This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/GvLMsK1YIlG3H3ud3AEcdujFVoA.roa
File:                     GvLMsK1YIlG3H3ud3AEcdujFVoA.roa (raw, json)
Hash identifier:          BSzH67VCZLLTTNw1xUILHi1JzYZa1Ek/ANs66qlglA4=
Subject key identifier:   1A:F2:CC:B0:AD:58:22:51:B7:1F:7B:9D:DC:01:1C:76:E8:C5:56:80
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       019B79ED26F25E0321B8451956A9C8B85EF6
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/GvLMsK1YIlG3H3ud3AEcdujFVoA.roa
Signing time:             Thu 01 Jan 2026 14:19:03 +0000
ROA not before:           Thu 01 Jan 2026 14:19:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207204
IP address blocks:        148.81.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:26:f2:5e:03:21:b8:45:19:56:a9:c8:b8:5e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Jan  1 14:19:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1af2ccb0ad582251b71f7b9ddc011c76e8c55680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f3:a3:0a:b6:86:ed:e3:2d:31:d8:33:27:b9:
                    9f:96:23:ee:00:ef:c5:7b:f7:74:2b:7a:24:61:b5:
                    f5:2f:a6:b1:fa:e6:06:f3:49:b1:ea:e8:c4:6c:0c:
                    9d:a6:b6:cc:61:a9:ae:67:b8:f4:18:c8:bf:4f:1e:
                    a2:17:a5:09:cd:b2:3d:66:52:0e:49:38:36:a6:3d:
                    90:96:eb:97:0e:21:14:4e:d5:6e:2f:49:43:ea:d6:
                    9c:b5:f9:0c:74:55:03:32:18:91:ae:1f:7c:62:cf:
                    a6:21:68:2a:e3:83:75:e5:cc:05:91:25:a0:eb:5e:
                    49:f2:b5:82:8c:e7:56:43:fd:ae:a0:a4:35:8d:81:
                    dd:6a:36:8c:fa:84:13:b9:d7:05:34:b8:7a:51:02:
                    a1:01:04:61:78:05:82:f2:10:37:53:e7:b4:f1:60:
                    a4:32:47:52:4c:e3:a5:20:44:cc:79:6e:88:b5:e6:
                    99:e7:d7:2f:3d:89:a3:43:e5:91:7e:12:46:56:68:
                    cc:bb:aa:d2:27:c6:0f:d6:5f:89:f6:79:3c:33:10:
                    5c:29:ae:8d:5a:88:2e:25:3e:f1:2a:eb:f3:6e:dc:
                    4e:41:68:e1:09:5d:55:64:ad:f8:3b:ac:7e:1f:19:
                    d0:8f:de:1c:e6:10:b8:3d:b0:dc:bf:1a:79:20:d4:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F2:CC:B0:AD:58:22:51:B7:1F:7B:9D:DC:01:1C:76:E8:C5:56:80
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/GvLMsK1YIlG3H3ud3AEcdujFVoA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.81.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:c6:86:d3:b4:77:cd:e8:b9:87:c4:3c:12:03:7a:31:af:93:
         ec:f3:ea:79:06:b0:5b:10:4d:66:d9:ce:de:18:ef:8d:c7:0e:
         af:46:28:90:3c:28:b0:0f:32:fd:8c:12:8c:6d:43:8d:13:9c:
         91:b0:83:65:6c:b1:36:7e:5f:fa:12:cb:7b:b2:31:d9:ec:13:
         c1:4f:73:ec:e1:6e:ee:2d:3f:b2:af:2c:86:d9:80:1a:3f:3c:
         a0:f4:e4:ea:7c:b5:a5:11:ba:f3:8d:49:2c:1b:ef:ff:71:9a:
         fa:e0:4f:4c:d2:3f:8f:fc:50:a5:38:dd:76:d1:60:9c:f0:c2:
         18:61:d1:8a:69:48:c2:df:f0:7d:ce:ed:37:48:f0:4a:46:da:
         74:be:1a:b2:92:a1:87:9e:ad:42:34:84:0a:a0:e9:6d:18:f9:
         79:36:47:60:97:11:be:6c:00:f5:10:60:89:70:b0:3d:64:d7:
         3a:73:08:95:18:99:05:80:be:aa:c6:51:9d:62:3b:91:22:07:
         7e:15:b5:fc:91:00:f6:b7:d6:24:6e:61:13:95:ff:93:f9:8e:
         90:c1:e0:8f:ec:cb:17:c3:28:3d:13:5b:71:6e:20:5f:c9:29:
         04:c8:2e:bb:79:c7:0a:b3:7f:46:34:16:83:47:da:b0:52:de:
         ec:a6:b4:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt57SbyXgMhuEUZVqnIuF72MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw
MTE4OGYwHhcNMjYwMTAxMTQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWYyY2NiMGFkNTgyMjUxYjcxZjdiOWRkYzAxMWM3NmU4YzU1NjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPOjCraG7eMtMdgzJ7mfliPuAO/F
e/d0K3okYbX1L6ax+uYG80mx6ujEbAydprbMYamuZ7j0GMi/Tx6iF6UJzbI9ZlIO
STg2pj2QluuXDiEUTtVuL0lD6tactfkMdFUDMhiRrh98Ys+mIWgq44N15cwFkSWg
615J8rWCjOdWQ/2uoKQ1jYHdajaM+oQTudcFNLh6UQKhAQRheAWC8hA3U+e08WCk
MkdSTOOlIETMeW6IteaZ59cvPYmjQ+WRfhJGVmjMu6rSJ8YP1l+J9nk8MxBcKa6N
WoguJT7xKuvzbtxOQWjhCV1VZK34O6x+HxnQj94c5hC4PbDcvxp5INTjxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBryzLCtWCJRtx97ndwBHHboxVaAMB8GA1UdIwQY
MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt
YzA2NzFiZjRjZjNlLzEvR3ZMTXNLMVlJbEczSDN1ZDNBRWNkdWpGVm9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl
LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlFHOMA0G
CSqGSIb3DQEBCwUAA4IBAQBAxobTtHfN6LmHxDwSA3oxr5Ps8+p5BrBbEE1m2c7e
GO+Nxw6vRiiQPCiwDzL9jBKMbUONE5yRsINlbLE2fl/6Est7sjHZ7BPBT3Ps4W7u
LT+yryyG2YAaPzyg9OTqfLWlEbrzjUksG+//cZr64E9M0j+P/FClON120WCc8MIY
YdGKaUjC3/B9zu03SPBKRtp0vhqykqGHnq1CNIQKoOltGPl5NkdglxG+bAD1EGCJ
cLA9ZNc6cwiVGJkFgL6qxlGdYjuRIgd+FbX8kQD2t9YkbmETlf+T+Y6QweCP7MsX
wyg9E1txbiBfySkEyC67eccKs39GNBaDR9qwUt7sprSz
-----END CERTIFICATE-----
Generated at Mon Jan 26 23:22:43 2026 by rpki-client