This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/lmwUE6-sNDETCNSEMoLU5Q6laJU.roa
File:                     lmwUE6-sNDETCNSEMoLU5Q6laJU.roa (raw, json)
Hash identifier:          8qCzxJz2lk/vBKmrmfwaSNgolO5upfvcwLUosHTaWSo=
Subject key identifier:   96:6C:14:13:AF:AC:34:31:13:08:D4:84:32:82:D4:E5:0E:A5:68:95
Certificate issuer:       /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial:       019B791031A3C197E687DCC460D797953FF4
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/lmwUE6-sNDETCNSEMoLU5Q6laJU.roa
Signing time:             Thu 01 Jan 2026 10:17:43 +0000
ROA not before:           Thu 01 Jan 2026 10:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216089
IP address blocks:        80.246.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 03:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:31:a3:c1:97:e6:87:dc:c4:60:d7:97:95:3f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
        Validity
            Not Before: Jan  1 10:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=966c1413afac34311308d4843282d4e50ea56895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:95:57:0a:68:fc:97:e2:38:10:f8:8e:65:f1:
                    c6:69:00:bd:b1:1a:a5:f2:1c:45:85:9e:39:0b:11:
                    90:4e:f6:a5:b1:09:75:d7:f1:ce:f0:46:8f:85:e1:
                    70:cc:98:09:a2:2b:66:8a:f5:0d:de:89:4e:51:40:
                    01:dd:9e:a0:3e:06:d7:a5:6d:31:75:b2:13:17:f0:
                    0b:c9:d6:91:8b:50:21:46:8c:62:66:05:cf:81:db:
                    53:ed:8c:ed:13:9d:7d:19:2f:34:e9:14:3e:53:bf:
                    d8:d7:14:bf:e6:71:fd:9a:7e:4b:2d:96:1e:f2:0d:
                    86:9e:53:f3:18:68:ba:a0:ee:b5:6c:34:de:31:e1:
                    d9:9a:86:e4:42:b1:18:54:55:55:8f:d7:7c:1d:c3:
                    ed:3a:d2:d7:3f:d3:b7:5c:ff:51:7c:5e:4b:aa:15:
                    e7:03:8f:ee:28:de:42:34:09:96:c1:c6:da:0f:ad:
                    d3:c9:83:2d:12:42:7c:ba:b5:13:42:f1:c3:b4:d9:
                    09:1f:be:9d:93:d8:6f:75:7c:34:13:7c:c3:1e:f0:
                    97:7b:84:d6:75:3c:1d:30:40:24:5b:02:9c:dc:0d:
                    6b:c2:f1:a8:5e:34:5f:4a:04:6b:f4:dc:10:bd:10:
                    6a:88:0c:80:b0:3f:15:88:61:ed:b8:df:2e:1b:24:
                    fa:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:6C:14:13:AF:AC:34:31:13:08:D4:84:32:82:D4:E5:0E:A5:68:95
            X509v3 Authority Key Identifier:
                keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/lmwUE6-sNDETCNSEMoLU5Q6laJU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.246.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:1b:77:35:39:3e:8a:6d:98:f3:70:51:8b:96:35:1b:1f:de:
         d2:ad:92:b4:1a:6b:ef:6d:07:63:f2:74:2a:f9:67:c6:23:5c:
         b7:30:63:0f:66:1e:03:75:4b:0d:21:78:f2:ee:8d:ff:ef:c1:
         90:0f:97:02:61:22:01:bb:d4:be:dd:d2:fd:95:04:9b:a3:70:
         e4:85:a0:c2:41:0e:07:89:35:bf:16:58:3c:7e:a4:2c:c8:52:
         b6:3f:29:6e:da:ed:89:cf:59:ff:f8:ae:f5:9e:7f:a5:d9:94:
         59:0d:d9:22:04:48:f0:1f:63:aa:64:2b:eb:b0:bc:47:8a:6f:
         b5:3b:8e:19:67:df:40:e7:28:3b:05:dc:42:26:d0:92:94:82:
         67:86:64:74:a6:ca:23:dd:7c:87:7c:fa:80:33:cc:e6:99:2a:
         a1:66:18:21:3b:f7:f1:d0:ce:8c:2f:d1:ce:1e:6a:03:92:01:
         c4:1c:4a:f6:0f:7c:43:e4:83:a9:4f:bd:be:af:35:6d:d2:63:
         e7:dd:79:ec:1c:e4:61:ea:f0:c4:fe:a9:73:c4:02:17:a8:f2:
         b3:d6:41:82:d7:de:c4:f9:0f:2a:6f:1f:1e:3b:d5:5f:cf:c9:
         49:97:91:7d:a0:a8:f5:8a:cb:89:3a:83:a2:9b:15:af:b7:d1:
         ed:93:11:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:02:19 2026 by rpki-client