This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/laLTLAZUfnJXL9IgOMNUJBbcIYM.roa
File:                     laLTLAZUfnJXL9IgOMNUJBbcIYM.roa (raw, json)
Hash identifier:          qH+8NsTPRO3q9UjCnJr8tq7a5R+TvAmnEtSTXrLT0C0=
Subject key identifier:   95:A2:D3:2C:06:54:7E:72:57:2F:D2:20:38:C3:54:24:16:DC:21:83
Certificate issuer:       /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial:       019B7C129F3F96F500263CFF906C70049CA0
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/laLTLAZUfnJXL9IgOMNUJBbcIYM.roa
Signing time:             Fri 02 Jan 2026 00:19:13 +0000
ROA not before:           Fri 02 Jan 2026 00:19:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204092
IP address blocks:        80.67.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 00:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:9f:3f:96:f5:00:26:3c:ff:90:6c:70:04:9c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
        Validity
            Not Before: Jan  2 00:19:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=95a2d32c06547e72572fd22038c3542416dc2183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4a:a1:35:3a:01:ee:ed:3f:69:e3:08:e2:dd:
                    93:16:69:ec:20:4d:f3:62:0f:1e:7b:21:5f:3f:f7:
                    65:07:49:e6:5d:93:33:3c:8f:10:79:c2:8d:9c:fd:
                    34:53:fc:8b:eb:95:67:11:f0:64:65:79:54:3a:a5:
                    70:9c:df:c5:ce:14:f5:b1:58:14:97:9b:fb:55:49:
                    aa:71:00:1b:6f:8b:f0:90:92:25:f6:47:4a:f0:89:
                    59:4e:9c:84:c5:06:44:6b:ad:84:d5:78:17:ab:4a:
                    0a:cf:15:82:97:1a:ee:61:69:5c:2e:b1:9c:c2:08:
                    99:32:c1:2b:ee:57:df:7c:88:23:72:2e:ff:91:fd:
                    0f:8c:ed:1f:c0:3e:15:9e:db:f9:ac:a0:2e:1d:eb:
                    f8:05:3b:9c:87:c5:1a:3e:04:2b:54:73:e5:27:dc:
                    a2:7f:75:e3:e5:84:c1:80:e3:c5:29:3c:7f:26:43:
                    19:c8:16:b2:69:09:ab:79:18:2e:f3:97:a2:4b:2e:
                    85:a3:8b:ee:cd:4a:ee:95:c0:e5:8a:18:05:84:c4:
                    ea:0e:82:df:d0:21:95:1a:b6:e2:00:db:dc:74:51:
                    bc:8b:d5:23:e4:ab:8a:7d:c7:a8:9f:b5:e9:59:54:
                    66:0f:57:3d:c9:9d:df:29:3f:03:11:57:66:4c:f6:
                    4f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A2:D3:2C:06:54:7E:72:57:2F:D2:20:38:C3:54:24:16:DC:21:83
            X509v3 Authority Key Identifier:
                keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/laLTLAZUfnJXL9IgOMNUJBbcIYM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.67.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:d5:a6:82:6b:01:6b:46:00:1e:a9:ad:a3:e6:6a:a2:53:45:
         b0:e7:14:23:06:c6:53:77:a5:04:8a:3a:7a:1a:ce:97:8b:e7:
         fd:e1:4e:9e:75:e6:6f:25:84:39:92:9d:59:20:17:05:32:d5:
         6a:0f:ab:f4:e8:bb:72:db:3c:9e:20:df:6d:31:fa:b0:6c:80:
         5c:3f:a4:5d:fd:8d:23:d4:89:4c:5f:b9:04:2c:04:e4:e6:f5:
         4c:a9:8a:1f:d7:80:af:1e:92:64:0c:23:65:6a:6a:65:a3:09:
         d8:db:1b:2e:f1:97:0c:bc:aa:6a:8f:ec:82:f3:ea:1b:19:24:
         38:aa:2d:6d:df:0c:de:0a:18:16:2f:35:53:d4:f3:7d:b6:f9:
         fd:94:b9:9b:d8:41:24:f0:17:c6:90:ad:93:d9:5e:1a:b1:06:
         ab:cd:75:d6:6b:16:8d:ab:55:74:bf:13:d1:37:27:0e:0b:3d:
         02:10:49:5d:aa:b6:64:61:05:a7:03:be:a9:3a:0d:5a:4e:2b:
         af:a1:40:9a:ed:73:89:1d:be:6d:cd:3d:89:9e:f0:52:69:49:
         b7:cb:7c:18:b6:5d:8f:ae:c1:94:f8:8f:0d:0d:4b:41:df:7a:
         49:c3:df:5b:ee:9e:7d:93:50:36:41:6c:07:00:6c:c6:3f:90:
         43:1d:51:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8Ep8/lvUAJjz/kGxwBJygMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl
ZjRmZWEwHhcNMjYwMTAyMDAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWEyZDMyYzA2NTQ3ZTcyNTcyZmQyMjAzOGMzNTQyNDE2ZGMyMTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EqhNToB7u0/aeMI4t2TFmnsIE3z
Yg8eeyFfP/dlB0nmXZMzPI8QecKNnP00U/yL65VnEfBkZXlUOqVwnN/FzhT1sVgU
l5v7VUmqcQAbb4vwkJIl9kdK8IlZTpyExQZEa62E1XgXq0oKzxWClxruYWlcLrGc
wgiZMsEr7lfffIgjci7/kf0PjO0fwD4Vntv5rKAuHev4BTuch8UaPgQrVHPlJ9yi
f3Xj5YTBgOPFKTx/JkMZyBayaQmreRgu85eiSy6Fo4vuzUrulcDlihgFhMTqDoLf
0CGVGrbiANvcdFG8i9Uj5KuKfceon7XpWVRmD1c9yZ3fKT8DEVdmTPZPowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJWi0ywGVH5yVy/SIDjDVCQW3CGDMB8GA1UdIwQY
MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt
YTY1MjMzYjNlOTc1LzEvbGFMVExBWlVmbkpYTDlJZ09NTlVKQmJjSVlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1
LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEO+MA0G
CSqGSIb3DQEBCwUAA4IBAQAt1aaCawFrRgAeqa2j5mqiU0Ww5xQjBsZTd6UEijp6
Gs6Xi+f94U6edeZvJYQ5kp1ZIBcFMtVqD6v06Lty2zyeIN9tMfqwbIBcP6Rd/Y0j
1IlMX7kELATk5vVMqYof14CvHpJkDCNlamplownY2xsu8ZcMvKpqj+yC8+obGSQ4
qi1t3wzeChgWLzVT1PN9tvn9lLmb2EEk8BfGkK2T2V4asQarzXXWaxaNq1V0vxPR
NycOCz0CEEldqrZkYQWnA76pOg1aTiuvoUCa7XOJHb5tzT2JnvBSaUm3y3wYtl2P
rsGU+I8NDUtB33pJw99b7p59k1A2QWwHAGzGP5BDHVGg
-----END CERTIFICATE-----
Generated at Mon Jan 26 10:24:12 2026 by rpki-client