This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/LN31RTvGNNs31aCpj-wD6ee3dXo.roa
File:                     LN31RTvGNNs31aCpj-wD6ee3dXo.roa (raw, json)
Hash identifier:          C8SYZE0oqDJoDWLfNKKDQCP77oIU9jXrR3D5bTf/XTE=
Subject key identifier:   2C:DD:F5:45:3B:C6:34:DB:37:D5:A0:A9:8F:EC:03:E9:E7:B7:75:7A
Certificate issuer:       /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial:       019B7D5D115DBA31EDE84B413017DEF862DA
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/LN31RTvGNNs31aCpj-wD6ee3dXo.roa
Signing time:             Fri 02 Jan 2026 06:20:09 +0000
ROA not before:           Fri 02 Jan 2026 06:20:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     1902
IP address blocks:        145.236.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5d:11:5d:ba:31:ed:e8:4b:41:30:17:de:f8:62:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
        Validity
            Not Before: Jan  2 06:20:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2cddf5453bc634db37d5a0a98fec03e9e7b7757a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:75:4d:80:98:60:df:21:bb:5c:a4:d7:86:cc:
                    84:0e:63:26:14:df:c9:ff:62:f8:6a:ec:d6:cc:0b:
                    a0:09:a9:61:68:6d:5b:bc:4f:2b:f2:4f:38:e2:74:
                    e2:00:42:7c:77:28:6c:ef:62:35:78:ce:87:bf:81:
                    83:dd:92:02:f1:00:b4:48:48:ca:82:c9:ad:b3:33:
                    b0:61:c6:4c:fb:12:36:92:29:64:51:3b:70:96:bf:
                    ad:7b:df:3c:c4:f0:20:e9:c7:fb:10:4b:51:35:95:
                    2e:0a:fb:59:15:d6:e7:52:83:53:47:79:48:8f:91:
                    5f:c4:50:f6:68:6c:9a:de:af:81:d7:fc:5a:93:8a:
                    05:fc:de:bd:d7:44:7a:eb:32:a5:c3:4a:6a:99:56:
                    e8:35:8e:1d:af:b6:e2:2c:20:b0:dc:f6:c7:a6:fc:
                    52:2f:c9:36:eb:d1:c7:51:4e:cb:65:dc:30:19:6b:
                    df:01:3d:46:fa:5d:e6:a2:7f:71:3b:6f:14:6b:18:
                    af:24:bd:61:94:70:d2:de:56:f8:c3:9b:20:28:bb:
                    2e:25:e0:41:0d:03:12:64:a1:d3:28:f5:4c:f5:10:
                    d0:98:6b:50:ce:9d:6d:9b:2c:20:8b:90:d3:70:d1:
                    04:09:2e:ac:25:74:59:3b:42:f2:4e:3c:26:7d:6a:
                    a2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DD:F5:45:3B:C6:34:DB:37:D5:A0:A9:8F:EC:03:E9:E7:B7:75:7A
            X509v3 Authority Key Identifier:
                keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/LN31RTvGNNs31aCpj-wD6ee3dXo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.236.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:b1:50:54:fd:66:b9:0c:03:fc:2a:9e:0f:cf:f1:0b:eb:3d:
         2a:a9:73:cc:8a:cf:0d:29:96:75:61:c5:fc:d5:a1:05:b1:d5:
         a2:13:4f:27:25:3f:65:e0:f2:f6:88:71:91:df:80:c8:82:68:
         eb:a4:a8:b2:02:49:37:02:01:f3:eb:41:87:60:ce:30:35:72:
         da:87:2b:5e:1a:4b:2d:81:17:1a:06:37:fb:a5:88:40:84:ab:
         59:10:57:51:de:42:38:d3:93:ec:ea:8a:dd:25:6e:da:41:be:
         79:67:82:39:90:5e:e7:28:0e:81:60:df:72:75:8d:30:4b:64:
         37:70:29:a0:3f:77:6e:2d:f7:2c:fb:a0:b9:86:5b:d1:04:62:
         b5:f9:86:f4:55:10:82:6f:a8:7a:fe:a8:91:86:34:12:8b:b3:
         d2:82:78:7c:94:66:32:3c:91:0c:19:15:94:f8:1b:b9:b3:87:
         a2:05:0c:fb:a0:6e:f2:94:8c:a4:c9:3f:a3:dd:06:48:30:cf:
         6e:14:b1:d7:03:1b:1a:9c:90:c0:fb:f1:66:e9:1c:82:e2:04:
         c9:73:f1:5b:c8:5e:68:aa:e4:00:f0:8b:d6:54:0b:e7:2c:08:
         fd:18:2c:1c:f6:37:60:68:b0:22:89:8d:fa:11:3f:68:67:15:
         0b:28:01:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:29:08 2026 by rpki-client