This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/lnvQS4iYli9A_kevH6oCyIpYWtw.roa
File:                     lnvQS4iYli9A_kevH6oCyIpYWtw.roa (raw, json)
Hash identifier:          bmoigmXfa3QnJV4/SJ7xvA90nWAlR46HO0ApmMZ5rMg=
Subject key identifier:   96:7B:D0:4B:88:98:96:2F:40:FE:47:AF:1F:AA:02:C8:8A:58:5A:DC
Certificate issuer:       /CN=232b798ff76e8d5cec5ba47f7be7832983db3335
Certificate serial:       019B77C740BB7785120909EAE22617CE8303
Authority key identifier: 23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/lnvQS4iYli9A_kevH6oCyIpYWtw.roa
Signing time:             Thu 01 Jan 2026 04:18:25 +0000
ROA not before:           Thu 01 Jan 2026 04:18:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44381
IP address blocks:        195.191.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:40:bb:77:85:12:09:09:ea:e2:26:17:ce:83:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=232b798ff76e8d5cec5ba47f7be7832983db3335
        Validity
            Not Before: Jan  1 04:18:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=967bd04b8898962f40fe47af1faa02c88a585adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f0:df:51:a3:f8:fe:df:11:f8:39:a3:3e:64:
                    ef:ea:3e:10:84:0c:ce:cd:ba:10:49:51:2c:e4:3f:
                    6e:d0:1c:c3:a7:bf:05:23:65:ed:0b:d3:f4:c4:27:
                    21:c1:67:ef:d0:60:97:87:78:84:2c:93:b8:b8:3a:
                    14:b5:36:23:ef:b6:a9:91:20:41:71:e9:bb:01:85:
                    7a:66:56:c9:c6:00:25:e7:35:d7:f5:49:08:ec:7b:
                    e9:28:44:4d:9d:5d:85:8a:89:85:97:39:e7:77:24:
                    fe:60:f6:16:39:d0:7b:cb:2a:68:b0:de:6f:9a:26:
                    36:08:ad:61:a6:f0:02:91:c8:e6:fc:18:06:1e:c1:
                    c0:60:35:ad:2a:c7:f4:1f:14:45:ca:11:d3:5e:d5:
                    65:62:9e:e1:1d:2e:ec:24:0c:68:0f:45:65:24:c2:
                    9d:fb:b9:06:b7:d7:a3:9f:17:54:10:68:1e:25:99:
                    2b:c6:20:5d:3e:75:1e:b6:64:2b:d9:01:8f:fe:0f:
                    96:47:49:11:99:6a:5e:25:b7:32:bf:83:a0:ce:1d:
                    b0:b7:4d:79:a8:d6:5a:5d:0d:e5:a0:6a:c7:86:3d:
                    08:5d:e1:ca:4d:f3:fb:16:a1:33:17:1a:a0:0f:e3:
                    12:e7:f7:d4:86:3e:8a:1a:a2:42:45:3e:46:7c:b0:
                    5d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7B:D0:4B:88:98:96:2F:40:FE:47:AF:1F:AA:02:C8:8A:58:5A:DC
            X509v3 Authority Key Identifier:
                keyid:23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/lnvQS4iYli9A_kevH6oCyIpYWtw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.191.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:9d:26:27:46:cd:51:f6:58:33:c7:3f:98:09:85:a5:8c:38:
         45:ca:e4:48:65:a2:09:57:6c:a3:d6:5a:e6:f7:98:fd:a5:ab:
         27:d4:13:a8:1d:d7:81:37:b6:5a:b6:af:2e:84:eb:74:bf:3e:
         be:8d:97:47:fd:cc:81:c1:ae:4d:f5:bc:2c:3b:d4:96:9f:02:
         5c:d2:34:97:35:60:a1:1f:23:f4:a7:27:aa:33:88:b9:a3:f2:
         3b:95:ff:e3:18:00:ab:0f:49:fd:9d:c6:45:7a:94:37:c8:53:
         53:27:e1:16:8a:ce:cc:fe:b1:e5:d9:72:0a:99:b3:35:72:dc:
         61:76:f2:95:ce:9e:bb:ae:70:44:08:2f:36:0f:a3:f1:c3:ca:
         f8:c1:e5:f2:93:b8:d7:74:08:d8:d1:ff:3d:aa:9a:06:86:f9:
         73:24:2b:f5:62:23:14:b0:95:b5:75:c9:42:5b:de:41:17:a8:
         e3:4c:f5:8b:91:42:99:36:d5:7a:b5:71:65:5e:68:ff:98:3e:
         78:fa:b9:8f:96:62:83:ca:ea:3e:4d:1d:2c:12:6e:26:a5:36:
         62:14:ed:2d:65:b6:bd:c3:3a:09:2f:c1:99:2d:04:67:e6:41:
         8d:8a:58:e6:6e:36:15:3f:b3:ab:73:96:95:13:a6:bc:6f:5d:
         fb:2d:42:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:31:47 2026 by rpki-client