This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/lrcggll5IwEWJaXAEarEFjeln_4.roa
File:                     lrcggll5IwEWJaXAEarEFjeln_4.roa (raw, json)
Hash identifier:          A3enJWPIF9/BoTUOABHy2zjKfwPohwCjBujb09CAGVI=
Subject key identifier:   96:B7:20:82:59:79:23:01:16:25:A5:C0:11:AA:C4:16:37:A5:9F:FE
Certificate issuer:       /CN=79d10f728d6499a749ae5902e8fa883f1add4517
Certificate serial:       019B7E3800865B821C3925C1C16A6E7329EC
Authority key identifier: 79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/lrcggll5IwEWJaXAEarEFjeln_4.roa
Signing time:             Fri 02 Jan 2026 10:19:17 +0000
ROA not before:           Fri 02 Jan 2026 10:19:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        185.236.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 01:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:00:86:5b:82:1c:39:25:c1:c1:6a:6e:73:29:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d10f728d6499a749ae5902e8fa883f1add4517
        Validity
            Not Before: Jan  2 10:19:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=96b72082597923011625a5c011aac41637a59ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a5:fc:95:bb:74:4b:a6:10:3e:fd:76:11:1f:
                    d9:47:cc:39:23:fa:8e:37:59:08:b7:e7:1e:a0:7f:
                    09:a3:a1:49:3a:62:84:95:f5:60:c9:8a:0c:34:6b:
                    13:e0:ce:c5:70:ea:15:b2:e6:6f:c4:5d:cf:93:fc:
                    38:b3:26:15:93:fa:66:54:cf:a1:51:32:59:48:53:
                    93:7c:ad:f2:26:18:7d:1c:da:69:61:03:2b:c6:b8:
                    98:f2:fc:a4:cb:bd:c9:94:4f:37:ed:24:af:3c:b4:
                    1b:03:f5:9a:14:27:55:3d:ce:54:e0:10:75:41:4a:
                    85:3c:41:62:d7:82:98:2b:1c:7e:a6:73:bb:5f:3f:
                    a9:00:26:43:de:dd:06:20:9e:b3:3f:16:06:56:61:
                    87:37:31:d8:b7:f0:5c:41:7a:17:35:38:2f:0b:08:
                    90:94:8a:d6:7f:be:c6:21:0e:29:2f:a6:5a:68:ec:
                    04:28:ca:6b:1b:63:35:a4:5b:7a:86:6f:b8:b2:77:
                    74:a8:81:bf:38:4c:1a:08:60:39:a4:30:73:04:be:
                    e7:23:c2:cf:b5:81:28:4b:54:70:05:98:05:9e:9e:
                    36:e3:a4:72:5b:d4:5b:e9:54:6a:8e:c1:f1:df:a3:
                    00:03:10:da:a9:f9:86:78:08:65:aa:af:cb:cc:ff:
                    55:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B7:20:82:59:79:23:01:16:25:A5:C0:11:AA:C4:16:37:A5:9F:FE
            X509v3 Authority Key Identifier:
                keyid:79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/lrcggll5IwEWJaXAEarEFjeln_4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.236.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:c2:93:38:c0:c7:86:04:e0:f3:0f:f5:f7:77:85:4b:f8:f4:
         33:01:2e:30:f7:9e:88:29:d6:fb:f2:10:c3:7a:84:99:8c:ce:
         e0:4a:64:78:c1:20:25:67:23:c1:27:91:35:fa:29:f9:e1:49:
         96:ec:a5:e0:1d:fc:81:50:18:63:ea:79:bf:ab:d1:ad:8e:ad:
         52:ad:bf:2d:ef:10:d1:5d:3e:67:a6:98:d8:91:83:cf:f3:15:
         db:ff:3c:ec:7b:db:dc:51:56:27:8e:59:76:c5:1a:9a:30:a2:
         49:df:51:cf:03:05:6c:da:cb:07:e1:98:b4:fc:31:50:48:bd:
         cc:d2:69:b2:34:33:4e:b2:c0:21:2b:bd:5b:86:0a:fb:e2:52:
         11:48:df:d5:8b:c3:31:f8:25:5d:db:6a:af:18:c4:d1:ae:29:
         23:b9:70:1c:27:1d:05:9b:d1:25:7d:0c:fa:e8:f9:ed:02:90:
         b1:12:b5:08:68:49:0f:b3:15:83:2a:77:5f:dc:a6:47:59:c3:
         73:db:c7:6f:bc:91:fa:55:ab:fe:09:3c:8a:a7:3b:3b:fb:5d:
         f7:bd:c0:a7:bc:e8:b5:da:a1:43:68:f0:3a:fc:7b:b0:cb:da:
         6d:df:28:61:2b:38:bb:24:37:5c:99:0a:bf:26:f6:27:31:b1:
         aa:07:27:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+OACGW4IcOSXBwWpucynsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZDEwZjcyOGQ2NDk5YTc0OWFlNTkwMmU4ZmE4ODNmMWFk
ZDQ1MTcwHhcNMjYwMTAyMTAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmI3MjA4MjU5NzkyMzAxMTYyNWE1YzAxMWFhYzQxNjM3YTU5ZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6X8lbt0S6YQPv12ER/ZR8w5I/qO
N1kIt+ceoH8Jo6FJOmKElfVgyYoMNGsT4M7FcOoVsuZvxF3Pk/w4syYVk/pmVM+h
UTJZSFOTfK3yJhh9HNppYQMrxriY8vyky73JlE837SSvPLQbA/WaFCdVPc5U4BB1
QUqFPEFi14KYKxx+pnO7Xz+pACZD3t0GIJ6zPxYGVmGHNzHYt/BcQXoXNTgvCwiQ
lIrWf77GIQ4pL6ZaaOwEKMprG2M1pFt6hm+4snd0qIG/OEwaCGA5pDBzBL7nI8LP
tYEoS1RwBZgFnp4246RyW9Rb6VRqjsHx36MAAxDaqfmGeAhlqq/LzP9VGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJa3IIJZeSMBFiWlwBGqxBY3pZ/+MB8GA1UdIwQY
MBaAFHnRD3KNZJmnSa5ZAuj6iD8a3UUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWRFUGNvMWttYWRKcmxrQzZQcUlQeHJkUlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wYjI2NDEtYmZiNS00ZTc1LWEzZTgt
YjlmMDVlMzE1MjNhLzEvbHJjZ2dsbDVJd0VXSmFYQUVhckVGamVsbl80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wYjI2NDEtYmZiNS00ZTc1LWEzZTgtYjlmMDVlMzE1MjNh
LzEvZWRFUGNvMWttYWRKcmxrQzZQcUlQeHJkUlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueyOMA0G
CSqGSIb3DQEBCwUAA4IBAQAewpM4wMeGBODzD/X3d4VL+PQzAS4w956IKdb78hDD
eoSZjM7gSmR4wSAlZyPBJ5E1+in54UmW7KXgHfyBUBhj6nm/q9Gtjq1Srb8t7xDR
XT5nppjYkYPP8xXb/zzse9vcUVYnjll2xRqaMKJJ31HPAwVs2ssH4Zi0/DFQSL3M
0mmyNDNOssAhK71bhgr74lIRSN/Vi8Mx+CVd22qvGMTRrikjuXAcJx0Fm9ElfQz6
6PntApCxErUIaEkPsxWDKndf3KZHWcNz28dvvJH6Vav+CTyKpzs7+133vcCnvOi1
2qFDaPA6/Huwy9pt3yhhKzi7JDdcmQq/JvYnMbGqByeB
-----END CERTIFICATE-----
Generated at Sat Jan 17 06:45:56 2026 by rpki-client