
                    a6:3b:33:b3:6c:03:0a:d0:0b:ca:ff:99:21:91:84:
                    2f:f4:0e:44:a3:54:92:9f:88:c2:60:49:1b:4d:dc:
                    5e:89:92:9c:58:34:90:32:30:fd:54:c1:7d:fd:f7:
                    e2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6A:1B:56:35:6D:9A:94:C6:DD:E2:10:A1:19:E0:48:19:71:70:C5
            X509v3 Authority Key Identifier:
                keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/sGobVjVtmpTG3eIQoRngSBlxcMU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.154.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         61:12:b8:0a:a3:31:a5:6e:95:69:39:a5:e8:9a:2b:3b:66:8c:
         7f:de:80:de:92:d8:a3:f4:fd:4b:37:03:15:5d:23:43:3b:97:
         1f:96:c0:d5:10:bb:6b:34:f0:bf:d9:2d:30:14:87:b3:9b:8e:
         c7:37:20:60:7c:b5:fa:51:e1:f4:a9:37:06:4e:11:cd:31:a3:
         a6:22:56:bd:9e:7a:80:7f:6b:f2:f9:37:62:32:d8:f2:51:b6:
         aa:34:65:e1:ec:73:38:5d:c3:0e:ef:91:1c:8a:82:d3:3b:74:
         8a:47:02:09:a3:a5:f5:97:7b:08:cd:df:c6:cb:05:4a:e6:c0:
         56:c7:0d:c8:f1:58:58:d6:7f:67:eb:fd:e5:fc:83:09:8f:8f:
         e6:a9:09:5f:89:f9:48:ea:6b:ed:4b:97:44:81:a6:59:31:fb:
         bf:81:05:1c:81:74:8e:07:ce:23:64:13:c8:04:95:83:38:2c:
         09:ae:36:e7:df:ac:88:6c:9e:8a:db:ee:7b:ae:d3:ac:fc:2d:
         c8:6d:7c:68:4d:51:e3:4a:82:4a:8e:8e:19:34:94:74:34:af:
         7d:29:a2:08:eb:1c:bd:1c:ff:05:1f:54:9c:84:3b:50:a7:8e:
         e6:6c:29:65:ed:0d:33:e1:f2:0f:ad:65:a2:8a:c2:e3:11:80:
         8f:94:eb:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3xsiUusqFpNL5zul5QvCBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzc4OWVjZjY3ZTA0Mjk4YzVlZTQ0YzY3ZDhmYjdmNWQ2
ZDk1YTEwHhcNMjYwMTAxMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDZhMWI1NjM1NmQ5YTk0YzZkZGUyMTBhMTE5ZTA0ODE5NzE3MGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE2uRtkSoVuBx8usK3f3gwW+e425
5qVqMtKDeWb/xIvqGIdFIvHbeoDIetqVj3fmQ+urb9lWdbmT+BUERa0vNodRNzbe
0WfXksWuwXDVO62sIjIZaJVvs8jW/6U+M5dDjKo6DZ/s2dzHPRD12FBa3yXsPV0A
+Pwrn8NCortvyg08rVJU2UTz4FVXibXyibm13cGYEPmaBLLffoxsfbiqrhT8y67k
OtynuaZoWJZHZIVrhBKNfLn37WarlXdAuIi0NgHIn4vvPy6JQZaSQGkV1Y2mOzOz
bAMK0AvK/5khkYQv9A5Eo1SSn4jCYEkbTdxeiZKcWDSQMjD9VMF9/ffiwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLBqG1Y1bZqUxt3iEKEZ4EgZcXDFMB8GA1UdIwQY
MBaAFEw3iez2fgQpjF7kTGfY+39dbZWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83ZWQ3YjEtYjhmMy00M2YzLTk2ZTMt
MWRjNTRkMWMwM2EzLzEvc0dvYlZqVnRtcFRHM2VJUW9SbmdTQmx4Y01VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC83ZWQ3YjEtYjhmMy00M2YzLTk2ZTMtMWRjNTRkMWMwM2Ez
LzEvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGXprAMA0G
CSqGSIb3DQEBCwUAA4IBAQBhErgKozGlbpVpOaXomis7Zox/3oDektij9P1LNwMV
XSNDO5cflsDVELtrNPC/2S0wFIezm47HNyBgfLX6UeH0qTcGThHNMaOmIla9nnqA
f2vy+TdiMtjyUbaqNGXh7HM4XcMO75EcioLTO3SKRwIJo6X1l3sIzd/GywVK5sBW
xw3I8VhY1n9n6/3l/IMJj4/mqQlfiflI6mvtS5dEgaZZMfu/gQUcgXSOB84jZBPI
BJWDOCwJrjbn36yIbJ6K2+57rtOs/C3IbXxoTVHjSoJKjo4ZNJR0NK99KaII6xy9
HP8FH1SchDtQp47mbCll7Q0z4fIPrWWiisLjEYCPlOuh
-----END CERTIFICATE-----
Generated at Sun Jan 11 07:31:18 2026 by rpki-client