This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/lWq-fTyJH_c8x_RL0HQZdlijhM4.roa
File:                     lWq-fTyJH_c8x_RL0HQZdlijhM4.roa (raw, json)
Hash identifier:          NVgGyE+t6UpHRgsptpairBBdU4cY7oezcTyDp8PGFvk=
Subject key identifier:   95:6A:BE:7D:3C:89:1F:F7:3C:C7:F4:4B:D0:74:19:76:58:A3:84:CE
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       019B79ED1680790F261863118848BAC160A7
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/lWq-fTyJH_c8x_RL0HQZdlijhM4.roa
Signing time:             Thu 01 Jan 2026 14:18:59 +0000
ROA not before:           Thu 01 Jan 2026 14:18:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34826
IP address blocks:        195.187.130.0/24 maxlen: 24
                          195.187.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:16:80:79:0f:26:18:63:11:88:48:ba:c1:60:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Jan  1 14:18:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=956abe7d3c891ff73cc7f44bd074197658a384ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d3:81:f9:12:dd:8b:12:97:c5:06:4e:86:a2:
                    ae:e9:a2:35:3a:97:76:80:6c:08:ed:22:13:8c:c9:
                    27:32:3f:60:6a:fc:b8:3e:b8:c5:fe:16:41:bf:76:
                    34:2c:10:d9:57:a1:b3:d4:76:72:f5:a2:17:32:d9:
                    a4:0f:d4:8f:28:80:b6:d2:c1:4a:b2:86:82:26:08:
                    ba:d1:be:e7:78:79:a1:1c:12:b7:81:8c:4d:61:9a:
                    36:99:78:23:08:1b:86:7b:7f:d2:5f:f2:d1:31:df:
                    35:f2:8d:0a:29:36:bf:3c:1a:ac:ff:56:98:a1:07:
                    9a:89:be:52:64:11:7a:0d:fc:39:65:05:b3:7a:3c:
                    de:09:d6:6e:44:30:6b:b1:92:0b:e9:28:c0:d3:ef:
                    05:f8:02:b8:c6:92:fc:fe:7b:b0:27:d7:8d:9a:54:
                    54:dc:56:da:09:87:55:80:db:22:ed:3b:e8:c2:66:
                    a7:69:76:c7:f3:5e:f1:64:dc:ac:d1:4b:95:1a:08:
                    d4:3a:0d:e3:29:ae:48:7e:14:4a:ae:2e:dd:b1:ba:
                    a6:53:27:e5:09:67:c8:22:a8:bc:e0:67:2f:82:e1:
                    46:c0:48:82:9e:8d:fc:6b:e4:41:e4:4f:e1:4f:5b:
                    3c:56:07:79:69:c2:4e:83:fe:a9:df:1a:ee:e3:d6:
                    1b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6A:BE:7D:3C:89:1F:F7:3C:C7:F4:4B:D0:74:19:76:58:A3:84:CE
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/lWq-fTyJH_c8x_RL0HQZdlijhM4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.187.130.0/24
                  195.187.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:c6:51:af:96:5d:f8:92:e4:29:37:b9:80:88:ae:de:96:36:
         1f:6f:1f:9f:4a:7f:0c:7c:e9:a8:bb:82:19:32:ae:60:c7:2e:
         86:7b:82:e8:e4:ed:c4:c6:ac:36:01:e9:15:a8:cd:c8:17:1e:
         6b:d5:cc:0c:25:03:01:f6:6c:2e:ab:36:b9:01:c1:10:15:dd:
         97:ef:5d:89:bc:00:75:c9:1d:3f:80:9a:b1:d5:40:30:2d:d3:
         34:c3:a7:11:87:d4:06:0d:45:8d:04:ae:3e:af:60:7b:94:05:
         b7:9c:b6:88:32:b6:d8:e6:de:05:7b:93:d4:b2:fa:89:d7:88:
         34:fc:6e:2b:5b:72:ef:a2:53:5c:4d:8c:22:e6:6e:ab:f2:28:
         bc:7e:40:0b:9f:11:8c:0b:15:81:a2:2f:76:44:ca:5a:b5:e3:
         1e:5b:28:3e:62:2a:8c:53:8c:c5:4d:3d:be:6a:fd:27:9d:90:
         83:66:56:ad:36:7d:f2:92:1d:dc:cc:f2:0e:c1:84:05:f1:0c:
         2b:03:16:56:f2:00:83:0e:5a:f6:de:42:a2:85:47:77:7c:12:
         80:c1:dc:91:99:23:10:24:1d:cb:86:b1:55:e7:11:d4:23:7d:
         af:de:7a:82:af:be:0a:96:03:90:60:6c:90:9f:86:e1:30:45:
         9f:88:be:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:39:29 2026 by rpki-client