This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/cgbubwzrLRUcM3DPtZyyYXN9zpA.roa
File:                     cgbubwzrLRUcM3DPtZyyYXN9zpA.roa (raw, json)
Hash identifier:          7DwIwq1pltg06WU9Sr2sfIuLwm0KCaOw5p++q9NLLb8=
Subject key identifier:   72:06:EE:6F:0C:EB:2D:15:1C:33:70:CF:B5:9C:B2:61:73:7D:CE:90
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       019B7C80704606F28D1463361BFD670EB007
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/cgbubwzrLRUcM3DPtZyyYXN9zpA.roa
Signing time:             Fri 02 Jan 2026 02:19:10 +0000
ROA not before:           Fri 02 Jan 2026 02:19:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213834
IP address blocks:        80.64.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:70:46:06:f2:8d:14:63:36:1b:fd:67:0e:b0:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Jan  2 02:19:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7206ee6f0ceb2d151c3370cfb59cb261737dce90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d8:10:dc:a3:82:a5:78:dd:b2:2b:0b:c0:c8:
                    85:12:57:19:64:75:b8:59:f5:04:0a:98:3a:52:24:
                    a7:7f:35:79:08:6e:35:80:9c:f0:52:0f:57:08:31:
                    df:aa:4e:d7:05:c6:de:45:02:be:7d:5a:2f:f8:e4:
                    13:90:de:0d:76:cb:0c:59:d1:79:c0:8f:08:93:56:
                    7e:96:11:1f:e3:da:2c:f6:3f:1f:01:05:0b:1d:67:
                    4a:23:a7:ee:1c:52:e6:e1:a1:75:98:93:c8:e2:bb:
                    12:70:e2:ca:5d:4e:c6:ea:8e:61:45:bf:05:57:b3:
                    96:39:59:a6:93:12:fb:00:11:90:2a:4e:36:fe:a7:
                    19:83:e0:43:d4:c8:79:b4:24:23:2e:12:b8:a9:e8:
                    cd:25:95:ae:7d:2f:8f:71:6e:af:4c:63:6b:57:80:
                    82:19:33:75:9f:93:81:f7:50:81:e5:53:76:0c:d8:
                    1a:38:f2:ab:b5:7e:9f:a4:c8:34:a1:c8:93:a7:1e:
                    5d:26:9a:73:fb:3a:2e:58:b8:76:9c:a0:d9:04:14:
                    23:68:4b:21:e5:98:64:1f:f8:12:33:d5:ef:0e:ba:
                    9e:66:68:5d:be:25:13:c6:f8:ca:7d:06:a3:ba:d6:
                    a9:5f:e4:38:72:7b:de:6b:64:a5:66:fb:18:bb:31:
                    cd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:06:EE:6F:0C:EB:2D:15:1C:33:70:CF:B5:9C:B2:61:73:7D:CE:90
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/cgbubwzrLRUcM3DPtZyyYXN9zpA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.64.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:d2:39:4d:1d:65:d1:1b:15:4e:59:6b:ac:8b:2b:c7:de:bc:
         43:af:a6:4a:23:39:57:61:26:82:76:00:a9:fb:4c:64:17:1a:
         fc:6e:c3:ca:e0:2a:44:c4:a2:68:92:79:98:38:16:fe:23:b4:
         82:58:77:d9:6d:d2:d4:ac:d0:0a:cd:9a:78:0f:97:b3:be:88:
         6d:d1:25:77:fa:f7:99:ae:83:c7:10:04:9c:cc:8c:3d:60:bf:
         3c:2b:46:1d:8f:11:b2:05:22:0d:de:0e:29:c3:9e:5f:53:c4:
         5e:d4:ba:fa:65:7e:20:d2:72:d7:c1:0a:73:9d:a4:c8:fb:1e:
         fe:33:07:71:16:68:1f:00:f4:6f:bb:80:7d:27:2f:59:58:7a:
         6e:64:eb:10:b5:6f:05:4f:ac:40:2e:52:54:cc:d6:93:de:eb:
         2b:79:06:c4:bb:06:9a:98:43:d9:a7:1c:5d:84:b4:42:cb:5a:
         e9:bb:ce:c0:5b:d9:21:e7:56:37:ea:ba:71:d7:a2:d5:13:7c:
         1b:dd:cd:c7:37:07:15:ae:31:b3:a8:ac:01:37:58:a9:99:e7:
         88:ed:45:fb:6a:6f:7a:5d:50:ee:9d:ea:ae:38:37:45:b7:92:
         8e:5c:67:7c:fe:92:e9:bb:39:24:1b:b2:63:b6:49:e8:48:34:
         be:05:53:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 03:55:48 2026 by rpki-client