This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/rla9nfquRDNkBA9a7aTOXInR3kY.roa
File:                     rla9nfquRDNkBA9a7aTOXInR3kY.roa (raw, json)
Hash identifier:          h1nZyOG+2GkCNjljv4pIretBeB05AhrlFnBuYz+Q++o=
Subject key identifier:   AE:56:BD:9D:FA:AE:44:33:64:04:0F:5A:ED:A4:CE:5C:89:D1:DE:46
Certificate issuer:       /CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Certificate serial:       019B7B36E18B989D7EEA237185AC58408B72
Authority key identifier: 57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/rla9nfquRDNkBA9a7aTOXInR3kY.roa
Signing time:             Thu 01 Jan 2026 20:19:12 +0000
ROA not before:           Thu 01 Jan 2026 20:19:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209898
IP address blocks:        185.155.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:e1:8b:98:9d:7e:ea:23:71:85:ac:58:40:8b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
        Validity
            Not Before: Jan  1 20:19:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ae56bd9dfaae443364040f5aeda4ce5c89d1de46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2a:8d:2a:fc:7c:59:74:e6:fe:de:3c:06:f1:
                    fa:62:c3:65:a1:06:90:86:20:8c:40:e5:43:26:21:
                    46:cd:9e:82:ec:85:50:d7:cb:1a:55:be:57:00:a2:
                    48:f2:47:25:72:6d:1a:2d:03:60:78:a1:87:41:9d:
                    c3:ae:4c:47:af:dc:9a:3c:e8:64:63:0a:f5:25:91:
                    27:05:22:7a:94:07:7c:67:6e:6c:46:9a:6b:ee:ae:
                    67:6e:ed:a0:b7:04:4b:e6:8c:62:de:82:c3:9e:52:
                    a2:fa:b3:3b:55:85:82:02:cf:06:b4:66:de:a7:c9:
                    a2:df:37:0f:50:93:eb:fa:a5:96:a7:c6:bf:b5:a5:
                    b8:ca:43:01:0b:1c:35:56:8e:e8:48:85:32:4b:6b:
                    d9:e3:e3:d4:dd:eb:02:75:74:f7:03:0e:41:c4:3d:
                    7a:7b:e8:27:39:9f:e2:b3:1f:6e:7a:17:1c:15:85:
                    99:b7:9d:cd:64:32:9c:ed:46:9e:a0:97:6f:79:ae:
                    c7:7f:1f:c1:f4:d7:ff:2c:8b:78:93:fb:98:03:25:
                    5c:af:69:63:ba:43:9e:ea:97:48:a4:c4:15:ca:bb:
                    b4:2d:99:d5:bc:df:7d:94:42:f1:80:a9:c8:fb:a1:
                    09:f6:83:8b:c4:d0:59:5d:62:56:ab:ad:ef:85:7b:
                    0f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:56:BD:9D:FA:AE:44:33:64:04:0F:5A:ED:A4:CE:5C:89:D1:DE:46
            X509v3 Authority Key Identifier:
                keyid:57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/rla9nfquRDNkBA9a7aTOXInR3kY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:1e:7c:89:a0:a0:08:c1:c0:68:c6:c6:09:12:46:01:5b:84:
         88:0d:19:e2:27:aa:84:f2:72:34:3b:9e:da:ff:4b:c9:f2:62:
         83:db:bb:d7:52:19:3a:59:44:78:6b:6a:26:5e:ff:11:e0:7e:
         90:65:d8:cf:fa:36:b9:b3:a2:81:5c:82:fb:6e:fa:2b:10:b7:
         7c:c7:6f:c2:5c:88:59:67:1d:84:0c:47:3c:d0:1b:e4:cd:be:
         40:4c:29:71:84:a9:ec:bd:b0:67:e6:18:a0:b3:c6:bf:bb:65:
         b0:64:b5:86:ac:a4:a7:c9:75:69:8e:ba:d3:d6:b4:36:5b:dc:
         26:87:ad:2c:d8:d9:08:89:c1:5f:a1:2d:95:74:27:f0:ad:e0:
         b8:e4:7e:51:d5:b1:12:87:57:41:6b:b1:78:60:b0:7b:6c:b3:
         12:59:b3:8f:c8:55:0f:77:d7:7e:ed:1d:38:5f:c1:4e:6b:6a:
         ea:61:a7:14:63:e0:04:f8:b5:c6:77:f3:56:10:42:91:9d:f7:
         dc:8e:96:8d:84:16:59:71:ab:c3:93:b7:5b:36:b0:4a:b0:d7:
         e3:15:58:9f:e2:a3:72:7c:9a:36:71:00:35:10:99:87:13:4f:
         29:37:ac:63:db:76:d7:bc:b2:cb:26:00:92:3f:a9:58:d8:e3:
         e0:42:37:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:54:35 2026 by rpki-client