This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/lPjhCpLeDikKgymVS-eWXgwxAp8.roa
File:                     lPjhCpLeDikKgymVS-eWXgwxAp8.roa (raw, json)
Hash identifier:          MyuMAm1eed/9jmE8+GgWWmDVqy3fbOF+fkCjwKELi/0=
Subject key identifier:   94:F8:E1:0A:92:DE:0E:29:0A:83:29:95:4B:E7:96:5E:0C:31:02:9F
Certificate issuer:       /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial:       019B7F1443C85B25E71528D117B6573CE7BB
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/lPjhCpLeDikKgymVS-eWXgwxAp8.roa
Signing time:             Fri 02 Jan 2026 14:19:53 +0000
ROA not before:           Fri 02 Jan 2026 14:19:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62213
IP address blocks:        92.55.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:43:c8:5b:25:e7:15:28:d1:17:b6:57:3c:e7:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
        Validity
            Not Before: Jan  2 14:19:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=94f8e10a92de0e290a8329954be7965e0c31029f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b3:3f:23:de:6b:3a:35:0e:ad:91:40:45:c4:
                    5a:53:ed:15:32:fd:7c:bc:26:c3:3d:26:5b:c0:9a:
                    60:8b:5e:93:2a:27:31:8a:7c:96:79:0c:f8:6e:ed:
                    c5:3f:88:c4:39:3f:3c:4f:a4:b0:5f:ed:1c:12:ec:
                    96:44:4f:e7:4e:57:51:83:90:4c:65:72:d8:64:ae:
                    f9:0b:33:fe:25:61:c3:1f:f6:57:d2:bc:83:d5:6b:
                    0a:14:68:62:fb:2a:a3:a4:ca:d8:be:85:7a:e2:de:
                    a9:25:83:79:43:8f:f4:85:bc:8a:a1:5e:77:3f:77:
                    73:78:81:24:d5:2b:97:b9:00:b4:18:e9:79:fb:91:
                    80:a9:80:09:e5:11:17:fe:5e:c2:6b:d5:01:b7:a3:
                    f1:4e:20:dc:d8:d1:e4:ff:5e:b7:85:5e:b0:88:31:
                    7d:35:07:05:26:14:ab:8f:04:13:d4:09:28:23:5c:
                    be:39:8f:91:80:75:8c:ed:42:58:76:af:e8:bb:df:
                    06:00:31:9b:29:07:7a:32:eb:d7:cb:61:78:f3:10:
                    76:be:31:b4:7b:a1:da:41:cd:0f:d2:c7:6f:31:8e:
                    75:1d:88:e8:f2:ea:3c:02:83:c7:09:c7:35:89:fe:
                    77:b4:af:5e:ff:8f:83:68:9d:e5:5d:02:65:83:04:
                    82:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F8:E1:0A:92:DE:0E:29:0A:83:29:95:4B:E7:96:5E:0C:31:02:9F
            X509v3 Authority Key Identifier:
                keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/lPjhCpLeDikKgymVS-eWXgwxAp8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.55.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:a3:3a:86:75:83:a6:d6:a6:7d:d4:19:a5:1c:51:4a:32:51:
         60:dc:6f:51:27:af:69:07:2c:c2:10:34:12:ce:e1:d3:b4:2b:
         a0:66:d7:c2:f5:43:87:e7:4e:1c:2f:4a:75:61:a7:6e:08:13:
         3d:36:57:97:f9:29:17:ae:a3:9d:84:12:21:d9:7c:db:51:32:
         8a:83:20:44:bf:c2:a4:fb:cd:a4:e7:a9:b5:3a:45:f7:4b:49:
         bc:d3:9d:24:a2:af:21:5f:d4:dc:51:41:07:e3:24:76:b6:66:
         8e:2d:f1:78:9f:1a:6a:78:22:bc:d7:fc:5f:f2:f0:a8:47:71:
         ba:f3:54:63:3a:be:30:34:05:9f:29:19:eb:de:3e:73:6a:39:
         da:96:8f:f8:d2:39:20:01:29:e5:a9:d3:8d:34:a2:6b:3e:da:
         2a:4c:ec:38:06:94:f0:af:7c:67:0c:9a:f6:5e:ef:d0:04:33:
         de:78:a9:84:1d:9f:07:cd:64:cb:ae:04:ef:d4:fa:66:dd:a0:
         44:f1:3f:84:c3:bc:35:fc:2a:89:76:73:f3:90:77:8d:d5:b7:
         0e:b5:42:ad:01:49:c4:cf:28:8a:7e:6e:c5:7b:b4:9e:39:a4:
         ea:5a:c3:34:89:2f:16:bd:5b:bc:ce:b3:e0:69:cb:e2:89:1b:
         1b:59:52:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/FEPIWyXnFSjRF7ZXPOe7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx
YjUwMjEwHhcNMjYwMTAyMTQxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGY4ZTEwYTkyZGUwZTI5MGE4MzI5OTU0YmU3OTY1ZTBjMzEwMjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybM/I95rOjUOrZFARcRaU+0VMv18
vCbDPSZbwJpgi16TKicxinyWeQz4bu3FP4jEOT88T6SwX+0cEuyWRE/nTldRg5BM
ZXLYZK75CzP+JWHDH/ZX0ryD1WsKFGhi+yqjpMrYvoV64t6pJYN5Q4/0hbyKoV53
P3dzeIEk1SuXuQC0GOl5+5GAqYAJ5REX/l7Ca9UBt6PxTiDc2NHk/163hV6wiDF9
NQcFJhSrjwQT1AkoI1y+OY+RgHWM7UJYdq/ou98GADGbKQd6MuvXy2F48xB2vjG0
e6HaQc0P0sdvMY51HYjo8uo8AoPHCcc1if53tK9e/4+DaJ3lXQJlgwSC2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJT44QqS3g4pCoMplUvnll4MMQKfMB8GA1UdIwQY
MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt
MTc2OTNlN2VhNjdhLzEvbFBqaENwTGVEaWtLZ3ltVlMtZVdYZ3d4QXA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh
LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXDfOMA0G
CSqGSIb3DQEBCwUAA4IBAQDLozqGdYOm1qZ91BmlHFFKMlFg3G9RJ69pByzCEDQS
zuHTtCugZtfC9UOH504cL0p1YaduCBM9NleX+SkXrqOdhBIh2XzbUTKKgyBEv8Kk
+82k56m1OkX3S0m8050koq8hX9TcUUEH4yR2tmaOLfF4nxpqeCK81/xf8vCoR3G6
81RjOr4wNAWfKRnr3j5zajnalo/40jkgASnlqdONNKJrPtoqTOw4BpTwr3xnDJr2
Xu/QBDPeeKmEHZ8HzWTLrgTv1Ppm3aBE8T+Ew7w1/CqJdnPzkHeN1bcOtUKtAUnE
zyiKfm7Fe7SeOaTqWsM0iS8WvVu8zrPgacviiRsbWVJA
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:49 2026 by rpki-client