This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/lNE8D9GJWfcd-D9egVK1TMPitC0.roa
File:                     lNE8D9GJWfcd-D9egVK1TMPitC0.roa (raw, json)
Hash identifier:          2CmJCZprp/LCt6ibHBoiFVrP1YcZuqexjzFdiTh77oM=
Subject key identifier:   94:D1:3C:0F:D1:89:59:F7:1D:F8:3F:5E:81:52:B5:4C:C3:E2:B4:2D
Certificate issuer:       /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial:       019B797E730DD2D54E0B9EC2B03DCE9F8153
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/lNE8D9GJWfcd-D9egVK1TMPitC0.roa
Signing time:             Thu 01 Jan 2026 12:18:08 +0000
ROA not before:           Thu 01 Jan 2026 12:18:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205893
IP address blocks:        45.11.40.0/24 maxlen: 24
                          185.202.240.0/24 maxlen: 24
                          185.202.241.0/24 maxlen: 24
                          185.202.242.0/24 maxlen: 24
                          185.202.243.0/24 maxlen: 24
                          2a0a:e240::/32 maxlen: 32
                          2a0a:e241::/32 maxlen: 32
                          2a0a:e242::/32 maxlen: 32
                          2a0a:e243::/32 maxlen: 32
                          2a0a:e244::/32 maxlen: 32
                          2a0a:e245::/32 maxlen: 32
                          2a0a:e246::/32 maxlen: 32
                          2a0a:e247::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:73:0d:d2:d5:4e:0b:9e:c2:b0:3d:ce:9f:81:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
        Validity
            Not Before: Jan  1 12:18:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=94d13c0fd18959f71df83f5e8152b54cc3e2b42d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e3:95:55:df:43:83:67:44:bf:db:f9:ac:16:
                    d1:44:a7:8a:4c:1c:2c:9f:f4:71:9f:25:56:ef:6e:
                    44:49:11:16:8e:2f:f5:7b:38:d9:7b:34:90:e3:2b:
                    30:00:d2:af:6c:ea:13:95:82:d7:6e:7c:71:70:a2:
                    77:0d:3b:b3:6e:05:e1:9d:fe:bc:b0:a4:14:1e:c6:
                    d2:be:97:f4:54:31:90:3e:48:76:9d:f4:38:52:e7:
                    94:55:1c:16:74:4a:e9:15:e4:78:87:f9:33:e6:ac:
                    db:e4:c6:f2:e7:19:4d:1b:03:15:c2:dc:9b:bf:c9:
                    0a:53:e2:e4:55:c9:8d:0e:b0:91:11:06:4d:5f:42:
                    43:f1:51:83:8e:cc:2a:5f:d5:e3:71:5e:af:29:6a:
                    f9:ae:be:23:b2:b5:94:1b:ee:26:1b:c8:97:f1:7f:
                    40:73:8c:8a:9c:77:a7:a8:a4:eb:be:27:96:65:12:
                    34:7d:10:a4:21:01:ad:2f:bf:82:30:24:16:51:2d:
                    fb:b0:59:b5:b4:98:1b:b9:67:45:cf:e5:25:fc:26:
                    cd:5f:e0:b3:6f:4b:9a:f1:24:f6:9f:19:1c:7a:48:
                    13:82:f8:42:7a:30:ac:c8:5c:02:4d:06:58:8d:00:
                    36:d9:34:e0:eb:86:92:e1:20:00:60:88:1e:9d:43:
                    f1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D1:3C:0F:D1:89:59:F7:1D:F8:3F:5E:81:52:B5:4C:C3:E2:B4:2D
            X509v3 Authority Key Identifier:
                keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/lNE8D9GJWfcd-D9egVK1TMPitC0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.40.0/24
                  185.202.240.0/22
                IPv6:
                  2a0a:e240::/29

    Signature Algorithm: sha256WithRSAEncryption
         86:25:be:48:e3:9f:84:ef:07:39:f6:cd:8d:9d:73:e0:36:58:
         ee:7e:ee:45:f0:53:34:5b:a3:5e:be:00:fe:9b:76:8c:a1:af:
         23:46:36:79:4b:81:eb:ef:c6:be:0e:fe:9e:38:c0:a8:cb:e6:
         b0:d5:cb:a2:25:b3:ea:ae:b7:05:8c:6c:a2:64:8c:6f:3b:f5:
         13:c4:f3:62:c0:00:4e:7d:9a:0f:bf:d9:66:9f:0d:54:bb:05:
         2b:df:bd:f4:90:9d:c4:64:54:9b:c2:2b:2b:de:eb:43:04:00:
         14:4a:c4:39:89:97:ed:fd:f7:80:13:97:4d:57:4c:13:30:17:
         cc:53:49:c7:5c:4e:4b:60:60:24:44:14:c9:3d:de:5b:b4:c6:
         81:ee:7f:65:1a:ed:99:97:73:a0:27:f7:c5:b3:b4:13:4e:1e:
         b5:15:2b:88:02:ba:44:e1:41:d9:f1:af:fd:34:c3:ef:0c:8e:
         32:61:de:6d:3d:ff:8f:41:fb:f9:14:9f:60:c5:8d:54:71:70:
         1b:a0:6d:d0:f9:ad:9d:39:cb:45:e1:4f:da:82:ed:fc:c6:a3:
         d6:2c:35:21:66:7e:40:e3:e4:a5:31:fb:ed:c7:f5:de:bd:00:
         d1:af:b2:9f:f9:eb:77:9b:a1:94:af:3d:2c:85:6a:9b:6f:7b:
         b0:11:03:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 04:24:23 2026 by rpki-client