This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gTkeU_LunOuva-CmoEAMvQhKzP4.roa
File:                     gTkeU_LunOuva-CmoEAMvQhKzP4.roa (raw, json)
Hash identifier:          cTKPCKzxbMTvf3MvW56jgueYCi871MrYDAimX6iRDT8=
Subject key identifier:   81:39:1E:53:F2:EE:9C:EB:AF:6B:E0:A6:A0:40:0C:BD:08:4A:CC:FE
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019B7B35A0E18EFEC914BDC8141079725BDC
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gTkeU_LunOuva-CmoEAMvQhKzP4.roa
Signing time:             Thu 01 Jan 2026 20:17:50 +0000
ROA not before:           Thu 01 Jan 2026 20:17:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215417
IP address blocks:        81.181.9.0/24 maxlen: 24
                          81.181.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:a0:e1:8e:fe:c9:14:bd:c8:14:10:79:72:5b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:17:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=81391e53f2ee9cebaf6be0a6a0400cbd084accfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:98:8e:16:5f:a5:58:e1:ad:4b:6a:eb:b8:11:
                    4b:0c:a9:da:02:5f:53:8a:8b:e7:f1:da:19:41:03:
                    54:ed:45:d8:68:a0:bb:62:2b:bb:43:fe:b2:9c:75:
                    15:c7:61:1a:5b:75:d7:03:72:f9:85:6d:13:89:80:
                    91:8e:f6:70:e5:60:89:c0:90:c9:6f:dc:47:6c:b0:
                    09:9a:f2:ca:3e:0c:ce:de:94:3b:c7:96:80:e8:34:
                    37:be:bc:e0:4e:8d:d3:1b:40:b6:61:d8:e7:85:44:
                    2e:ef:83:35:17:7f:bc:4c:43:d3:d3:81:36:02:29:
                    02:44:65:45:ec:59:2e:36:00:14:f4:2b:2a:55:19:
                    f5:a5:db:ca:cf:bf:71:fa:9e:bd:f3:2b:84:be:6b:
                    66:3e:af:ad:30:ce:68:3a:4f:d1:c0:27:96:36:2a:
                    df:66:58:d5:11:93:af:fd:7d:4a:47:2e:5f:50:3f:
                    47:c6:01:8a:2f:7c:0c:47:5a:09:00:4a:6e:c2:c6:
                    b9:30:32:da:b0:cb:0a:2a:99:26:4e:0f:53:da:3e:
                    d2:55:3d:dc:f3:b6:90:16:b4:36:42:30:dc:13:d0:
                    86:c5:1d:df:5b:b9:84:cc:61:a9:d3:00:93:a6:7e:
                    00:35:b8:8a:b1:23:4b:a5:e2:78:82:11:11:41:71:
                    dc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:39:1E:53:F2:EE:9C:EB:AF:6B:E0:A6:A0:40:0C:BD:08:4A:CC:FE
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gTkeU_LunOuva-CmoEAMvQhKzP4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.181.9.0/24
                  81.181.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:c7:e0:48:c6:4c:6f:58:da:7b:03:3b:cd:4c:1b:61:75:83:
         3c:0a:2e:72:c9:a2:fe:88:43:13:e7:56:44:b9:11:e3:67:a2:
         b7:42:93:db:cb:a6:3e:af:0e:b8:01:7a:8d:7b:b4:75:d3:e2:
         5c:e3:e7:4f:f2:6d:dd:5f:07:6c:83:42:07:18:23:b2:1e:96:
         f5:78:f9:86:4a:02:ee:7e:60:6e:94:e9:8e:0c:42:70:e3:54:
         5c:bc:1b:6d:07:84:35:77:67:9c:ee:57:c6:3d:93:4b:07:31:
         78:d3:8a:6d:c3:a3:4c:79:7d:b3:7c:62:0e:9d:7c:b1:20:c3:
         56:05:47:f2:60:96:d0:85:46:ca:44:ef:b2:db:e9:e2:8d:8e:
         c5:a4:4b:27:fc:15:63:8f:47:8c:bb:bf:49:d0:6a:ab:32:2e:
         f8:88:f9:67:cd:c5:70:96:68:e5:c4:08:e2:cf:b0:22:3d:1a:
         65:9a:e8:a1:97:5e:9b:e4:e2:6a:a8:cc:e6:5f:b1:0c:3f:3a:
         e0:39:0a:b1:cd:63:0f:bb:b7:2d:83:00:69:03:5c:2b:3e:2f:
         91:ec:ff:c5:4b:2f:f3:24:1e:d5:d4:f2:bf:8c:bf:56:1d:c8:
         71:d5:fe:56:3d:d1:e8:cc:cb:5c:f3:ee:c7:3c:93:03:f1:08:
         12:c8:5e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:48:53 2026 by rpki-client