This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/LwQOFHs6kgQGzeJckqlPRpWEZeE.roa
File:                     LwQOFHs6kgQGzeJckqlPRpWEZeE.roa (raw, json)
Hash identifier:          BOiqAFM8xh37v4p/h8RnYN5W7afQwtMq4mWjCnwuOcc=
Subject key identifier:   2F:04:0E:14:7B:3A:92:04:06:CD:E2:5C:92:A9:4F:46:95:84:65:E1
Certificate issuer:       /CN=3076e9855f9bca3017a10137b443ee8c528ca952
Certificate serial:       019AB638ED80E361FE6AE58EC865035E4CC3
Authority key identifier: 30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/LwQOFHs6kgQGzeJckqlPRpWEZeE.roa
Signing time:             Mon 24 Nov 2025 14:16:15 +0000
ROA not before:           Mon 24 Nov 2025 14:16:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     197075
IP address blocks:        95.169.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:b6:38:ed:80:e3:61:fe:6a:e5:8e:c8:65:03:5e:4c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3076e9855f9bca3017a10137b443ee8c528ca952
        Validity
            Not Before: Nov 24 14:16:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2f040e147b3a920406cde25c92a94f46958465e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c6:c7:35:ea:74:9e:40:5f:0a:00:7d:ee:f6:
                    43:83:09:cb:f2:af:93:11:47:d3:f3:35:4d:b6:df:
                    c1:f4:47:e2:90:96:74:d5:01:2c:1b:ea:07:22:b3:
                    8e:e4:0c:b6:f5:c3:0d:12:26:17:70:52:65:da:f2:
                    3c:09:f1:f6:44:2a:98:03:92:c5:5a:c0:67:51:5d:
                    3b:d4:24:17:a6:3b:64:1d:08:6d:80:c4:03:68:df:
                    04:5f:91:2a:dc:b1:fa:a4:b2:7d:6c:e0:0f:27:40:
                    60:f6:5b:9f:44:d9:c0:b9:ac:7e:26:d3:28:05:24:
                    75:4e:af:70:86:73:3b:c7:7d:bf:82:ab:f3:6f:07:
                    44:c1:6d:85:87:ee:23:e8:a3:64:18:fe:94:b8:27:
                    c7:5c:06:2a:30:7c:f9:1c:5e:72:ac:72:57:39:3a:
                    28:e0:13:98:2b:18:cd:26:ed:ad:44:00:85:b1:10:
                    aa:df:ce:2e:7d:d8:85:72:a6:58:40:42:b7:54:e7:
                    33:94:50:64:fa:f4:7f:20:88:1a:0e:5a:0c:22:8a:
                    a6:0c:6b:fc:50:3c:d0:89:36:6c:59:0e:e6:c0:db:
                    f8:38:3f:81:64:16:4b:81:78:01:22:28:ae:da:6b:
                    6b:f4:d1:04:f7:74:5c:c2:46:f5:a7:b4:c3:76:b8:
                    82:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:04:0E:14:7B:3A:92:04:06:CD:E2:5C:92:A9:4F:46:95:84:65:E1
            X509v3 Authority Key Identifier:
                keyid:30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/LwQOFHs6kgQGzeJckqlPRpWEZeE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.169.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:7a:4e:3d:38:0a:47:10:dd:a2:f9:43:31:bb:97:6c:a6:f2:
         a8:e1:46:2c:61:35:c6:21:8b:9d:21:6e:b4:ba:10:40:a8:76:
         cb:18:63:b7:05:8e:95:2b:3d:d2:c7:ae:c0:94:28:91:6c:ca:
         69:36:25:94:fd:6a:a2:c9:1b:d8:23:8b:4e:ee:d3:d3:a1:be:
         5c:0a:9d:a5:bc:5f:d6:5e:12:af:d2:05:af:dd:60:f8:3b:cf:
         e1:55:cf:66:19:19:56:ac:b2:bb:68:86:93:32:6c:d2:d5:fa:
         73:95:64:b5:24:6f:72:a5:fc:6b:4d:80:7a:ec:66:2b:04:72:
         6f:d3:c1:11:cd:d2:bb:f8:f9:f2:ca:04:7a:3a:4c:f8:15:e2:
         3e:c4:2c:fe:81:d1:ce:67:71:9d:83:d1:b7:0d:c3:0d:b4:7d:
         00:34:8e:b0:fd:8b:c4:5f:a7:3f:ce:86:b1:20:71:e4:18:23:
         87:32:fc:f2:95:ac:cc:48:66:cb:af:46:eb:71:d5:a0:ee:23:
         9e:59:f8:c0:b6:91:20:e2:82:fc:63:d7:ba:75:29:c9:a1:e4:
         54:96:f8:6d:64:10:d8:14:7a:14:34:4c:e4:c9:b7:84:e9:d6:
         04:17:67:e8:68:af:55:1b:f9:5f:8c:e1:82:4c:ab:92:6b:53:
         3c:05:6e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:41:17 2025 by rpki-client