This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/gCv9GsrB47w68fkCt0zJCC4RJMw.roa
File:                     gCv9GsrB47w68fkCt0zJCC4RJMw.roa (raw, json)
Hash identifier:          xbOO4Pn1uaeMtiQL/e3JD3h35YCVx46Ur2oVXzJ3jaY=
Subject key identifier:   80:2B:FD:1A:CA:C1:E3:BC:3A:F1:F9:02:B7:4C:C9:08:2E:11:24:CC
Certificate issuer:       /CN=cf136e01ffaf853dbb2a5cfcfe5d1b67d20c20b5
Certificate serial:       019B77C67E769662927877097648053BB420
Authority key identifier: CF:13:6E:01:FF:AF:85:3D:BB:2A:5C:FC:FE:5D:1B:67:D2:0C:20:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/gCv9GsrB47w68fkCt0zJCC4RJMw.roa
Signing time:             Thu 01 Jan 2026 04:17:35 +0000
ROA not before:           Thu 01 Jan 2026 04:17:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211216
IP address blocks:        81.31.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:7e:76:96:62:92:78:77:09:76:48:05:3b:b4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf136e01ffaf853dbb2a5cfcfe5d1b67d20c20b5
        Validity
            Not Before: Jan  1 04:17:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=802bfd1acac1e3bc3af1f902b74cc9082e1124cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:57:a1:99:a2:5d:df:85:32:db:94:19:ec:15:
                    ae:18:91:31:e2:bc:d8:3a:37:d1:42:7c:1f:af:64:
                    32:f2:df:e5:cc:e3:7d:01:9c:ee:f1:15:9a:81:7d:
                    b0:c2:9b:f4:2a:c5:9e:23:03:c9:53:18:84:95:3b:
                    45:2b:5c:77:f5:91:0f:e6:7d:ca:a2:c5:03:2f:35:
                    1a:58:54:e7:ea:a2:e6:95:07:17:99:4d:37:1c:2a:
                    46:f3:90:a9:47:05:00:ac:8f:59:a3:1a:13:11:ea:
                    42:66:59:77:4f:9d:14:f4:16:09:12:59:62:41:82:
                    6d:4b:a1:69:1e:8d:a3:97:92:89:90:30:63:4a:ab:
                    7f:7f:fd:79:91:52:e1:a2:f0:97:fe:51:be:ab:a8:
                    53:77:30:90:dc:87:f2:df:5d:f0:74:a8:a0:93:2e:
                    88:91:2d:ac:cb:54:bb:dc:0e:b2:4d:58:c7:f4:9c:
                    76:01:d5:ed:9c:35:d6:86:df:58:11:27:1f:63:c8:
                    8f:26:77:cb:17:9e:1d:6f:ce:48:1e:eb:a1:36:33:
                    ec:fb:a4:3d:1a:d9:6c:ae:fb:26:81:a3:80:95:df:
                    49:25:3d:49:12:15:3c:6f:ee:9b:3d:74:91:33:46:
                    fa:f4:ab:7e:5b:63:2c:6e:6e:19:6f:f2:51:7c:6d:
                    80:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2B:FD:1A:CA:C1:E3:BC:3A:F1:F9:02:B7:4C:C9:08:2E:11:24:CC
            X509v3 Authority Key Identifier:
                keyid:CF:13:6E:01:FF:AF:85:3D:BB:2A:5C:FC:FE:5D:1B:67:D2:0C:20:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/gCv9GsrB47w68fkCt0zJCC4RJMw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.31.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:5c:c7:ee:fa:bd:49:69:57:db:3e:8a:f7:d3:b4:bd:bf:2e:
         4a:40:96:ca:e0:84:1b:55:ae:fa:dd:82:12:88:fa:f8:53:31:
         1c:66:28:e9:00:2c:e1:5e:27:93:dd:f8:cd:32:44:82:43:09:
         91:f5:21:e5:98:13:48:7c:38:6e:ca:4a:70:5f:88:2c:50:59:
         77:68:59:d6:2c:68:ba:91:47:c4:a6:3e:dc:a1:0b:e2:d0:18:
         c7:9d:73:d1:21:5e:1d:57:1c:c1:b7:98:98:44:87:86:a0:a5:
         9c:58:4f:01:68:88:6a:b9:7c:ba:77:4b:c8:22:ac:f8:e7:2c:
         af:2b:6d:42:de:e8:69:b5:4f:9a:4d:be:f5:cf:a3:fc:c2:a4:
         bc:cb:c4:ed:d8:6e:93:23:f6:54:b7:16:08:38:b9:fd:49:9d:
         b1:65:5a:1a:fc:2b:8f:25:5c:6a:0a:8e:18:4d:a2:f9:3c:a2:
         33:90:87:af:ec:24:64:6e:74:cc:9d:ef:51:a1:a5:19:95:19:
         d6:5c:1e:83:ae:dd:8c:c4:9d:3c:a6:2c:52:58:c8:94:dc:2c:
         5a:cc:0c:dd:82:5e:a4:ad:84:17:b7:79:c9:37:e8:06:9d:ad:
         63:d8:26:86:6b:7f:6a:6e:ad:4d:10:18:f5:ac:dd:54:41:f8:
         8a:11:28:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:11:14 2026 by rpki-client