This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lot016U7U6JL43wtM60yljMjF4I.roa
File:                     lot016U7U6JL43wtM60yljMjF4I.roa (raw, json)
Hash identifier:          18/d/s7/WmFdWb3qjzEB9yH+6YTufgLNjpNy8KhdOs0=
Subject key identifier:   96:8B:74:D7:A5:3B:53:A2:4B:E3:7C:2D:33:AD:32:96:33:23:17:82
Certificate issuer:       /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial:       019B7E38474860DC4025D889EB99AD328091
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lot016U7U6JL43wtM60yljMjF4I.roa
Signing time:             Fri 02 Jan 2026 10:19:36 +0000
ROA not before:           Fri 02 Jan 2026 10:19:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     24611
IP address blocks:        185.226.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:47:48:60:dc:40:25:d8:89:eb:99:ad:32:80:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
        Validity
            Not Before: Jan  2 10:19:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=968b74d7a53b53a24be37c2d33ad329633231782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:de:2f:5b:0f:3c:51:04:8a:82:71:41:df:21:
                    31:9b:48:ba:0c:51:86:10:e6:5c:6e:e9:0d:3d:ac:
                    4c:ba:3e:ab:72:e5:2b:c4:51:4e:ad:21:58:1d:d3:
                    2d:95:5b:1f:92:ab:68:41:46:5f:bd:bc:3b:dc:e7:
                    fd:99:36:3b:ba:3d:f1:5a:69:0e:ba:56:ef:26:07:
                    02:03:28:3f:07:e3:44:b2:60:07:a4:98:39:cf:76:
                    48:23:37:8e:42:04:3f:66:0d:d2:02:a5:31:8c:bd:
                    ee:96:89:70:6b:a5:99:21:bf:38:53:ad:d9:51:70:
                    fa:05:55:7f:6a:27:22:18:90:84:ef:0b:44:63:9b:
                    72:e3:bc:2c:f1:11:12:e0:2a:b3:f5:25:a2:39:a0:
                    60:0e:9e:9a:4c:1d:03:1f:9f:a0:a6:d4:f0:86:c9:
                    3e:9d:76:d5:e0:bd:a5:26:65:86:4e:ef:c0:07:bb:
                    be:77:ea:2c:1d:db:63:69:4c:dc:bc:17:a5:95:69:
                    9b:7d:72:eb:fc:ee:36:2f:13:46:bb:ae:d2:9b:7a:
                    57:26:20:73:36:dc:9a:67:b6:9b:ee:17:a7:e3:4c:
                    0e:a2:26:79:ae:34:53:22:9d:63:80:f5:2e:6e:4f:
                    ce:a5:13:7a:45:d2:f6:a5:a6:93:c7:c5:99:18:ff:
                    7c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8B:74:D7:A5:3B:53:A2:4B:E3:7C:2D:33:AD:32:96:33:23:17:82
            X509v3 Authority Key Identifier:
                keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lot016U7U6JL43wtM60yljMjF4I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:c3:81:12:97:3e:79:da:e1:2b:f0:b8:78:70:a7:d4:7c:c4:
         5a:94:2d:c9:55:44:8b:f5:55:d1:b1:5a:2e:ba:a5:bb:70:ce:
         08:59:02:41:09:42:ae:82:55:bd:18:94:45:28:16:a7:17:8d:
         cd:ce:c3:7c:8d:6a:b3:3e:31:0c:cd:35:fa:2a:6e:04:bb:95:
         10:8d:cf:81:e8:3f:c8:90:2e:47:c5:19:7b:85:71:ee:db:07:
         a3:e0:5b:1e:d4:35:d4:35:74:9f:33:c1:d5:1c:98:f8:ea:61:
         c3:16:dd:65:74:73:56:d2:31:42:c8:e0:a9:66:01:ff:79:37:
         ad:bc:44:1d:c6:b2:08:10:96:ab:46:ff:b2:e6:6a:94:b4:b1:
         cc:6f:74:d1:37:24:77:a6:49:8a:b5:ab:fa:ac:82:9b:61:5c:
         11:7f:c1:f6:41:c2:49:ae:f3:ba:0c:c4:25:56:88:7c:fd:b6:
         f7:2b:8e:9e:b7:0d:d5:02:35:d1:13:15:70:2b:e2:01:ab:23:
         5e:ae:12:9d:3d:98:44:62:b7:d3:b8:26:a2:84:fc:1b:f5:04:
         e4:65:a6:b7:1f:76:d7:fb:36:aa:c4:bb:c7:54:4f:66:5e:dd:
         5b:48:e2:af:e8:09:82:b9:cd:80:57:11:76:20:c4:64:45:4f:
         1b:f3:d3:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+OEdIYNxAJdiJ65mtMoCRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1OTliM2U3ODIzNzBkYzI4MTRmNTI1YzFkNmVjZTg0ZDhm
NzBmMzYwHhcNMjYwMTAyMTAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjhiNzRkN2E1M2I1M2EyNGJlMzdjMmQzM2FkMzI5NjMzMjMxNzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt4vWw88UQSKgnFB3yExm0i6DFGG
EOZcbukNPaxMuj6rcuUrxFFOrSFYHdMtlVsfkqtoQUZfvbw73Of9mTY7uj3xWmkO
ulbvJgcCAyg/B+NEsmAHpJg5z3ZIIzeOQgQ/Zg3SAqUxjL3ulolwa6WZIb84U63Z
UXD6BVV/aiciGJCE7wtEY5ty47ws8RES4Cqz9SWiOaBgDp6aTB0DH5+gptTwhsk+
nXbV4L2lJmWGTu/AB7u+d+osHdtjaUzcvBellWmbfXLr/O42LxNGu67Sm3pXJiBz
NtyaZ7ab7hen40wOoiZ5rjRTIp1jgPUubk/OpRN6RdL2paaTx8WZGP98WwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJaLdNelO1OiS+N8LTOtMpYzIxeCMB8GA1UdIwQY
MBaAFJWZs+eCNw3CgU9SXB1uzoTY9w82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFptejU0STNEY0tCVDFKY0hXN09oTmozRHpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi80MGExMDItZWZjZC00ZmQyLTkzNzMt
ZDA2YWE1MThhYTZkLzEvbG90MDE2VTdVNkpMNDN3dE02MHlsak1qRjRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi80MGExMDItZWZjZC00ZmQyLTkzNzMtZDA2YWE1MThhYTZk
LzEvbFptejU0STNEY0tCVDFKY0hXN09oTmozRHpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBueIWMA0G
CSqGSIb3DQEBCwUAA4IBAQAVw4ESlz552uEr8Lh4cKfUfMRalC3JVUSL9VXRsVou
uqW7cM4IWQJBCUKuglW9GJRFKBanF43NzsN8jWqzPjEMzTX6Km4Eu5UQjc+B6D/I
kC5HxRl7hXHu2wej4Fse1DXUNXSfM8HVHJj46mHDFt1ldHNW0jFCyOCpZgH/eTet
vEQdxrIIEJarRv+y5mqUtLHMb3TRNyR3pkmKtav6rIKbYVwRf8H2QcJJrvO6DMQl
Voh8/bb3K46etw3VAjXRExVwK+IBqyNerhKdPZhEYrfTuCaihPwb9QTkZaa3H3bX
+zaqxLvHVE9mXt1bSOKv6AmCuc2AVxF2IMRkRU8b89PH
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:39:50 2026 by rpki-client