This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/lgrQvjx5MIWGF2Zc_WzTTVLP-v0.roa
File:                     lgrQvjx5MIWGF2Zc_WzTTVLP-v0.roa (raw, json)
Hash identifier:          weF1SPmq8vuRk/u5oRHyuZvuVh74XYHXLM966wmgglw=
Subject key identifier:   96:0A:D0:BE:3C:79:30:85:86:17:66:5C:FD:6C:D3:4D:52:CF:FA:FD
Certificate issuer:       /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Certificate serial:       019B7E382CC1861FAD0D651D1CA95D8CAC29
Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/lgrQvjx5MIWGF2Zc_WzTTVLP-v0.roa
Signing time:             Fri 02 Jan 2026 10:19:29 +0000
ROA not before:           Fri 02 Jan 2026 10:19:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211381
IP address blocks:        185.182.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:2c:c1:86:1f:ad:0d:65:1d:1c:a9:5d:8c:ac:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
        Validity
            Not Before: Jan  2 10:19:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=960ad0be3c7930858617665cfd6cd34d52cffafd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ea:b2:d6:f0:3b:83:20:6d:18:ea:aa:e9:08:
                    66:0b:0f:21:48:f6:a2:0b:f0:73:18:c4:92:d6:76:
                    7e:cd:04:d7:a4:27:69:32:4d:84:56:38:4a:5d:6b:
                    db:15:3a:7d:74:41:23:36:03:f5:b8:e2:bd:9d:a9:
                    2a:95:fb:ad:40:dd:b3:da:d3:87:82:da:a9:98:ef:
                    ff:08:2d:0d:73:70:f0:b2:fd:62:56:eb:58:2d:44:
                    9e:e4:8d:9d:f8:f4:9d:43:e3:03:2d:88:03:06:f1:
                    7e:fb:db:a0:f5:86:7c:de:12:b6:11:78:fd:e1:d8:
                    3e:6c:33:dc:2e:85:40:77:29:34:1f:24:f9:ad:5d:
                    ef:5f:a3:0f:c0:84:bb:12:12:cb:5f:61:2c:e3:2d:
                    53:78:e7:2b:5f:70:3b:44:d5:99:13:c2:e3:7d:e1:
                    e6:fb:64:f0:d3:39:58:32:a6:13:77:43:d9:5a:d4:
                    cd:be:de:75:3e:28:ea:e0:d3:51:c6:e3:f3:3c:33:
                    7d:e8:f9:44:2f:54:89:40:76:26:5f:16:64:92:0a:
                    6d:77:df:ab:b8:6b:3a:ff:95:95:90:04:1d:a4:e3:
                    18:cf:46:5c:34:7c:f2:2a:ab:d7:bc:5c:51:ea:bc:
                    97:86:e1:98:e6:bb:9e:1a:c7:a3:ac:82:79:de:80:
                    44:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0A:D0:BE:3C:79:30:85:86:17:66:5C:FD:6C:D3:4D:52:CF:FA:FD
            X509v3 Authority Key Identifier:
                keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/lgrQvjx5MIWGF2Zc_WzTTVLP-v0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:74:d7:ab:6e:9e:50:29:d3:bb:4f:20:a4:8a:84:c7:6b:85:
         54:a9:36:6e:c9:34:54:39:79:e3:9d:a5:7e:28:b8:dc:fc:5d:
         f4:6d:e2:d1:fa:fc:38:62:6e:c1:f7:9c:54:c8:f2:a9:38:de:
         5c:69:8d:06:04:7a:9d:df:b3:5d:a7:32:23:e7:15:1d:73:ba:
         47:44:8d:c9:26:37:ec:86:66:3c:90:3d:64:92:4c:0c:fb:9f:
         35:0b:30:be:74:1d:a9:ca:84:41:09:57:21:19:47:54:41:eb:
         96:a4:70:91:bb:ee:6e:d8:ac:e1:74:0b:07:41:6f:19:c3:12:
         4c:75:73:ec:c8:27:71:55:88:8f:13:6c:5f:20:de:43:04:16:
         9f:9b:ee:a4:c0:81:ed:fe:9b:14:9d:95:79:3d:6f:1b:d0:3f:
         3f:38:27:c9:7d:bc:da:c7:20:f7:32:4b:1a:0c:22:b4:a5:e0:
         82:a3:af:93:58:be:e7:59:2a:c7:e2:24:9d:71:bf:e0:69:e3:
         a0:88:a7:23:d7:3e:02:ca:73:75:33:b6:82:dd:04:be:46:24:
         25:c0:70:1b:8f:fa:d7:7a:40:3e:8f:3d:8f:2d:61:8e:fd:47:
         09:53:14:b5:69:9a:af:66:a8:1d:a4:d7:ca:e2:cd:e8:6b:79:
         f2:da:83:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:25 2026 by rpki-client