This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/LfVnxAgXtVEvJgCus51DV85uql0.roa
File:                     LfVnxAgXtVEvJgCus51DV85uql0.roa (raw, json)
Hash identifier:          ClR1z6z7TPastgWI2d+GsWfoZzv7l12W4bHdbjqvyKk=
Subject key identifier:   2D:F5:67:C4:08:17:B5:51:2F:26:00:AE:B3:9D:43:57:CE:6E:AA:5D
Certificate issuer:       /CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Certificate serial:       019B79EBB35C1C4BB1FEF4FB1A8B7EAC0992
Authority key identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/LfVnxAgXtVEvJgCus51DV85uql0.roa
Signing time:             Thu 01 Jan 2026 14:17:28 +0000
ROA not before:           Thu 01 Jan 2026 14:17:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206509
IP address blocks:        194.207.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:eb:b3:5c:1c:4b:b1:fe:f4:fb:1a:8b:7e:ac:09:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
        Validity
            Not Before: Jan  1 14:17:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2df567c40817b5512f2600aeb39d4357ce6eaa5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8f:06:b1:e1:72:fb:e3:9c:f4:e0:66:6a:64:
                    a2:a7:b3:43:ee:83:59:46:bd:de:e0:57:4e:af:6f:
                    b3:83:e8:8f:4f:91:8f:a2:e2:d2:dc:1a:de:b4:38:
                    e1:a8:da:0e:cb:5e:1e:6d:e2:20:71:ca:5c:e2:ef:
                    ff:fb:98:cd:42:f0:d9:4c:a0:56:a5:89:7f:4a:34:
                    3a:60:87:22:7d:00:2f:cd:b7:8d:49:17:40:b0:6f:
                    2c:e7:83:98:81:4b:2a:4d:02:08:11:01:60:c1:75:
                    8c:be:34:73:67:16:c8:85:0a:72:9d:7c:a8:97:80:
                    2e:79:e0:eb:78:5d:e0:09:3d:fa:02:55:d3:65:42:
                    70:fb:e0:59:6d:37:73:da:4d:98:9f:2c:6d:ef:d7:
                    12:8e:f2:54:9e:5e:37:54:b5:57:16:2c:5b:64:9d:
                    a6:e6:bf:ee:eb:48:65:d5:e5:41:fb:e8:fe:f4:fb:
                    89:a6:3c:5c:52:0e:b2:7e:f7:de:b2:db:7b:8e:85:
                    1f:a0:d8:8b:39:e1:f5:60:e0:d0:99:51:65:2b:7b:
                    a8:2e:ca:6a:73:89:72:2a:d6:91:de:7e:fa:31:a8:
                    d7:3f:59:d7:36:2f:c4:ae:e7:6c:c1:66:9c:84:18:
                    a0:0a:ad:5e:cf:83:13:01:d1:c1:33:eb:d2:f0:15:
                    02:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F5:67:C4:08:17:B5:51:2F:26:00:AE:B3:9D:43:57:CE:6E:AA:5D
            X509v3 Authority Key Identifier:
                keyid:7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/LfVnxAgXtVEvJgCus51DV85uql0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.207.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         19:44:38:bd:d3:04:47:1d:42:92:57:d1:af:c0:86:97:f2:39:
         8b:eb:21:3a:39:1e:5a:da:51:3c:74:9b:1a:e8:8b:81:32:b5:
         c5:66:97:3e:8b:2e:f5:35:05:51:26:a9:48:21:42:39:30:b6:
         81:58:92:e0:a2:36:91:dd:93:de:12:2a:dc:0c:a1:4a:ab:6e:
         a1:28:40:4c:dc:1c:65:2e:ca:c6:46:71:fa:c6:a5:56:f0:93:
         f4:11:7a:c7:bc:d7:ed:25:a2:88:2a:ae:9a:e1:49:df:1b:16:
         54:4a:62:e9:74:f2:46:b2:c9:99:28:5c:12:b5:de:c8:4f:25:
         f0:5c:93:4b:e3:d5:a6:a7:da:bc:50:9b:f9:a4:5a:e6:73:76:
         2d:0c:08:9b:78:ff:d2:cf:cf:86:87:ba:64:b8:65:cc:0d:79:
         2f:1c:8e:4b:a1:19:1b:60:ea:f4:e7:71:00:1f:2b:f7:b3:99:
         19:1a:5a:d7:24:4e:7a:3b:5e:81:9a:28:da:b6:e5:da:dd:af:
         df:57:d2:12:ff:67:6a:7b:ff:de:05:75:b9:33:a7:ed:fe:80:
         22:12:22:7a:9f:59:94:ad:3f:7c:8c:90:47:99:e6:b9:4d:09:
         3d:ef:ed:e4:53:bc:eb:c0:15:98:b5:8b:bf:d7:0b:e0:ab:fb:
         48:90:16:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt567NcHEux/vT7Got+rAmSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMTVjZmVkYjlhZWFiNDJiZjhhYzViMjRjYjFhZWVjMmE2
NjA5NDMwHhcNMjYwMTAxMTQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGY1NjdjNDA4MTdiNTUxMmYyNjAwYWViMzlkNDM1N2NlNmVhYTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo48GseFy++Oc9OBmamSip7ND7oNZ
Rr3e4FdOr2+zg+iPT5GPouLS3BretDjhqNoOy14ebeIgccpc4u//+5jNQvDZTKBW
pYl/SjQ6YIcifQAvzbeNSRdAsG8s54OYgUsqTQIIEQFgwXWMvjRzZxbIhQpynXyo
l4AueeDreF3gCT36AlXTZUJw++BZbTdz2k2Ynyxt79cSjvJUnl43VLVXFixbZJ2m
5r/u60hl1eVB++j+9PuJpjxcUg6yfvfestt7joUfoNiLOeH1YODQmVFlK3uoLspq
c4lyKtaR3n76MajXP1nXNi/ErudswWachBigCq1ez4MTAdHBM+vS8BUCCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC31Z8QIF7VRLyYArrOdQ1fObqpdMB8GA1UdIwQY
MBaAFH0Vz+25rqtCv4rFskyxruwqZglDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlJYUDdibXVxMEtfaXNXeVRMR3U3Q3BtQ1VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hZDZiNzMtMGU4Yy00YTQ1LWI2YmIt
NDIyODFmNTUxOGE5LzEvTGZWbnhBZ1h0VkV2SmdDdXM1MURWODV1cWwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hZDZiNzMtMGU4Yy00YTQ1LWI2YmItNDIyODFmNTUxOGE5
LzEvZlJYUDdibXVxMEtfaXNXeVRMR3U3Q3BtQ1VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFws8AMA0G
CSqGSIb3DQEBCwUAA4IBAQAZRDi90wRHHUKSV9GvwIaX8jmL6yE6OR5a2lE8dJsa
6IuBMrXFZpc+iy71NQVRJqlIIUI5MLaBWJLgojaR3ZPeEircDKFKq26hKEBM3Bxl
LsrGRnH6xqVW8JP0EXrHvNftJaKIKq6a4UnfGxZUSmLpdPJGssmZKFwStd7ITyXw
XJNL49Wmp9q8UJv5pFrmc3YtDAibeP/Sz8+Gh7pkuGXMDXkvHI5LoRkbYOr053EA
Hyv3s5kZGlrXJE56O16BmijatuXa3a/fV9IS/2dqe//eBXW5M6ft/oAiEiJ6n1mU
rT98jJBHmea5TQk97+3kU7zrwBWYtYu/1wvgq/tIkBbe
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:16:43 2026 by rpki-client