This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/LinQK8fdUd0acFjufsgbsosu8aw.roa
File:                     LinQK8fdUd0acFjufsgbsosu8aw.roa (raw, json)
Hash identifier:          hdbmVMkuGYn9OnPhUkRUmIQuYMEx93e049UxiL3ibkE=
Subject key identifier:   2E:29:D0:2B:C7:DD:51:DD:1A:70:58:EE:7E:C8:1B:B2:8B:2E:F1:AC
Certificate issuer:       /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial:       019AED440618356159B3110575B9ACBDB792
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/LinQK8fdUd0acFjufsgbsosu8aw.roa
Signing time:             Fri 05 Dec 2025 06:47:29 +0000
ROA not before:           Fri 05 Dec 2025 06:47:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     35613
IP address blocks:        176.74.128.0/19 maxlen: 19
                          193.200.244.0/24 maxlen: 24
                          193.200.246.0/24 maxlen: 24
                          193.200.251.0/24 maxlen: 24
                          193.200.252.0/24 maxlen: 24
                          2a00:9c80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ed:44:06:18:35:61:59:b3:11:05:75:b9:ac:bd:b7:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
        Validity
            Not Before: Dec  5 06:47:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2e29d02bc7dd51dd1a7058ee7ec81bb28b2ef1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3a:1d:1f:b5:38:22:b3:1e:cc:41:7c:cb:3b:
                    4c:b8:cb:4e:88:25:74:9e:7e:ae:f7:67:53:7a:0e:
                    4e:86:bd:4d:3b:53:f1:93:99:ef:db:b6:ff:94:b4:
                    8a:5a:a1:f1:e2:77:c8:7c:d1:d2:9f:f6:1d:7c:7f:
                    a7:3c:2c:a7:38:8b:66:e2:c3:53:76:a4:6c:af:71:
                    74:bb:fb:a9:4f:b0:ca:cf:54:5e:af:6c:e2:e1:35:
                    af:93:a7:30:d5:b5:20:67:46:d6:a7:c6:41:0c:f8:
                    c4:1c:3a:a2:c3:2f:72:83:88:90:9d:eb:c6:8b:7e:
                    96:fb:22:48:02:37:6e:5b:7c:3e:af:1c:13:38:cd:
                    fb:d4:9c:fc:17:e0:55:73:dc:58:69:e9:35:ba:ec:
                    8f:da:ab:6f:cc:8d:62:09:d5:35:eb:a0:5c:59:6b:
                    50:b4:60:49:f0:93:15:66:ed:84:81:3b:6d:9e:00:
                    d2:3b:26:14:b3:61:27:53:30:8e:b0:21:83:91:f7:
                    d6:a6:ac:e4:88:83:43:62:6b:ce:f6:9e:a1:db:3b:
                    c0:5c:6f:49:fb:7d:46:ea:be:d5:33:35:92:27:81:
                    9e:63:99:52:0b:f3:ba:c7:e7:aa:c9:5e:57:57:a8:
                    c6:e2:c5:01:16:97:23:85:81:8b:bd:28:31:bb:46:
                    54:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:29:D0:2B:C7:DD:51:DD:1A:70:58:EE:7E:C8:1B:B2:8B:2E:F1:AC
            X509v3 Authority Key Identifier:
                keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/LinQK8fdUd0acFjufsgbsosu8aw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.74.128.0/19
                  193.200.244.0/24
                  193.200.246.0/24
                  193.200.251.0-193.200.252.255
                IPv6:
                  2a00:9c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:f0:19:19:bd:1d:28:6c:c9:1f:58:63:a9:02:16:94:5e:e0:
         b7:cb:cc:27:75:1e:e8:29:5a:1c:d8:78:99:dc:29:fe:55:c4:
         92:50:a3:12:54:8d:6d:2e:90:26:6e:46:24:2f:bf:c1:25:fd:
         92:ae:a8:48:b1:97:87:b6:4f:81:3c:00:b7:fb:b6:a1:3f:81:
         e1:1f:aa:3d:a4:70:65:3a:36:79:60:df:a9:4e:0c:16:9b:6b:
         aa:01:45:2b:b5:52:04:03:10:f1:54:26:0b:28:81:99:5e:13:
         33:10:a5:71:c7:30:4c:76:13:ca:ff:de:6a:e1:8c:27:3f:16:
         95:d1:90:ad:31:02:90:69:89:6d:5a:32:f1:a0:ea:5d:5c:fc:
         cc:d4:1e:aa:78:96:ca:aa:d0:79:e0:ac:38:6b:c8:8e:6f:c9:
         22:b2:a6:e8:71:3d:c5:f0:66:54:40:f0:be:25:b9:b2:df:bf:
         14:75:e6:68:3c:0c:d4:b1:1a:61:3c:af:a5:91:13:02:79:a4:
         3a:a5:ba:31:d4:91:3e:47:da:19:70:94:55:30:d0:57:53:44:
         b8:6f:7d:57:6a:5f:a1:f3:62:1a:36:75:6a:bb:ad:05:94:c2:
         d9:cb:a0:22:01:86:9f:29:26:47:6a:27:3e:39:02:3b:79:b1:
         e5:3d:91:28
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAZrtRAYYNWFZsxEFdbmsvbeSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTE1NDQ0MWRmOTYyM2VlYjVhMTk2MTM4ZDIxYmVmNTgy
NGI0NDEwHhcNMjUxMjA1MDY0NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTI5ZDAyYmM3ZGQ1MWRkMWE3MDU4ZWU3ZWM4MWJiMjhiMmVmMWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTodH7U4IrMezEF8yztMuMtOiCV0
nn6u92dTeg5Ohr1NO1Pxk5nv27b/lLSKWqHx4nfIfNHSn/YdfH+nPCynOItm4sNT
dqRsr3F0u/upT7DKz1Rer2zi4TWvk6cw1bUgZ0bWp8ZBDPjEHDqiwy9yg4iQnevG
i36W+yJIAjduW3w+rxwTOM371Jz8F+BVc9xYaek1uuyP2qtvzI1iCdU166BcWWtQ
tGBJ8JMVZu2EgTttngDSOyYUs2EnUzCOsCGDkffWpqzkiINDYmvO9p6h2zvAXG9J
+31G6r7VMzWSJ4GeY5lSC/O6x+eqyV5XV6jG4sUBFpcjhYGLvSgxu0ZU7wIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFC4p0CvH3VHdGnBY7n7IG7KLLvGsMB8GA1UdIwQY
MBaAFKChVEQd+WI+61oZYTjSG+9YJLRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81YjNkNmQtZTZmMS00N2FkLWI1MmIt
OWQ5NDM2NzFhOGEzLzEvTGluUUs4ZmRVZDBhY0ZqdWZzZ2Jzb3N1OGF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81YjNkNmQtZTZmMS00N2FkLWI1MmItOWQ5NDM2NzFhOGEz
LzEvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQFsEqAAwQA
wcj0AwQAwcj2MAwDBADByPsDBADByPwwDQQCAAIwBwMFACoAnIAwDQYJKoZIhvcN
AQELBQADggEBAAXwGRm9HShsyR9YY6kCFpRe4LfLzCd1HugpWhzYeJncKf5VxJJQ
oxJUjW0ukCZuRiQvv8El/ZKuqEixl4e2T4E8ALf7tqE/geEfqj2kcGU6Nnlg36lO
DBaba6oBRSu1UgQDEPFUJgsogZleEzMQpXHHMEx2E8r/3mrhjCc/FpXRkK0xApBp
iW1aMvGg6l1c/MzUHqp4lsqq0HngrDhryI5vySKypuhxPcXwZlRA8L4lubLfvxR1
5mg8DNSxGmE8r6WREwJ5pDqlujHUkT5H2hlwlFUw0FdTRLhvfVdqX6HzYho2dWq7
rQWUwtnLoCIBhp8pJkdqJz45Ajt5seU9kSg=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:39:06 2025 by rpki-client