This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/l1LATFY_vdostbB9Lz5ULV3obQg.roa
File:                     l1LATFY_vdostbB9Lz5ULV3obQg.roa (raw, json)
Hash identifier:          g5dMlB8SMZ/AEHbTJXc8VAsuZMEmjzmc7YnjTo/UDz8=
Subject key identifier:   97:52:C0:4C:56:3F:BD:DA:2C:B5:B0:7D:2F:3E:54:2D:5D:E8:6D:08
Certificate issuer:       /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial:       019B791031DE9124854E1DE98691CACF9771
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/l1LATFY_vdostbB9Lz5ULV3obQg.roa
Signing time:             Thu 01 Jan 2026 10:17:43 +0000
ROA not before:           Thu 01 Jan 2026 10:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216183
IP address blocks:        80.246.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 03:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:31:de:91:24:85:4e:1d:e9:86:91:ca:cf:97:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
        Validity
            Not Before: Jan  1 10:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9752c04c563fbdda2cb5b07d2f3e542d5de86d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:22:56:13:0b:ce:5c:f2:ff:c7:ae:2b:de:1c:
                    af:5a:67:3a:f5:ca:f9:c6:1c:9a:49:ce:2c:9e:05:
                    8f:e8:94:c3:40:14:17:c6:47:2e:9a:6f:99:f8:90:
                    b4:8d:55:31:80:42:6f:ac:8d:47:8f:ba:c0:92:b0:
                    80:5f:0f:e1:e4:3c:48:10:e6:84:68:f3:00:b7:ad:
                    b4:b5:b3:38:31:9a:25:fc:74:61:2d:46:79:3d:5c:
                    15:73:d3:67:25:af:71:3e:ac:de:b5:6e:4a:8c:7b:
                    c2:e9:d4:4b:7f:1f:ea:09:57:a4:67:01:26:14:02:
                    db:bd:aa:0a:f6:62:5e:07:b8:db:eb:d6:d0:96:fe:
                    3d:68:ef:c7:c0:11:10:34:cb:80:ce:42:80:f8:64:
                    9e:4b:13:30:ae:4e:95:e6:0f:58:b1:3b:bc:4f:91:
                    89:70:8e:89:19:9f:3a:43:53:24:4d:4c:a8:b8:28:
                    c7:89:9f:4a:d6:49:7d:49:f8:6f:24:a8:0b:51:5f:
                    20:ec:6f:de:fd:a9:1b:9c:26:13:05:8c:c4:83:db:
                    f4:5e:f7:24:80:99:80:e2:df:e2:de:98:07:71:64:
                    08:2e:16:50:54:cf:28:a3:dc:c9:eb:6f:dc:3f:49:
                    e5:56:46:03:b0:d6:07:3f:54:53:e1:8e:4f:79:ad:
                    57:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:52:C0:4C:56:3F:BD:DA:2C:B5:B0:7D:2F:3E:54:2D:5D:E8:6D:08
            X509v3 Authority Key Identifier:
                keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/l1LATFY_vdostbB9Lz5ULV3obQg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.246.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:91:84:71:f4:2e:ea:8d:7f:ae:58:66:69:c9:94:af:42:01:
         e1:f4:33:8b:53:5a:cc:b9:e1:22:82:98:b5:87:d0:f3:f8:88:
         8b:ab:aa:a5:7a:10:13:2d:e7:26:d2:da:67:8e:55:b0:23:00:
         af:4b:07:31:be:55:16:f0:83:b6:f9:0d:b2:d1:9b:69:5e:2d:
         3d:f3:7f:0a:69:f1:6f:58:75:7a:c3:48:22:01:06:27:ed:65:
         37:bf:86:28:10:85:45:45:8c:42:d2:a4:eb:9b:b0:b4:ef:84:
         09:18:f0:05:35:af:89:a5:b3:6c:93:19:71:7b:32:04:44:e4:
         2b:bb:14:a2:37:1e:cb:9b:46:b3:60:10:e9:13:db:19:30:6c:
         31:0c:d6:d9:21:f5:40:b3:bc:66:da:8e:47:5f:9b:05:c9:15:
         05:94:17:e1:b2:fd:d4:e3:36:b2:48:2d:3c:73:5d:96:9d:2b:
         4d:80:6d:3d:48:39:b7:5f:c6:29:45:ca:47:68:68:7b:47:f4:
         73:aa:0e:cb:15:6d:7b:c5:31:fa:a3:6b:9f:14:62:73:36:c5:
         45:75:00:44:ed:f4:44:31:e8:30:62:5b:0a:02:fd:2d:f9:b1:
         1d:01:b4:a7:d2:55:fb:70:6b:45:56:77:99:ff:84:1e:25:25:
         92:27:58:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:40:33 2026 by rpki-client