This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/DvPTjOqlVSzNmVM6OOe5niz3dOM.roa
File:                     DvPTjOqlVSzNmVM6OOe5niz3dOM.roa (raw, json)
Hash identifier:          d/5dKSEtJ17pNb1brsQ69f7rjX4Bvuri7lYKe2ywqec=
Subject key identifier:   0E:F3:D3:8C:EA:A5:55:2C:CD:99:53:3A:38:E7:B9:9E:2C:F7:74:E3
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       019B7F1501A4BF3EA1187A7C31B2B94A1A1A
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/DvPTjOqlVSzNmVM6OOe5niz3dOM.roa
Signing time:             Fri 02 Jan 2026 14:20:41 +0000
ROA not before:           Fri 02 Jan 2026 14:20:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9304
IP address blocks:        185.81.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:01:a4:bf:3e:a1:18:7a:7c:31:b2:b9:4a:1a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Jan  2 14:20:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0ef3d38ceaa5552ccd99533a38e7b99e2cf774e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:21:f1:1c:49:9e:47:09:78:99:f9:7f:1e:f4:
                    6c:df:7d:da:1c:61:d1:75:36:af:d8:5c:4d:f1:2d:
                    11:72:a7:b9:49:32:4d:08:e7:86:62:32:a1:f7:0e:
                    ac:50:b6:62:21:b2:4f:3a:ba:f9:80:4e:bf:ed:b1:
                    ea:68:26:bc:1c:c4:6c:26:a2:a3:0f:eb:ad:1a:82:
                    9d:ac:ee:79:70:c1:5e:60:41:ab:ec:bb:bc:c7:03:
                    04:13:e7:49:eb:fa:b2:ff:dc:65:6b:c0:27:ad:89:
                    4c:0c:d0:a8:a8:7c:55:d5:1d:72:77:ac:07:e8:25:
                    42:dc:a6:63:46:1d:af:cd:f2:eb:12:fa:a8:1c:c1:
                    4a:64:f2:6f:e0:2c:8c:e0:59:1e:88:b2:ec:32:df:
                    83:13:16:1a:64:9c:88:57:8a:c1:f7:4e:c5:8d:81:
                    c4:a1:d1:a3:9a:d8:41:f3:66:6d:2d:2c:64:46:af:
                    a2:98:7e:d9:98:73:87:d2:d3:16:6d:50:a0:f4:1f:
                    1b:d2:fb:52:e2:a1:50:4f:08:a6:3d:de:19:6a:42:
                    1c:a4:da:36:57:f2:0e:d7:52:0f:16:38:55:67:22:
                    de:b9:04:11:81:ab:fb:5b:bb:77:d1:72:3e:8a:97:
                    32:7f:1b:ff:4f:bc:d6:2f:ef:90:a4:20:96:7a:00:
                    66:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F3:D3:8C:EA:A5:55:2C:CD:99:53:3A:38:E7:B9:9E:2C:F7:74:E3
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/DvPTjOqlVSzNmVM6OOe5niz3dOM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:f3:dd:7c:48:cc:40:c3:62:73:2e:2a:cf:59:39:87:e6:d3:
         73:f6:4f:4f:77:d7:ab:88:13:a8:00:2e:ad:b5:4b:93:b9:b5:
         ab:65:8b:a2:b0:ec:ed:28:12:0a:24:67:0a:86:17:62:f3:bd:
         05:76:83:ed:e3:e4:c6:d2:e1:a6:ae:0f:d6:1a:00:5e:6a:fb:
         bb:dc:2f:dc:8c:13:f8:25:18:6d:0d:10:1e:25:4f:01:22:98:
         2d:1b:c3:06:57:4b:f4:11:eb:a5:cb:8e:01:ec:ae:c1:59:b8:
         68:2c:a7:c2:6c:97:d5:49:ce:09:6b:a6:29:44:ba:8b:02:c4:
         8f:78:ad:84:d5:b7:99:e8:dd:46:91:8a:b2:d1:b5:ce:f6:7e:
         70:9e:d2:d9:42:5e:1e:8d:f3:2b:76:c5:13:06:22:ef:02:83:
         2a:c8:db:2e:c2:86:2e:a4:b3:81:11:e6:f2:d5:97:51:c1:f1:
         61:df:86:32:ce:57:15:93:da:ca:d9:db:c8:4f:7b:e5:d2:30:
         e3:b6:4a:c7:e3:00:33:35:20:f0:f9:8c:0b:d4:72:84:43:88:
         06:34:f9:2b:e8:09:82:f2:f1:b6:05:cd:06:1c:5d:6d:ef:ab:
         53:5b:94:8e:2c:bd:f8:f7:10:06:2a:7b:8c:85:5b:40:bf:ad:
         ea:d9:39:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 10:03:01 2026 by rpki-client