This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/LwcGi6gaBxXQld7KF8Z51tQcrBI.roa
File:                     LwcGi6gaBxXQld7KF8Z51tQcrBI.roa (raw, json)
Hash identifier:          SPy2mj+6jlCo2V+MxEwDcEf3PeEIig0F+bBJ16HVakk=
Subject key identifier:   2F:07:06:8B:A8:1A:07:15:D0:95:DE:CA:17:C6:79:D6:D4:1C:AC:12
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       019B7758FBF746D44BA9EC2C22B16F95F2F8
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/LwcGi6gaBxXQld7KF8Z51tQcrBI.roa
Signing time:             Thu 01 Jan 2026 02:17:58 +0000
ROA not before:           Thu 01 Jan 2026 02:17:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198489
IP address blocks:        178.16.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:fb:f7:46:d4:4b:a9:ec:2c:22:b1:6f:95:f2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 02:17:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2f07068ba81a0715d095deca17c679d6d41cac12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a9:6d:c7:da:6f:bc:57:84:27:82:21:c7:d7:
                    99:4d:2f:55:e8:1d:89:e1:55:28:ee:cb:9a:71:44:
                    ba:c6:c6:c8:27:f0:d3:aa:c0:4d:40:7d:46:04:15:
                    ef:df:69:7f:30:0e:58:00:73:6b:9a:e6:27:42:01:
                    e0:8b:45:07:eb:7a:5b:58:e6:c2:b7:4c:39:85:94:
                    84:b7:86:a0:53:ca:e7:34:25:1e:c4:02:52:3a:f8:
                    be:89:3d:59:e1:ec:02:63:4d:81:75:b9:72:9a:6d:
                    b2:37:00:ea:79:c7:74:77:f9:91:89:b3:41:10:01:
                    55:f8:17:0c:0e:dd:f0:6e:ef:cb:a9:00:fb:a4:5d:
                    02:c3:83:8e:cc:af:8b:86:57:4c:57:04:b5:f9:e6:
                    43:f7:1c:d3:2d:a1:87:91:8f:d1:d7:b0:dc:a5:38:
                    d9:e9:3b:2e:8e:04:21:54:d6:e0:48:d8:46:be:5f:
                    1e:32:c5:b1:35:e4:ce:af:b9:03:c7:e3:35:c7:22:
                    41:d4:44:de:f2:91:5a:06:a7:59:f6:9a:9e:15:99:
                    e5:72:fd:0b:b6:b1:81:1e:a5:9b:c1:ab:27:31:48:
                    3f:d4:5a:cd:6b:24:cb:0d:53:29:2b:ef:a4:5f:97:
                    d7:7b:6e:4f:65:7a:71:fd:5a:ff:5d:13:43:6d:2b:
                    6b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:07:06:8B:A8:1A:07:15:D0:95:DE:CA:17:C6:79:D6:D4:1C:AC:12
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/LwcGi6gaBxXQld7KF8Z51tQcrBI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.16.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:a8:fe:39:26:1a:52:01:08:39:87:06:56:f9:30:07:9a:bf:
         25:11:4a:41:86:29:d3:72:06:14:06:5e:9e:0e:4d:80:1c:e6:
         4d:96:f9:a1:98:e6:dd:c7:d6:55:ee:0b:a5:8a:17:3c:1d:86:
         2f:b8:ef:6d:8e:c0:b5:98:86:be:a1:16:d6:be:a9:b0:05:fa:
         59:01:4c:90:24:49:51:77:bb:f9:b5:ee:9a:1b:83:20:03:a1:
         72:ec:3f:73:3a:08:a7:d2:85:46:eb:27:de:07:f6:49:39:11:
         e4:0a:bc:e0:6a:25:ea:18:1e:2f:37:6f:3c:d2:f5:01:6b:1b:
         d0:e8:c3:58:1e:dc:30:96:72:71:d6:1b:a5:37:e0:25:a5:64:
         cc:c9:29:ea:f0:ea:1f:d6:83:2a:c4:eb:d0:70:a0:59:df:62:
         ca:8e:9b:79:f8:01:58:fa:46:40:ff:5e:e0:35:83:ad:86:0a:
         9e:02:fa:16:f6:2b:c6:9e:8f:d0:8d:19:27:6a:14:29:1d:c6:
         1e:d5:36:99:2a:74:0b:20:ee:d7:65:1c:0f:b8:55:4c:e4:76:
         db:a8:ae:da:76:14:f4:8f:62:55:22:09:ee:46:68:1e:72:02:
         d3:83:5b:b7:c3:1c:66:6e:93:e7:1f:a1:c6:7e:9a:7f:69:a7:
         73:73:df:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:29:44 2026 by rpki-client