This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/lKk8QfLw_XteveKoVtOlfJoNRts.roa
File:                     lKk8QfLw_XteveKoVtOlfJoNRts.roa (raw, json)
Hash identifier:          r9aTJA8F61qWCW+VmZwLY2JSLRPBNLvOPMgRzhMeIAY=
Subject key identifier:   94:A9:3C:41:F2:F0:FD:7B:5E:BD:E2:A8:56:D3:A5:7C:9A:0D:46:DB
Certificate issuer:       /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial:       019B7CEDCBC433DE22CB2FE29681460CAFD8
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/lKk8QfLw_XteveKoVtOlfJoNRts.roa
Signing time:             Fri 02 Jan 2026 04:18:37 +0000
ROA not before:           Fri 02 Jan 2026 04:18:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206574
IP address blocks:        185.105.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:cb:c4:33:de:22:cb:2f:e2:96:81:46:0c:af:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
        Validity
            Not Before: Jan  2 04:18:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=94a93c41f2f0fd7b5ebde2a856d3a57c9a0d46db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:60:99:40:ca:19:bb:3f:12:a9:74:80:cb:
                    48:69:2c:19:3b:0c:d1:8e:15:1f:31:71:a9:49:06:
                    d3:15:93:be:0a:03:0d:88:34:cf:97:6a:17:28:bc:
                    ce:bd:f1:c2:bb:b2:47:73:a6:90:9f:e0:0a:bb:cc:
                    2a:c3:52:e1:e4:62:05:eb:57:d7:9d:fd:e6:7b:f4:
                    3f:66:f3:46:02:d9:c5:33:01:81:ab:93:6f:4f:96:
                    42:ee:fb:5f:a3:d6:1b:89:6f:99:b7:5c:5e:fa:71:
                    41:5a:bb:7e:96:d3:9d:8c:78:ee:3e:28:b1:b2:91:
                    5d:02:58:a4:d4:47:2c:37:f4:3b:3b:a0:ea:f1:99:
                    ce:0c:0b:f6:ee:b4:4c:be:b4:72:74:88:41:b0:44:
                    da:bc:04:cc:a7:1a:a6:fb:9a:53:9e:55:f1:94:23:
                    e5:9e:d5:09:6a:99:a2:da:b9:0e:5f:96:ca:df:46:
                    04:5b:a9:06:f1:a0:fc:92:d2:4f:8a:ca:1a:7f:41:
                    26:ad:9d:9d:89:e6:a8:1f:e5:db:af:3d:34:d7:8c:
                    d1:3f:f6:6e:26:d1:73:75:f5:4c:f5:bb:f3:2a:13:
                    3f:58:1f:78:b4:58:ab:93:74:57:eb:19:a2:36:38:
                    df:7d:8c:a1:5d:c8:0b:7e:1f:10:79:b9:95:e1:74:
                    43:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A9:3C:41:F2:F0:FD:7B:5E:BD:E2:A8:56:D3:A5:7C:9A:0D:46:DB
            X509v3 Authority Key Identifier:
                keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/lKk8QfLw_XteveKoVtOlfJoNRts.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.105.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:5e:7f:45:b7:39:c5:c0:fb:47:5d:39:83:5a:59:59:c3:64:
         dd:0a:dc:ef:46:d2:5a:58:3f:54:7f:fe:2f:cb:36:76:0b:c8:
         18:0f:fe:6b:32:4f:a5:67:8d:64:a5:17:ae:2f:ae:89:f4:61:
         2d:92:82:ab:45:45:b3:27:34:f8:ff:a2:0c:bb:0d:8c:6a:db:
         be:e5:50:d4:ad:f4:93:8d:18:e1:15:f3:08:04:32:14:e7:6c:
         30:d7:c5:df:1e:a2:31:c2:8e:be:03:1a:3e:6b:b2:21:39:4f:
         be:0f:d1:53:35:43:ec:3c:14:af:e1:40:92:3e:e3:bd:2c:36:
         79:54:bb:27:cf:47:50:5d:cb:60:11:2d:50:09:16:c4:49:39:
         2f:ea:1d:42:65:d8:8c:0f:a5:64:c7:36:da:36:98:f3:bb:30:
         31:0c:8f:26:9a:56:51:50:63:b9:15:cf:3a:4a:9e:18:5a:85:
         b9:97:4d:6e:8b:97:67:2b:9f:bb:3c:cc:98:d6:17:a3:2b:74:
         e2:5a:e1:ca:65:86:69:f7:16:75:8d:29:c5:06:00:16:7a:c4:
         2a:21:1e:7c:9d:92:1e:23:c9:0c:bd:38:c2:1b:b0:0e:2e:e8:
         9b:08:38:ee:8a:64:fc:57:61:b7:71:9f:b3:af:71:09:14:43:
         4b:9a:66:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:09:01 2026 by rpki-client