This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/lvr-gkD4e7tEUFUKpupnPeoD9GU.roa
File:                     lvr-gkD4e7tEUFUKpupnPeoD9GU.roa (raw, json)
Hash identifier:          AfGT0Bko2pZweYtrAj4Xy01tlGQyHYSHTcen14DfeCQ=
Subject key identifier:   96:FA:FE:82:40:F8:7B:BB:44:50:55:0A:A6:EA:67:3D:EA:03:F4:65
Certificate issuer:       /CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Certificate serial:       019B7A5AE4578F5FFE2D686EE803C9FE8407
Authority key identifier: AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/lvr-gkD4e7tEUFUKpupnPeoD9GU.roa
Signing time:             Thu 01 Jan 2026 16:18:55 +0000
ROA not before:           Thu 01 Jan 2026 16:18:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     25386
IP address blocks:        62.80.160.0/19 maxlen: 20
                          185.117.240.0/22 maxlen: 23
                          2a06:9000::/29 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:e4:57:8f:5f:fe:2d:68:6e:e8:03:c9:fe:84:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
        Validity
            Not Before: Jan  1 16:18:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=96fafe8240f87bbb4450550aa6ea673dea03f465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:f9:c1:3d:56:7f:30:d3:80:e8:aa:8e:d8:
                    58:3b:52:70:6b:3d:55:e9:e4:d2:2f:8a:1f:78:f6:
                    c4:86:84:7a:1f:53:8e:80:98:75:ce:31:aa:1e:5b:
                    66:c3:0e:f5:28:69:3f:59:0e:a7:5c:c4:2b:2b:69:
                    dc:ef:1f:a3:2c:2f:00:91:77:f5:f8:7b:71:f9:e0:
                    39:9b:3f:0e:a3:3e:49:9f:c5:d4:94:bf:ed:b6:e6:
                    7a:68:15:60:9d:7a:18:03:7e:8b:3b:d0:83:69:d3:
                    e1:38:27:fb:a4:56:4b:ff:0d:fe:e6:60:ca:f8:a2:
                    88:57:15:cf:6c:ff:dd:06:f8:fe:ef:7a:63:57:b8:
                    6d:fc:00:e6:00:ed:98:fb:67:84:47:a5:ef:f1:b1:
                    2c:2f:fb:26:c8:32:d6:3b:79:e7:a0:48:e6:3d:3d:
                    4c:18:d8:af:c9:90:21:fd:48:19:af:b8:3f:0e:0d:
                    35:0c:7f:ca:7c:85:37:ef:93:45:15:eb:47:2c:66:
                    f1:05:d3:50:5d:8b:c1:df:ea:ed:59:6a:12:66:1c:
                    2e:a9:58:2f:b9:57:0f:22:ee:4c:90:86:ed:b3:b2:
                    d1:21:fb:2d:09:a6:2c:0f:21:b7:01:fa:e6:0e:d2:
                    b2:5d:a2:fb:46:3f:5a:22:71:39:86:18:76:09:d2:
                    7e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FA:FE:82:40:F8:7B:BB:44:50:55:0A:A6:EA:67:3D:EA:03:F4:65
            X509v3 Authority Key Identifier:
                keyid:AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/lvr-gkD4e7tEUFUKpupnPeoD9GU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.80.160.0/19
                  185.117.240.0/22
                IPv6:
                  2a06:9000::/29

    Signature Algorithm: sha256WithRSAEncryption
         89:b0:1d:16:a8:9b:38:5a:69:6b:41:1b:5c:b2:b9:ec:05:c8:
         db:77:c3:a2:70:d1:6e:98:09:e7:ec:38:78:d6:62:d7:ad:8b:
         1c:6b:44:0f:55:26:51:8d:d9:a0:cd:63:44:41:72:0b:e7:78:
         ba:99:2f:31:75:00:84:ca:e9:16:e3:ac:f7:22:ec:06:7f:79:
         88:83:87:08:40:b1:04:0b:84:dd:eb:28:20:8d:8b:b2:d5:ab:
         79:c0:00:8a:86:f1:19:ad:d5:26:d7:67:e1:2f:fc:a7:68:16:
         a3:e9:76:8f:e7:32:1c:0b:55:e8:21:60:90:ee:5e:51:50:ac:
         e8:2a:28:50:03:42:88:d1:9a:dd:67:b0:a3:09:00:cf:1a:bc:
         e4:e1:d6:e0:58:00:02:35:7f:cd:eb:d8:91:d5:c3:47:31:a5:
         6a:08:dc:b4:0b:fa:0f:1e:a9:32:a0:8e:52:b0:6a:93:cc:47:
         5d:13:60:9f:05:04:ff:8b:67:f1:e4:cd:87:17:52:75:d9:07:
         f4:ba:02:f1:ef:6b:57:a4:6c:be:fa:9d:d4:48:6d:6e:fb:24:
         5e:91:37:9a:f1:68:b4:a3:f5:64:5a:81:b6:56:c3:53:d3:02:
         79:9b:52:a6:61:5d:a4:8a:be:66:60:5c:fa:e2:e4:64:12:7c:
         7e:62:40:ed
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZt6WuRXj1/+LWhu6APJ/oQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYmQ4ZTk5ZjgyN2ZmOTVkMjgxZDRmZjdiYzI3ZjA0NWZh
YmYxMDUwHhcNMjYwMTAxMTYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmZhZmU4MjQwZjg3YmJiNDQ1MDU1MGFhNmVhNjczZGVhMDNmNDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpn5wT1WfzDTgOiqjthYO1Jwaz1V
6eTSL4ofePbEhoR6H1OOgJh1zjGqHltmww71KGk/WQ6nXMQrK2nc7x+jLC8AkXf1
+Htx+eA5mz8Ooz5Jn8XUlL/ttuZ6aBVgnXoYA36LO9CDadPhOCf7pFZL/w3+5mDK
+KKIVxXPbP/dBvj+73pjV7ht/ADmAO2Y+2eER6Xv8bEsL/smyDLWO3nnoEjmPT1M
GNivyZAh/UgZr7g/Dg01DH/KfIU375NFFetHLGbxBdNQXYvB3+rtWWoSZhwuqVgv
uVcPIu5MkIbts7LRIfstCaYsDyG3AfrmDtKyXaL7Rj9aInE5hhh2CdJ+RwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFJb6/oJA+Hu7RFBVCqbqZz3qA/RlMB8GA1UdIwQY
MBaAFK29jpn4J/+V0oHU/3vCfwRfq/EFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmIyT21mZ25fNVhTZ2RUX2U4Sl9CRi1yOFFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iOTkzYzctZmE4ZC00M2MwLTkzNzQt
MWQzMWExOTYwMTQ3LzEvbHZyLWdrRDRlN3RFVUZVS3B1cG5QZW9EOUdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9iOTkzYzctZmE4ZC00M2MwLTkzNzQtMWQzMWExOTYwMTQ3
LzEvcmIyT21mZ25fNVhTZ2RUX2U4Sl9CRi1yOFFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFPlCgAwQC
uXXwMA0EAgACMAcDBQMqBpAAMA0GCSqGSIb3DQEBCwUAA4IBAQCJsB0WqJs4Wmlr
QRtcsrnsBcjbd8OicNFumAnn7Dh41mLXrYsca0QPVSZRjdmgzWNEQXIL53i6mS8x
dQCEyukW46z3IuwGf3mIg4cIQLEEC4Td6yggjYuy1at5wACKhvEZrdUm12fhL/yn
aBaj6XaP5zIcC1XoIWCQ7l5RUKzoKihQA0KI0ZrdZ7CjCQDPGrzk4dbgWAACNX/N
69iR1cNHMaVqCNy0C/oPHqkyoI5SsGqTzEddE2CfBQT/i2fx5M2HF1J12Qf0ugLx
72tXpGy++p3USG1u+yRekTea8Wi0o/VkWoG2VsNT0wJ5m1KmYV2kir5mYFz64uRk
Enx+YkDt
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:03:35 2026 by rpki-client