This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/804i__LKBMTiTNlKblj0ZYzR9Zo.roa
File:                     804i__LKBMTiTNlKblj0ZYzR9Zo.roa (raw, json)
Hash identifier:          rLxpHDxWpsSUKU2Kc1WTyYI8urGOScr9sz7NvsaiFlY=
Subject key identifier:   F3:4E:22:FF:F2:CA:04:C4:E2:4C:D9:4A:6E:58:F4:65:8C:D1:F5:9A
Certificate issuer:       /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial:       019B7C8037D91A6944DE915633F6D37694CD
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/804i__LKBMTiTNlKblj0ZYzR9Zo.roa
Signing time:             Fri 02 Jan 2026 02:18:55 +0000
ROA not before:           Fri 02 Jan 2026 02:18:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48135
IP address blocks:        94.127.80.0/22 maxlen: 22
                          94.127.81.0/24 maxlen: 24
                          94.127.83.0/24 maxlen: 24
                          94.127.84.0/22 maxlen: 22
                          94.127.85.0/24 maxlen: 24
                          94.127.86.0/23 maxlen: 23
                          94.127.86.0/24 maxlen: 24
                          94.127.87.0/24 maxlen: 24
                          151.89.0.0/16 maxlen: 16
                          151.89.0.0/17 maxlen: 17
                          151.89.54.0/24 maxlen: 24
                          151.89.55.0/24 maxlen: 24
                          151.89.56.0/24 maxlen: 24
                          151.89.128.0/17 maxlen: 17
                          151.89.232.0/22 maxlen: 22
                          185.51.12.0/24 maxlen: 24
                          185.51.13.0/24 maxlen: 24
                          185.51.14.0/24 maxlen: 24
                          185.51.15.0/24 maxlen: 24
                          193.111.46.0/24 maxlen: 24
                          193.169.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:37:d9:1a:69:44:de:91:56:33:f6:d3:76:94:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
        Validity
            Not Before: Jan  2 02:18:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f34e22fff2ca04c4e24cd94a6e58f4658cd1f59a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b9:26:7b:2d:ab:a5:a4:b3:ee:ee:af:1c:b0:
                    65:33:5c:4a:20:61:d4:76:92:10:b9:af:b2:3e:75:
                    9b:45:ce:54:aa:f8:cd:e9:14:00:f7:89:ab:26:66:
                    5a:2e:0a:d5:4c:f9:e1:80:95:27:f2:71:58:03:1d:
                    53:a4:1b:6e:4b:d3:9d:66:4d:f8:fc:3e:85:02:c8:
                    09:1a:d5:8c:59:f7:a2:15:7d:5d:10:49:0d:e7:ca:
                    52:db:68:59:81:c5:84:96:52:26:cd:02:5f:1c:0d:
                    f5:d9:0f:13:be:16:cc:b6:48:d4:b9:1e:4c:d8:24:
                    41:7d:ab:85:91:8a:13:c8:8b:f5:20:c1:59:24:06:
                    12:04:46:77:48:81:d3:91:65:6d:4f:9b:4b:f5:ef:
                    7f:5e:a6:49:5a:89:14:96:ed:e4:6c:51:e4:20:52:
                    a4:01:37:01:31:d3:d4:e8:fd:2d:89:0f:9b:9e:3e:
                    0a:55:11:fc:a2:06:83:d9:d9:d4:05:43:c4:3b:04:
                    ea:56:75:74:9a:85:d2:af:26:18:fa:02:d2:ce:65:
                    d8:42:70:53:a2:51:dc:22:69:84:10:ab:f5:c2:54:
                    c9:5f:72:ca:0f:af:ad:69:b4:f5:9e:db:f6:54:b0:
                    42:a4:ef:b3:b5:64:1c:c0:d4:1a:4a:ec:1a:41:be:
                    4e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4E:22:FF:F2:CA:04:C4:E2:4C:D9:4A:6E:58:F4:65:8C:D1:F5:9A
            X509v3 Authority Key Identifier:
                keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/804i__LKBMTiTNlKblj0ZYzR9Zo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.127.80.0/21
                  151.89.0.0/16
                  185.51.12.0/22
                  193.111.46.0/24
                  193.169.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:95:44:82:32:0d:f7:9d:f8:92:d9:bd:db:4f:36:b5:5a:16:
         31:a7:46:1a:21:73:58:e1:db:5d:e8:6b:67:a0:30:e6:ee:20:
         67:a1:f1:dc:ae:ee:4b:28:5d:6c:27:b0:14:86:09:4b:99:a6:
         d5:5f:b1:5f:6a:77:4f:5f:a8:93:a0:5b:58:d3:d1:bb:96:81:
         47:64:af:5f:2c:c7:d1:35:9f:ed:ad:bf:b1:7a:b6:c5:43:ab:
         51:c2:a5:7e:c1:80:2b:d3:9c:a1:c8:74:30:44:99:35:94:81:
         b1:10:5d:ce:23:75:7b:8b:5b:41:54:3b:ce:4e:f1:b7:4a:e8:
         81:3c:34:03:32:95:c1:48:dc:a3:90:4f:f0:a6:ec:c1:f2:6a:
         61:fe:2b:48:53:65:44:94:b1:9a:e3:6b:0a:e4:a9:c0:8e:8d:
         58:cb:25:d2:9e:d4:2c:18:7b:f9:8e:f8:c1:61:37:ce:3f:b2:
         2b:86:4f:2e:b8:82:7a:14:ee:3a:ce:2a:89:d4:ff:d1:b5:60:
         7f:02:c3:05:b3:39:6d:a2:32:25:73:e9:e0:9d:e2:63:d2:4c:
         9e:cc:58:bf:a1:a1:ec:0e:a7:80:d8:2b:3c:c5:56:2a:2b:83:
         38:46:a2:e3:2c:6a:6e:48:6b:49:78:84:ac:f2:a6:b1:58:be:
         87:47:4f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:53:14 2026 by rpki-client