This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/LmEQx4Y1ZtCz_tHHRiVbMNn9Dec.roa
File:                     LmEQx4Y1ZtCz_tHHRiVbMNn9Dec.roa (raw, json)
Hash identifier:          JuBL+ZzO/YTQ/nMcJHrs3q5/a9bA6Y7q5J3GB4ZSZIU=
Subject key identifier:   2E:61:10:C7:86:35:66:D0:B3:FE:D1:C7:46:25:5B:30:D9:FD:0D:E7
Certificate issuer:       /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial:       019ABA303FB7E8464BCC6642F0FDCA8C6FED
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/LmEQx4Y1ZtCz_tHHRiVbMNn9Dec.roa
Signing time:             Tue 25 Nov 2025 08:45:15 +0000
ROA not before:           Tue 25 Nov 2025 08:45:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     203710
IP address blocks:        212.100.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ba:30:3f:b7:e8:46:4b:cc:66:42:f0:fd:ca:8c:6f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
        Validity
            Not Before: Nov 25 08:45:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2e6110c7863566d0b3fed1c746255b30d9fd0de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bc:c8:20:3d:c1:fc:61:73:c2:34:77:8b:e6:
                    9c:1a:95:ca:a8:96:af:09:fe:f3:ea:fd:22:7b:5b:
                    a8:9a:03:d6:50:11:a1:6a:f5:2f:af:e8:39:d5:46:
                    b4:ed:62:e0:fc:bb:10:5b:8b:83:e0:06:83:96:0e:
                    20:05:5a:da:57:37:e6:58:70:87:06:05:de:43:d2:
                    f8:d7:23:5c:25:bf:ac:43:34:be:c8:f7:2c:11:42:
                    a5:ec:16:94:3c:11:4d:a0:b9:13:87:3d:4a:27:98:
                    33:ab:61:c3:0e:6d:e8:9e:4b:d7:d7:ab:96:66:1a:
                    05:54:3e:e0:e4:6d:a3:90:96:fb:65:19:30:47:9b:
                    53:b7:7c:c8:1a:c4:24:8d:3d:12:1f:a6:e3:0f:3d:
                    9f:45:48:31:37:5d:85:28:99:24:f9:9a:57:4e:2f:
                    c5:b3:5f:79:28:40:00:b5:b7:fd:4e:15:a8:a1:b9:
                    c6:1b:48:35:6c:cb:8b:c0:69:7d:5d:13:8c:bb:f9:
                    1f:37:75:31:f5:9d:85:28:2e:f0:0b:8e:cc:6b:43:
                    90:26:b0:33:96:22:be:4f:39:45:c5:d4:40:f8:26:
                    04:b6:87:fe:69:8a:75:5b:8d:13:60:00:c6:b1:90:
                    14:20:af:e1:20:8d:8b:12:f3:1e:26:de:c9:a9:14:
                    5d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:61:10:C7:86:35:66:D0:B3:FE:D1:C7:46:25:5B:30:D9:FD:0D:E7
            X509v3 Authority Key Identifier:
                keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/LmEQx4Y1ZtCz_tHHRiVbMNn9Dec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.100.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:f1:3f:9a:47:50:02:ed:3f:15:96:ae:f3:ea:f0:ab:47:ad:
         90:93:be:61:db:99:b3:0f:93:a4:ab:0a:fc:94:bf:db:63:2b:
         bd:2f:38:80:87:c8:4c:d3:c3:f2:b7:20:bb:70:c7:4e:bd:df:
         bb:3c:44:2e:e0:83:aa:07:93:59:4e:9d:9b:f1:17:21:98:8a:
         b5:18:83:47:df:16:dd:65:5c:db:19:e4:9c:86:d1:a9:70:a2:
         33:5e:b0:b8:30:8c:ec:20:af:bc:73:be:30:a6:58:94:c7:af:
         3a:ca:be:f8:16:a8:38:c8:b7:d7:c4:5e:87:a4:db:5c:98:b0:
         d5:13:8e:08:91:cd:62:20:49:56:dc:6c:c7:e9:eb:78:f5:89:
         b2:8e:eb:07:f2:7d:c7:71:fe:e9:0a:3f:d0:9e:de:9f:9f:57:
         da:c7:14:a9:e2:03:ff:c9:f9:62:eb:cf:c3:6f:da:03:91:b6:
         a1:c8:46:35:77:7b:3d:f2:6c:c0:de:7a:c0:2b:93:f5:45:a4:
         66:d0:ac:d9:e3:fb:7d:49:95:b6:97:b2:e3:7c:37:79:05:52:
         36:b8:8f:5b:19:ab:ac:dc:ee:35:38:0d:91:6f:22:b2:30:76:
         33:83:91:10:34:de:11:cf:92:48:58:12:8a:b7:db:41:64:c4:
         61:af:db:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:22:00 2025 by rpki-client