This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/gdPavX0yF7T7Wyp2RjBRxSe2U1s.roa
File:                     gdPavX0yF7T7Wyp2RjBRxSe2U1s.roa (raw, json)
Hash identifier:          YT5SSoDomUlfm9K9ESFgm6mAwjS+3bk9K/ENIJxNzus=
Subject key identifier:   81:D3:DA:BD:7D:32:17:B4:FB:5B:2A:76:46:30:51:C5:27:B6:53:5B
Certificate issuer:       /CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Certificate serial:       019B7834463672AB031269BAB4DAA2F306E1
Authority key identifier: 9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/gdPavX0yF7T7Wyp2RjBRxSe2U1s.roa
Signing time:             Thu 01 Jan 2026 06:17:30 +0000
ROA not before:           Thu 01 Jan 2026 06:17:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     13335
IP address blocks:        81.26.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 03:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:46:36:72:ab:03:12:69:ba:b4:da:a2:f3:06:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
        Validity
            Not Before: Jan  1 06:17:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=81d3dabd7d3217b4fb5b2a76463051c527b6535b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f2:b9:c8:51:ee:3e:76:24:0a:31:8c:7d:35:
                    e2:96:d0:03:84:11:25:7f:c4:b2:95:13:53:04:b7:
                    06:85:99:78:a0:fe:05:49:ae:91:3d:1c:46:96:96:
                    7e:46:8b:3c:f0:e7:21:2c:eb:2d:72:cf:31:84:f9:
                    e7:b2:55:4b:f2:5c:e3:d1:e9:f9:62:d8:ad:da:d8:
                    c9:ef:8b:1d:51:09:ff:9f:e0:c1:89:1d:76:05:b2:
                    26:2d:4d:5c:87:30:4c:fe:95:fa:b4:f3:f6:7a:1d:
                    51:92:02:a7:35:8d:eb:a5:22:42:bb:53:c5:2c:13:
                    68:3d:87:7e:02:48:6a:f0:dc:c8:f4:49:f4:36:3a:
                    1e:84:78:c6:39:d5:2b:92:ab:ab:2c:72:8f:9a:a6:
                    e5:81:b6:bb:70:9f:c3:d8:8d:23:78:e7:12:e3:e9:
                    f6:14:ce:26:4a:b5:99:b7:78:6e:9c:ff:b2:c9:8e:
                    a5:6d:1f:80:6b:59:b0:af:e3:e6:c8:a8:61:c9:34:
                    1c:1e:25:61:f4:88:3f:91:c5:62:38:e6:5c:2a:b5:
                    3a:e1:88:01:2c:1d:60:ae:0b:6f:0f:72:31:ee:e6:
                    46:0a:1f:15:92:d4:fb:ad:f8:92:9f:ff:7a:5c:bd:
                    07:1e:22:89:8b:b0:36:d2:03:df:0d:3e:11:1e:99:
                    f3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D3:DA:BD:7D:32:17:B4:FB:5B:2A:76:46:30:51:C5:27:B6:53:5B
            X509v3 Authority Key Identifier:
                keyid:9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/gdPavX0yF7T7Wyp2RjBRxSe2U1s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.26.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:49:42:3c:2a:04:38:c4:b8:d2:46:0f:ac:67:a5:cb:ba:61:
         0d:77:33:d3:80:ea:16:88:bd:1b:45:df:c8:5e:4d:f3:26:91:
         7e:6c:f8:ac:1c:2b:b6:18:48:b6:d5:cf:07:6e:a6:49:1b:d8:
         b5:07:3c:5b:e8:39:5f:51:eb:b4:05:a7:76:74:89:89:7d:a4:
         5a:bd:21:e4:aa:f5:dc:81:87:09:79:32:e8:b1:39:63:91:89:
         38:af:36:92:2c:4c:2f:43:5f:05:f8:2b:6b:64:50:3d:60:7b:
         e9:bc:a1:b7:d8:b9:e2:f0:ac:01:f2:c5:db:9d:c3:9a:2f:52:
         5d:b0:40:04:f3:6a:0c:fc:db:d2:2a:fe:81:56:1b:4b:d2:7f:
         04:15:da:bd:e5:8e:d2:27:3d:d0:82:dd:61:35:57:b0:7b:c9:
         f8:30:3f:a6:88:88:55:ec:2c:da:d4:0c:05:c0:51:fe:c7:32:
         ae:32:d2:1e:ea:fa:d2:d3:7e:82:f7:9b:58:ca:59:77:64:6a:
         e7:ae:4f:9c:ed:5d:ec:8d:d3:77:6b:ce:8a:a0:75:9c:7d:fb:
         45:19:0a:41:92:f8:a2:e3:94:17:8a:6d:70:08:79:3c:44:ab:
         1f:f7:f3:02:6a:82:06:53:e6:fb:69:c7:7c:a7:9a:61:71:ad:
         51:12:5e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:16 2026 by rpki-client