This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/LUzjpoVFhw88iG4puj1BDUqf-ZM.roa
File:                     LUzjpoVFhw88iG4puj1BDUqf-ZM.roa (raw, json)
Hash identifier:          GP0cjRH6zF09V1PhwrVt/Ir5eEAm6HqNEdBJdbMjF04=
Subject key identifier:   2D:4C:E3:A6:85:45:87:0F:3C:88:6E:29:BA:3D:41:0D:4A:9F:F9:93
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019B7B357CDA645ABDC06FE8E8653C8E4AEC
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/LUzjpoVFhw88iG4puj1BDUqf-ZM.roa
Signing time:             Thu 01 Jan 2026 20:17:41 +0000
ROA not before:           Thu 01 Jan 2026 20:17:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50939
IP address blocks:        80.96.32.0/22 maxlen: 22
                          194.153.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:7c:da:64:5a:bd:c0:6f:e8:e8:65:3c:8e:4a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:17:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2d4ce3a68545870f3c886e29ba3d410d4a9ff993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:93:59:bd:cc:e5:ce:2d:43:ec:fc:47:39:e4:
                    d4:37:6c:13:81:a0:da:41:e1:c8:ae:8c:0f:ea:12:
                    8b:c6:5e:06:99:de:0c:1a:3c:34:98:f6:24:b7:4f:
                    ec:cb:01:00:4d:1c:92:aa:be:78:d9:01:87:b4:73:
                    1f:62:21:75:c4:0d:37:f1:81:eb:7e:57:e6:9f:22:
                    f4:e0:72:ec:4e:29:9e:70:4b:71:e3:22:54:94:1b:
                    46:ff:e7:ae:ed:ff:a5:e6:f2:27:13:82:06:af:47:
                    a6:35:91:13:85:1c:e9:f6:fb:1e:51:9f:1e:05:d1:
                    49:e1:10:11:84:db:f4:d9:ec:ca:55:02:60:e8:f6:
                    f8:f4:fb:c4:32:12:77:f4:b9:e4:d0:1f:43:91:88:
                    ed:34:23:37:ea:ef:ed:5c:af:c5:65:e1:35:d0:71:
                    42:21:0e:c7:11:0a:fb:c6:0d:44:b9:a6:59:3e:90:
                    45:17:9e:8c:c3:21:4b:9a:8a:4a:30:05:61:64:ec:
                    b8:d1:c2:9f:2f:15:11:db:5b:e3:af:20:2f:66:bc:
                    66:a5:32:d6:79:8b:71:cb:00:63:61:85:32:93:5d:
                    10:9a:f5:89:cc:ff:17:fc:a3:c0:e9:09:fb:e6:f4:
                    b4:a9:8d:ad:9d:8b:1d:47:d5:f9:0e:53:14:47:61:
                    da:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4C:E3:A6:85:45:87:0F:3C:88:6E:29:BA:3D:41:0D:4A:9F:F9:93
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/LUzjpoVFhw88iG4puj1BDUqf-ZM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.32.0/22
                  194.153.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:2a:ad:61:6b:cf:62:14:6e:47:be:12:5f:a2:0f:04:cd:ef:
         66:16:65:e3:da:3e:95:fb:00:39:af:b0:35:b3:2d:39:87:56:
         fd:85:69:ee:a0:98:33:6b:05:1e:68:67:3d:03:cb:11:16:6c:
         d9:78:4f:5a:92:b1:a3:0e:6e:d5:5f:90:9e:fd:e5:88:4b:1d:
         e1:86:c2:67:76:8e:21:2e:38:7f:08:8e:d4:db:4c:95:ba:c4:
         69:1d:6e:99:6b:dd:73:eb:a7:c7:51:55:c2:89:1a:a8:0c:8a:
         fd:25:5b:08:a8:90:71:14:80:65:d9:66:79:a7:e2:c0:a4:7c:
         c4:5a:de:ae:cc:66:70:e7:e8:73:98:ce:aa:7e:a9:2b:79:59:
         bb:eb:5b:c1:53:56:65:2a:7a:e2:28:05:0a:6e:df:ce:2d:44:
         c2:9a:bd:cc:29:72:41:13:9b:93:5b:98:30:f6:15:d7:59:1b:
         d6:bf:0d:b9:67:11:84:86:b7:6a:b3:7d:26:a2:0a:db:b3:f5:
         e6:95:5d:85:c1:44:e4:4c:49:c0:e0:96:03:6e:3c:f8:db:99:
         91:dd:fb:e2:ff:5b:ea:a6:77:10:03:72:70:b2:46:76:43:91:
         db:a6:99:bb:44:51:72:01:be:8e:87:c2:33:53:77:e3:90:5d:
         b4:68:f8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:49:58 2026 by rpki-client