This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LSZeH6xmNLXn4_qmVy-S6l5wKL8.roa
File:                     LSZeH6xmNLXn4_qmVy-S6l5wKL8.roa (raw, json)
Hash identifier:          OGZg0nyFmKfBvGtd19HOSVycxKtCMn/WjrVfQMkM+TQ=
Subject key identifier:   2D:26:5E:1F:AC:66:34:B5:E7:E3:FA:A6:57:2F:92:EA:5E:70:28:BF
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       019B7F84CFE250672E7EC2227323DCAAA30F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LSZeH6xmNLXn4_qmVy-S6l5wKL8.roa
Signing time:             Fri 02 Jan 2026 16:22:49 +0000
ROA not before:           Fri 02 Jan 2026 16:22:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59692
IP address blocks:        93.171.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:cf:e2:50:67:2e:7e:c2:22:73:23:dc:aa:a3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 16:22:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2d265e1fac6634b5e7e3faa6572f92ea5e7028bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1e:b5:35:cb:4d:1e:54:13:ec:ec:a1:38:da:
                    74:d4:16:23:ee:df:17:15:fb:4c:36:7b:7a:d7:7a:
                    49:09:a0:1c:48:af:be:27:59:96:1f:ff:5a:6e:d6:
                    cd:ef:65:65:c5:19:d3:be:1e:94:6a:7d:3c:8b:28:
                    e5:80:92:00:99:66:69:53:13:47:93:30:77:ec:f9:
                    2d:47:4f:0c:e7:41:cf:0c:a2:05:29:58:2a:6b:82:
                    11:bd:ee:4e:86:c2:95:b2:c0:e7:22:70:9e:9e:aa:
                    8c:2a:ae:b3:25:83:43:2b:ae:c8:c5:ad:d4:4f:c8:
                    e5:3a:2d:65:10:15:ed:6f:7e:26:2f:27:55:cc:79:
                    96:bf:7d:05:9b:a4:b5:51:f0:8b:ab:7b:65:66:90:
                    3d:2e:f5:38:22:64:42:b4:bd:40:03:f7:82:0b:d7:
                    8b:11:a0:99:db:32:9b:4e:b6:e4:c1:48:87:65:d8:
                    1f:23:68:39:4c:40:01:86:3d:0a:15:0b:0e:13:5f:
                    fb:45:55:17:14:6e:a8:cc:d2:9b:26:1a:a1:01:e6:
                    13:3e:cb:b9:90:1c:29:2f:dc:95:b7:b6:20:5f:ab:
                    10:2f:64:07:5c:b0:ba:44:db:6a:5b:90:56:25:35:
                    30:03:46:78:c0:68:f6:40:e3:5d:8c:c7:0d:0c:53:
                    9e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:26:5E:1F:AC:66:34:B5:E7:E3:FA:A6:57:2F:92:EA:5E:70:28:BF
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LSZeH6xmNLXn4_qmVy-S6l5wKL8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.171.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:5f:07:61:a8:c9:ae:23:66:41:2f:ed:4d:75:47:e4:95:bc:
         17:96:2d:53:89:0a:7a:a0:8b:6d:38:28:34:5f:e1:60:d2:6f:
         c4:ea:72:03:97:d7:f0:b0:ea:06:24:05:4a:86:66:c4:49:3c:
         39:c7:3a:8b:87:67:4b:e4:a2:5e:01:d5:a8:a7:00:24:d3:dc:
         59:e9:28:98:0e:5f:fb:27:e0:2f:50:b7:87:25:94:94:b7:61:
         95:12:a9:73:09:77:9c:5d:c0:ee:c6:01:0c:63:b5:e0:97:7d:
         e2:6b:2f:0f:b1:dc:1d:71:e7:08:33:4e:e4:54:65:f0:4c:b9:
         49:aa:73:f6:70:0f:05:6a:be:2a:30:bd:1c:43:3c:41:ce:c0:
         00:19:56:d6:73:c6:9c:64:9b:48:b2:2d:9d:26:4f:84:83:92:
         26:ba:76:af:63:46:fe:1b:ec:0f:4d:57:8a:da:9d:5a:0b:2e:
         1c:36:83:af:15:55:ae:65:c0:e8:7d:e7:d6:67:af:0a:e8:89:
         85:77:90:3f:8b:83:de:7d:0c:90:48:14:71:46:a3:c9:27:2f:
         c6:33:06:11:11:2c:b8:cd:28:2a:d5:e7:bd:78:f2:c4:4b:97:
         c3:ad:3c:82:39:4f:54:28:70:5f:68:4e:8c:52:46:47:b6:35:
         3e:06:29:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:23:24 2026 by rpki-client