This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/LH31eWblzc9N88J9ihjcAEm2GSU.roa
File:                     LH31eWblzc9N88J9ihjcAEm2GSU.roa (raw, json)
Hash identifier:          aA7SpWPZXBL5dHzOmD7+zSVA2s9TImnC5p7oJrbvDXA=
Subject key identifier:   2C:7D:F5:79:66:E5:CD:CF:4D:F3:C2:7D:8A:18:DC:00:49:B6:19:25
Certificate issuer:       /CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Certificate serial:       019B7A5AAFB67BAD34650C13F330EE279840
Authority key identifier: 46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/LH31eWblzc9N88J9ihjcAEm2GSU.roa
Signing time:             Thu 01 Jan 2026 16:18:42 +0000
ROA not before:           Thu 01 Jan 2026 16:18:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215031
IP address blocks:        195.8.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:af:b6:7b:ad:34:65:0c:13:f3:30:ee:27:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
        Validity
            Not Before: Jan  1 16:18:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2c7df57966e5cdcf4df3c27d8a18dc0049b61925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:b9:c3:1d:82:b4:f2:f7:e9:0c:7b:d2:4d:b5:
                    cb:ea:2b:14:98:67:6d:54:ed:e5:aa:6a:b0:cb:56:
                    31:f7:62:5a:bf:5b:e3:bd:15:08:d0:c2:34:12:56:
                    1f:37:6f:c6:f4:9a:86:c4:db:04:db:87:2f:6c:00:
                    d6:b5:7d:ef:8c:7b:5f:7f:c6:07:6c:c8:c9:5c:f6:
                    78:e9:a2:76:39:40:22:b2:10:1e:1c:04:e1:7f:4e:
                    42:e5:ed:12:77:c7:56:09:3f:d5:83:e3:3b:60:60:
                    61:76:b6:f6:c7:d4:f9:4c:c4:0f:91:09:4d:5f:6b:
                    e3:67:fa:71:ca:96:62:5b:3c:35:60:ec:53:c9:d0:
                    93:4d:04:46:47:35:99:2f:52:30:c0:01:93:7a:db:
                    ca:90:d0:5b:50:ac:19:bd:15:2c:87:d0:8d:0f:9e:
                    2c:ac:d8:d7:b2:29:ea:68:be:3c:51:94:9d:ee:0b:
                    d7:52:eb:7e:17:32:8d:ed:f9:c9:8c:ba:33:71:61:
                    fd:2d:17:04:69:bd:a1:bb:ff:f4:b8:f4:fb:98:84:
                    f8:eb:60:d6:91:a4:df:61:37:a2:5c:de:da:a9:a9:
                    c1:7e:ac:ba:aa:a4:1a:95:52:3f:67:3c:af:86:30:
                    19:45:69:97:b0:30:46:db:a1:71:87:58:f0:38:83:
                    fe:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7D:F5:79:66:E5:CD:CF:4D:F3:C2:7D:8A:18:DC:00:49:B6:19:25
            X509v3 Authority Key Identifier:
                keyid:46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/LH31eWblzc9N88J9ihjcAEm2GSU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.8.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:7b:92:99:f7:2f:fe:0e:e7:eb:b6:1f:12:88:f7:95:dd:41:
         05:f9:be:84:15:09:82:55:e7:53:57:3a:31:4c:d5:ff:83:30:
         17:6d:ed:e5:7a:69:bf:ad:cb:ad:38:08:39:51:1d:d2:5d:7b:
         84:83:08:c2:e3:88:c0:a2:02:34:6a:a2:85:f1:94:fd:cf:49:
         a1:6d:8f:e6:47:89:ce:a8:c4:07:f2:25:64:17:e9:56:52:04:
         7b:a2:bb:f1:53:df:c9:80:20:b6:34:58:a2:01:b4:c0:9c:7a:
         6b:d0:5d:47:ed:17:f8:a7:f3:63:7e:64:b4:8f:37:28:0b:68:
         ee:26:39:ca:fe:bb:a4:07:99:f0:50:d2:98:78:ea:95:db:8c:
         dd:d3:b6:dc:bf:1e:96:1e:71:90:43:c4:a3:9a:6a:ee:75:aa:
         e2:98:b9:78:4f:fe:b0:6f:a8:c2:7f:c6:1b:94:dc:c5:16:87:
         24:d0:87:1f:ae:af:b4:b7:da:b9:68:11:58:97:20:c7:6e:ef:
         7b:49:a5:f6:cc:c3:7c:0d:59:e0:8d:60:1b:82:53:e4:6e:02:
         e5:be:23:47:a6:bb:1e:82:23:f9:ca:2f:d1:c1:a7:41:55:1b:
         0a:4f:55:6a:ee:82:35:1a:94:4c:e6:1d:10:5a:d3:63:81:04:
         74:e4:94:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:32:23 2026 by rpki-client