This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/LgvbuVV_52WynAHYpwvRHpZVnNI.roa
File:                     LgvbuVV_52WynAHYpwvRHpZVnNI.roa (raw, json)
Hash identifier:          2NYmdNRzlmlK0EtbozdXHwFXd15kCmUNnu2aelmVQRI=
Subject key identifier:   2E:0B:DB:B9:55:7F:E7:65:B2:9C:01:D8:A7:0B:D1:1E:96:55:9C:D2
Certificate issuer:       /CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
Certificate serial:       019B7DCAA97F299C0A450F4F623B489A1281
Authority key identifier: C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/LgvbuVV_52WynAHYpwvRHpZVnNI.roa
Signing time:             Fri 02 Jan 2026 08:19:52 +0000
ROA not before:           Fri 02 Jan 2026 08:19:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44447
IP address blocks:        93.92.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:a9:7f:29:9c:0a:45:0f:4f:62:3b:48:9a:12:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
        Validity
            Not Before: Jan  2 08:19:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2e0bdbb9557fe765b29c01d8a70bd11e96559cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:19:1a:d5:e2:23:e8:da:2a:9d:6c:4a:64:e7:
                    14:cc:a2:b9:bf:97:e5:a4:d1:52:4b:e7:7d:c0:2f:
                    b2:e8:b4:77:b8:10:3f:78:f3:c0:f8:4a:9a:7b:cb:
                    25:ea:ea:a9:f6:28:6f:b8:ab:08:42:0d:eb:a0:f9:
                    b1:e6:e5:7b:be:82:b8:de:87:63:41:13:4a:33:f3:
                    e5:32:da:aa:72:4d:38:e0:1e:d0:2a:61:bd:2d:63:
                    93:7b:76:c1:69:33:96:ea:23:90:1e:5f:f3:b1:6a:
                    96:0d:2c:ac:3b:7c:28:bb:f5:00:29:8e:ad:e7:05:
                    dd:78:93:9d:20:62:b2:9c:77:fd:b2:a9:f2:ec:7c:
                    90:90:4a:ef:a7:d8:43:3e:0c:1b:cf:c7:31:3c:35:
                    09:ec:94:7d:09:04:8a:84:2b:e3:e8:d9:de:d3:c2:
                    ea:c2:53:0f:e3:ea:91:32:40:e0:67:60:15:8c:24:
                    fe:7a:02:99:5b:d6:4e:f7:ec:ed:fa:09:09:85:67:
                    0f:6c:f3:08:92:b1:73:43:5b:4c:ac:7e:2f:56:e3:
                    1c:1b:93:bb:71:d7:0d:1d:ba:f0:bd:cd:c6:a0:d2:
                    06:70:81:ea:80:5f:57:f5:62:2f:6f:83:d2:de:f6:
                    f2:c9:af:0a:e9:fa:8d:8e:b9:aa:ec:be:4e:87:a9:
                    0f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0B:DB:B9:55:7F:E7:65:B2:9C:01:D8:A7:0B:D1:1E:96:55:9C:D2
            X509v3 Authority Key Identifier:
                keyid:C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/LgvbuVV_52WynAHYpwvRHpZVnNI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.92.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         af:78:85:1b:c1:86:bc:f5:32:2e:03:51:6f:d4:fd:f7:a5:18:
         73:1f:3f:3b:d6:58:ad:ed:4c:74:6f:0b:9c:94:f0:04:45:87:
         bb:09:de:82:76:03:0f:c8:8c:e9:ca:96:0a:ff:4e:af:d5:c2:
         58:76:22:7f:72:1f:aa:45:14:87:64:89:c9:c2:9a:9a:bd:b9:
         10:d6:b4:dd:da:b7:ec:2a:4a:dd:a2:74:f2:65:cc:ed:fa:85:
         2d:35:22:10:9f:18:9a:e1:a9:63:7b:30:9f:36:7c:c7:9c:b3:
         2e:e7:fa:8d:45:18:7d:85:31:99:db:38:a3:d6:02:79:17:bf:
         a0:9f:4e:59:7d:2c:40:07:b4:94:51:eb:46:49:af:9d:78:2e:
         f2:eb:eb:d2:56:3f:77:7f:d2:63:80:3f:89:68:44:c3:11:d2:
         89:f6:75:d0:14:48:df:ab:a4:8f:72:09:3c:1c:95:5d:01:f1:
         46:c0:4b:76:08:66:85:e0:16:e5:89:45:fa:92:7d:bc:cc:d3:
         99:04:a3:c1:77:55:6d:14:a3:52:5a:7d:f3:32:c2:4f:68:bc:
         79:da:1c:43:7d:b3:7a:12:97:09:cd:52:f8:47:56:1c:84:47:
         14:c3:45:f8:b8:9b:c3:53:01:a1:e4:9f:e0:25:29:d5:d5:a3:
         78:66:7e:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9yql/KZwKRQ9PYjtImhKBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZWM3N2RmNTllZDcyYTU0NTdkZWNlNmE1M2QwNWVkMGFl
NjAwYWEwHhcNMjYwMTAyMDgxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTBiZGJiOTU1N2ZlNzY1YjI5YzAxZDhhNzBiZDExZTk2NTU5Y2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhka1eIj6NoqnWxKZOcUzKK5v5fl
pNFSS+d9wC+y6LR3uBA/ePPA+Eqae8sl6uqp9ihvuKsIQg3roPmx5uV7voK43odj
QRNKM/PlMtqqck044B7QKmG9LWOTe3bBaTOW6iOQHl/zsWqWDSysO3wou/UAKY6t
5wXdeJOdIGKynHf9sqny7HyQkErvp9hDPgwbz8cxPDUJ7JR9CQSKhCvj6Nne08Lq
wlMP4+qRMkDgZ2AVjCT+egKZW9ZO9+zt+gkJhWcPbPMIkrFzQ1tMrH4vVuMcG5O7
cdcNHbrwvc3GoNIGcIHqgF9X9WIvb4PS3vbyya8K6fqNjrmq7L5Oh6kP2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC4L27lVf+dlspwB2KcL0R6WVZzSMB8GA1UdIwQY
MBaAFMnsd99Z7XKlRX3s5qU9Be0K5gCqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWV4MzMxbnRjcVZGZmV6bXBUMEY3UXJtQUtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mOGVhODQtYzBkYi00YzVhLWEzYzYt
M2ViMDllZGUzZWQ1LzEvTGd2YnVWVl81Mld5bkFIWXB3dlJIcFpWbk5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9mOGVhODQtYzBkYi00YzVhLWEzYzYtM2ViMDllZGUzZWQ1
LzEveWV4MzMxbnRjcVZGZmV6bXBUMEY3UXJtQUtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXVwAMA0G
CSqGSIb3DQEBCwUAA4IBAQCveIUbwYa89TIuA1Fv1P33pRhzHz871lit7Ux0bwuc
lPAERYe7Cd6CdgMPyIzpypYK/06v1cJYdiJ/ch+qRRSHZInJwpqavbkQ1rTd2rfs
KkrdonTyZczt+oUtNSIQnxia4aljezCfNnzHnLMu5/qNRRh9hTGZ2zij1gJ5F7+g
n05ZfSxAB7SUUetGSa+deC7y6+vSVj93f9JjgD+JaETDEdKJ9nXQFEjfq6SPcgk8
HJVdAfFGwEt2CGaF4BbliUX6kn28zNOZBKPBd1VtFKNSWn3zMsJPaLx52hxDfbN6
EpcJzVL4R1YchEcUw0X4uJvDUwGh5J/gJSnV1aN4Zn7D
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:05 2026 by rpki-client