This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/LJC-_jw348E9MJkSCHhTzN2qooo.roa
File:                     LJC-_jw348E9MJkSCHhTzN2qooo.roa (raw, json)
Hash identifier:          VigKdlIRvlEEvPkwucOqBByNbZoFlk6R1HJNSe1A/8Q=
Subject key identifier:   2C:90:BE:FE:3C:37:E3:C1:3D:30:99:12:08:78:53:CC:DD:AA:A2:8A
Certificate issuer:       /CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Certificate serial:       019B77C675A741C7E6CAEC1CF5313C0456E9
Authority key identifier: 57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/LJC-_jw348E9MJkSCHhTzN2qooo.roa
Signing time:             Thu 01 Jan 2026 04:17:33 +0000
ROA not before:           Thu 01 Jan 2026 04:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211559
IP address blocks:        185.25.12.0/23 maxlen: 23
                          185.25.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:75:a7:41:c7:e6:ca:ec:1c:f5:31:3c:04:56:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
        Validity
            Not Before: Jan  1 04:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2c90befe3c37e3c13d309912087853ccddaaa28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c2:ec:34:f7:ba:81:6d:ba:dc:7f:4d:eb:e6:
                    ff:10:c1:dd:10:09:45:1c:c3:eb:6a:ee:9b:16:e6:
                    ea:42:08:5c:8b:5d:7c:7b:7e:49:53:23:d1:af:38:
                    c5:2e:35:28:fb:69:ae:9a:5d:f5:77:28:be:86:84:
                    4d:e0:2d:fa:cd:0f:43:2f:34:17:1c:6f:b0:6f:75:
                    24:48:92:ae:89:37:87:22:86:ec:44:b3:46:ff:09:
                    b7:d0:dd:0a:4f:f4:d9:64:5e:23:35:d5:55:d5:32:
                    23:5e:d5:a5:ed:62:6e:ed:38:48:0a:68:35:80:12:
                    db:2c:d9:c0:d8:97:ab:19:b1:94:5f:9f:d6:7f:59:
                    3a:3f:2b:36:28:b7:de:08:3e:a6:ab:ce:83:a5:d7:
                    a8:7e:5d:50:62:cc:97:db:79:f8:f3:b5:34:18:01:
                    59:e0:71:8f:e9:b6:f4:8e:bc:22:19:a5:02:58:3e:
                    a2:f5:2d:63:b9:54:b9:be:0e:af:b6:47:b1:66:11:
                    41:51:d8:da:20:e4:9a:26:cf:91:62:d2:0f:16:f7:
                    fa:01:0f:53:66:3b:31:79:84:a1:f9:eb:b1:d9:7e:
                    00:1f:90:f3:ea:ca:9a:5b:4c:10:73:b9:1d:61:4e:
                    4b:59:9b:79:b0:fe:9e:58:76:d6:b9:f0:65:53:ec:
                    84:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:90:BE:FE:3C:37:E3:C1:3D:30:99:12:08:78:53:CC:DD:AA:A2:8A
            X509v3 Authority Key Identifier:
                keyid:57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/LJC-_jw348E9MJkSCHhTzN2qooo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.25.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:d7:dc:ce:91:d7:c1:06:88:eb:1d:bd:f4:f1:cd:8c:32:d1:
         b6:ce:8e:6e:ca:04:c9:14:81:a9:cc:93:54:42:ae:79:df:43:
         36:7e:30:6d:91:ea:63:7b:56:fe:6f:48:0a:7e:3f:98:9c:fd:
         b4:50:9b:de:08:d5:7b:70:b8:58:e3:db:72:ba:82:32:06:20:
         c8:dd:28:7a:c8:67:c0:f9:0a:0d:89:49:31:78:69:d0:6a:65:
         ca:c0:b5:4b:ce:95:26:d6:92:b0:ad:91:76:c9:62:54:5a:82:
         f7:2f:39:fd:f3:39:23:f3:fe:d5:6d:b7:a7:92:c8:ad:7a:ca:
         03:48:27:48:d3:28:05:d7:2b:31:df:29:4f:73:72:48:7d:de:
         8d:99:60:e0:af:3b:ca:9f:a0:48:05:32:3e:28:74:ce:d0:4a:
         4c:e1:59:22:5c:dd:3d:e3:97:d7:f3:4f:8c:90:2a:f8:38:37:
         9b:f3:ea:a8:86:08:60:a8:14:24:8b:93:6e:22:47:40:05:11:
         9a:7b:af:2e:8d:b5:1f:51:69:e1:de:7d:f9:01:d5:c1:df:ac:
         e4:50:25:20:21:bc:31:57:3a:35:c6:07:0e:8b:02:44:aa:21:
         24:3f:f6:9d:d9:83:2e:00:05:17:0d:3c:7d:65:21:e2:63:b7:
         fd:72:92:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:01:20 2026 by rpki-client