This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/LvnAY2pckzRLAzMxTjPE9zCN3Ag.roa
File:                     LvnAY2pckzRLAzMxTjPE9zCN3Ag.roa (raw, json)
Hash identifier:          woZLLhApCfVxkyZ50HpqXpM/zC7yGzb4mBQNzIbCauE=
Subject key identifier:   2E:F9:C0:63:6A:5C:93:34:4B:03:33:31:4E:33:C4:F7:30:8D:DC:08
Certificate issuer:       /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial:       019B7B3621AE29CB01D367F0D839E9153312
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/LvnAY2pckzRLAzMxTjPE9zCN3Ag.roa
Signing time:             Thu 01 Jan 2026 20:18:23 +0000
ROA not before:           Thu 01 Jan 2026 20:18:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49972
IP address blocks:        194.180.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:21:ae:29:cb:01:d3:67:f0:d8:39:e9:15:33:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
        Validity
            Not Before: Jan  1 20:18:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2ef9c0636a5c93344b0333314e33c4f7308ddc08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e2:b2:1a:a1:3c:dc:3b:59:19:2a:75:52:c7:
                    b8:d2:52:3d:e5:e4:f5:3e:01:a4:94:9c:95:5e:d6:
                    09:6f:52:ab:f7:31:06:27:65:31:e3:2d:e1:26:f7:
                    db:39:42:29:dd:94:66:38:55:ab:7c:35:ce:49:88:
                    4f:a1:0b:60:b2:4f:70:62:bb:ff:69:5e:af:71:85:
                    46:52:94:54:cd:40:91:99:f3:fa:57:41:ba:7c:89:
                    bf:b2:93:2a:fb:3e:4d:a3:16:0b:c0:d5:af:4b:2f:
                    60:0b:d5:5d:55:17:79:fa:5c:be:73:f3:80:23:a7:
                    4b:1e:0f:ac:f2:25:dc:59:a4:b6:e8:4b:db:d2:30:
                    fa:6e:4d:ec:6e:6f:de:67:be:34:92:59:fa:25:a4:
                    32:1a:c2:41:cc:13:76:7c:d3:2d:b9:b7:72:7e:b9:
                    19:e2:ef:27:e7:ff:62:c7:44:4c:a1:20:5f:69:09:
                    37:eb:4c:a6:98:a9:fb:25:9e:80:f7:4b:06:bb:3e:
                    99:04:d4:c5:06:3b:3b:88:ff:ff:86:9b:d8:3a:d8:
                    94:4b:a1:1b:4e:9d:65:2a:db:4f:17:ff:48:db:b6:
                    c4:d9:e6:98:9c:80:78:72:81:52:97:32:c5:b6:e9:
                    52:30:e9:13:63:be:dc:34:82:d5:ed:6e:c2:e0:e6:
                    13:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F9:C0:63:6A:5C:93:34:4B:03:33:31:4E:33:C4:F7:30:8D:DC:08
            X509v3 Authority Key Identifier:
                keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/LvnAY2pckzRLAzMxTjPE9zCN3Ag.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.180.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:22:18:d3:71:a1:e2:4b:0d:50:b7:1e:d4:54:90:ea:c9:69:
         01:56:3a:82:53:36:4e:eb:7c:f7:a1:bf:e1:94:d4:19:88:54:
         2e:86:5d:51:62:3c:bd:14:25:c1:78:74:a2:3e:36:7b:d5:56:
         ad:d5:a6:6d:98:71:7a:cd:1b:92:98:14:da:17:90:af:15:ce:
         44:24:c3:a8:70:75:5e:65:5b:12:48:53:58:5e:70:3e:c4:89:
         c2:9f:06:9b:bc:e9:5d:94:c1:cd:cb:cf:62:b4:61:a2:f2:64:
         99:f3:ca:00:94:8d:14:9f:e7:e7:f3:96:b3:b2:de:2a:ad:85:
         50:7a:11:24:c4:ef:16:9d:64:3c:93:02:db:eb:77:5f:78:e5:
         95:32:3d:9b:0c:ee:75:98:16:43:37:d9:60:62:48:ea:10:10:
         f4:4c:62:77:6c:dc:7e:bc:a3:39:0c:a7:e0:93:ed:c1:16:32:
         66:b0:12:9d:fb:55:3d:b9:8c:1d:cc:0f:87:99:81:85:c4:86:
         99:97:6a:99:3e:88:a5:78:16:e6:6f:78:ef:3b:0e:a7:46:64:
         b5:05:49:5d:ac:1b:25:82:3b:6b:95:85:bc:93:b8:99:c6:74:
         12:e7:3f:28:5f:f2:94:c3:85:ec:23:09:4e:2e:de:24:0e:14:
         4f:a0:53:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:16:12 2026 by rpki-client