This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/LKFdqAxekSyGKQc0Md8_7Xelo-E.roa
File:                     LKFdqAxekSyGKQc0Md8_7Xelo-E.roa (raw, json)
Hash identifier:          hzROPb2XKPcBYg2mXSPUmlxSomnvcQdFm4oNZy6YiVs=
Subject key identifier:   2C:A1:5D:A8:0C:5E:91:2C:86:29:07:34:31:DF:3F:ED:77:A5:A3:E1
Certificate issuer:       /CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Certificate serial:       019B7AC7A6DC0AB33A772A77F3BD7BEF6518
Authority key identifier: 99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/LKFdqAxekSyGKQc0Md8_7Xelo-E.roa
Signing time:             Thu 01 Jan 2026 18:17:43 +0000
ROA not before:           Thu 01 Jan 2026 18:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50572
IP address blocks:        91.223.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:a6:dc:0a:b3:3a:77:2a:77:f3:bd:7b:ef:65:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
        Validity
            Not Before: Jan  1 18:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2ca15da80c5e912c8629073431df3fed77a5a3e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:8f:af:6a:60:9e:63:04:0c:77:3d:9d:d3:
                    98:98:cf:d5:65:e1:75:d0:4e:3e:12:d9:e4:42:3a:
                    f5:60:99:6f:27:62:df:78:2e:84:2a:ae:de:09:6b:
                    81:0f:40:0a:d9:cf:f8:22:d2:5d:b5:c1:cb:a5:ae:
                    ef:ba:43:c2:16:c0:71:a6:3e:8a:de:b0:22:d6:e5:
                    af:ae:ad:04:f9:cc:5f:6f:13:04:7a:c6:01:94:16:
                    f9:8a:24:da:0f:25:43:c2:ce:13:02:45:f8:b2:3a:
                    20:34:8b:1c:12:14:43:c6:6d:be:db:c5:ee:a3:91:
                    7a:f5:8b:a5:2d:27:c1:5b:e8:64:fb:78:8c:a2:d2:
                    1a:2c:18:d5:35:ca:3a:6e:37:2e:a3:03:4f:ac:ff:
                    8f:72:a8:42:0d:43:68:88:da:e5:d5:bf:b7:8d:c0:
                    ad:35:4f:72:19:ac:c6:c0:b5:f7:7e:5d:a1:44:44:
                    aa:82:59:5b:d9:f5:6b:fc:77:47:ae:8d:7a:2e:cd:
                    eb:f3:70:11:54:e2:c6:68:2c:98:c9:dd:a1:5f:dc:
                    d9:d7:08:bf:a5:43:66:b7:74:d6:6d:21:b8:7d:20:
                    9b:6d:f6:0d:37:6a:d2:67:2e:86:4c:2b:0d:f0:ab:
                    53:f9:ec:85:19:21:59:54:dd:11:f7:f0:7f:d1:b2:
                    db:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A1:5D:A8:0C:5E:91:2C:86:29:07:34:31:DF:3F:ED:77:A5:A3:E1
            X509v3 Authority Key Identifier:
                keyid:99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/LKFdqAxekSyGKQc0Md8_7Xelo-E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.223.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:4c:c9:43:9d:7f:cc:14:e9:fa:e0:34:7a:94:16:e4:ae:ff:
         e8:16:95:94:f9:e0:80:1e:9f:4d:a2:40:d8:7c:26:eb:e3:2b:
         42:44:a7:1e:45:9d:71:40:51:90:ad:c1:b0:f8:c1:e4:e5:7b:
         92:4c:68:c6:37:a1:3c:28:3b:47:73:41:24:54:20:28:38:39:
         0a:1c:94:e5:36:b1:d6:1e:46:c0:c0:ba:77:7b:50:0b:2c:99:
         7e:15:f3:2b:4f:b2:0f:cd:21:02:e0:5a:66:3f:c3:d1:d3:29:
         1d:66:fe:a1:e0:c5:d0:ce:09:b1:d8:e1:52:30:99:fd:fd:4f:
         f5:fb:89:fc:db:43:b5:e3:ee:88:59:56:82:54:91:2a:70:05:
         70:c7:c5:1f:2b:57:b6:80:69:b5:4d:7f:a9:c3:b4:bd:94:05:
         c7:44:e6:88:14:6f:2f:c9:cf:fc:91:af:9f:65:f6:03:b0:2f:
         2a:c6:43:27:1f:53:b1:32:1c:86:b8:e5:be:c6:b0:e8:61:b3:
         ba:2a:ef:bc:f0:34:55:81:69:58:c1:d6:9b:dd:11:2a:7a:f6:
         7b:14:03:35:52:71:5f:64:fe:a2:1c:f2:a7:c3:ed:d5:d9:c7:
         e5:95:a2:fc:c3:4d:68:9d:c5:cb:94:a5:77:90:f7:db:88:77:
         29:69:9f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:40:30 2026 by rpki-client