This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/LjwAQJPByycSjk8IOHktbjN3iwc.roa
File:                     LjwAQJPByycSjk8IOHktbjN3iwc.roa (raw, json)
Hash identifier:          O1nhSejB7AY5EyXzCT7+kepCsudYpo9VnMOajWDahD0=
Subject key identifier:   2E:3C:00:40:93:C1:CB:27:12:8E:4F:08:38:79:2D:6E:33:77:8B:07
Certificate issuer:       /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial:       019A54196B96A2C86C09E7E4A0AC950F38A0
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/LjwAQJPByycSjk8IOHktbjN3iwc.roa
Signing time:             Wed 05 Nov 2025 12:59:03 +0000
ROA not before:           Wed 05 Nov 2025 12:59:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     208555
IP address blocks:        62.220.126.0/23 maxlen: 24
                          81.12.24.0/22 maxlen: 24
                          81.12.30.0/23 maxlen: 24
                          87.107.6.0/23 maxlen: 24
                          87.107.8.0/23 maxlen: 24
                          87.107.108.0/23 maxlen: 24
                          87.107.110.0/23 maxlen: 24
                          87.107.110.0/24 maxlen: 24
                          87.107.111.0/24 maxlen: 24
                          87.107.144.0/24 maxlen: 24
                          87.107.152.0/23 maxlen: 24
                          87.107.166.0/23 maxlen: 24
                          87.107.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:54:19:6b:96:a2:c8:6c:09:e7:e4:a0:ac:95:0f:38:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
        Validity
            Not Before: Nov  5 12:59:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2e3c004093c1cb27128e4f0838792d6e33778b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:97:a7:4f:06:8c:9b:90:10:e1:e3:a8:82:10:
                    aa:0f:1a:62:7b:51:73:6b:e4:35:ff:87:0d:a6:48:
                    79:0a:3b:2b:68:a4:36:af:8d:56:0a:c5:6c:92:e1:
                    cc:da:cc:7e:44:2d:e4:e6:60:f6:8e:e4:82:5d:b8:
                    4e:5b:5c:3f:5d:66:25:60:aa:72:ed:f1:2b:13:4f:
                    50:34:40:14:1f:55:51:b9:5c:ab:88:78:3c:fd:e4:
                    7d:0e:d7:4d:91:8c:5d:86:1f:67:ea:9d:13:72:14:
                    46:3c:39:18:a7:06:22:93:b8:85:89:de:e8:80:a8:
                    17:25:a9:be:70:94:69:76:52:fc:0f:2a:18:43:86:
                    bc:28:e0:81:c2:a4:8d:77:9e:d2:7c:9d:b7:22:d8:
                    a3:d1:21:c1:e6:18:26:46:84:fd:15:02:43:74:b4:
                    b1:9e:8a:eb:c2:c7:e0:4e:61:24:5f:66:58:d5:48:
                    43:26:50:83:0c:05:f7:97:5e:c5:10:80:8b:33:39:
                    e4:bb:4d:9a:b7:3f:42:b3:dc:c5:c1:62:dd:d1:06:
                    ce:bc:17:5f:c9:67:63:d0:19:e3:ac:e7:aa:a7:5a:
                    20:a1:52:ea:f7:a3:89:c4:a2:32:70:bf:81:bb:96:
                    4e:af:9f:03:dc:33:60:0d:7f:e4:39:1b:b4:db:15:
                    a4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3C:00:40:93:C1:CB:27:12:8E:4F:08:38:79:2D:6E:33:77:8B:07
            X509v3 Authority Key Identifier:
                keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/LjwAQJPByycSjk8IOHktbjN3iwc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.220.126.0/23
                  81.12.24.0/22
                  81.12.30.0/23
                  87.107.6.0-87.107.9.255
                  87.107.108.0/22
                  87.107.144.0/24
                  87.107.152.0/23
                  87.107.166.0/23
                  87.107.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:0f:bb:9f:44:61:0b:7b:e5:1a:fd:a9:44:c3:3b:18:56:f4:
         88:1e:c5:46:88:4b:07:bf:0d:08:0e:a1:79:b2:99:c0:bd:bf:
         f4:94:0b:02:d8:b9:7d:a1:26:49:08:20:01:7a:61:63:c8:15:
         47:4e:4e:07:22:0a:23:b9:d8:ee:e1:4d:81:7e:90:75:6b:31:
         1e:e2:40:42:01:7e:15:46:82:9d:80:c8:ea:5c:48:fc:2d:aa:
         0d:8a:99:e7:b8:da:0d:5c:00:5d:03:5c:70:b6:95:97:2b:2e:
         50:20:c5:95:fc:51:b6:c5:47:2f:ad:86:02:54:6a:bd:8c:33:
         88:5d:84:44:57:a9:6c:bd:d8:67:4c:89:a1:26:1c:b0:04:4a:
         5b:7c:38:7e:c6:b3:42:5d:44:6a:d9:01:87:fa:3d:4d:a7:af:
         2c:5f:d9:eb:e4:50:46:8c:79:b2:a9:50:2e:8a:35:81:14:0d:
         69:b2:64:d1:d7:15:81:00:af:b3:9d:fb:bc:f1:19:7b:78:de:
         f7:31:66:98:2b:f4:67:7c:e0:64:ed:57:e0:ac:2c:81:77:8e:
         94:60:4a:58:da:61:c5:c7:8c:35:9b:24:3f:f7:82:4a:6b:b8:
         15:d0:ad:94:00:af:c8:ba:9a:47:e4:c3:cd:9e:c6:6d:52:d2:
         ed:89:9a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:19:52 2025 by rpki-client