This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/lnT80rw_Ryd-z_u4DO17nxl0A5w.roa
File:                     lnT80rw_Ryd-z_u4DO17nxl0A5w.roa (raw, json)
Hash identifier:          wdCITiVG5nvublaggiVZXX2U+oaT1yDZ4/O9JgAyQzQ=
Subject key identifier:   96:74:FC:D2:BC:3F:47:27:7E:CF:FB:B8:0C:ED:7B:9F:19:74:03:9C
Certificate issuer:       /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial:       019B775892AFAE4ECBBC64B52428D9B33302
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/lnT80rw_Ryd-z_u4DO17nxl0A5w.roa
Signing time:             Thu 01 Jan 2026 02:17:32 +0000
ROA not before:           Thu 01 Jan 2026 02:17:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9009
IP address blocks:        93.177.112.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:92:af:ae:4e:cb:bc:64:b5:24:28:d9:b3:33:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
        Validity
            Not Before: Jan  1 02:17:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9674fcd2bc3f47277ecffbb80ced7b9f1974039c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f0:45:ba:89:9a:a6:f5:99:49:84:6e:7a:94:
                    54:87:90:13:1e:15:39:17:18:66:31:be:da:df:f4:
                    c8:1b:b0:53:db:66:ca:64:0e:f4:df:7a:ba:71:2b:
                    2b:ba:e9:cc:a8:27:a2:40:a7:1a:6a:f9:77:61:65:
                    27:cd:c9:e5:2f:e2:a6:32:0e:6c:5c:42:a3:a5:10:
                    a6:05:11:00:9e:26:da:4d:47:7d:80:42:3f:67:f2:
                    80:3c:ff:84:b6:d0:4b:ab:11:93:b3:42:bc:04:5b:
                    a3:1f:bc:e1:e9:c7:27:93:29:b1:ab:f1:d8:47:87:
                    2a:bf:94:16:0f:2b:5e:12:8d:46:5e:cf:03:41:99:
                    a3:27:6e:8a:33:f7:64:84:c0:3f:95:ed:95:1e:09:
                    0e:5e:cd:f6:e1:e2:d3:d0:21:52:a3:dc:1e:53:48:
                    3a:68:02:99:dd:2c:8e:22:42:67:05:cf:55:84:70:
                    fb:bf:f8:62:c3:44:1a:0f:5c:a8:e2:bf:da:6f:c4:
                    64:8a:44:d6:38:a6:0b:70:1d:9e:83:6b:8e:7c:36:
                    6c:7d:1d:79:af:a0:59:7b:9f:c3:91:00:de:0a:89:
                    09:ea:61:04:d8:ea:24:13:99:d8:9e:ca:01:48:28:
                    63:e9:cd:0e:6a:bb:e7:f1:75:9c:b6:21:f7:8b:97:
                    74:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:74:FC:D2:BC:3F:47:27:7E:CF:FB:B8:0C:ED:7B:9F:19:74:03:9C
            X509v3 Authority Key Identifier:
                keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/lnT80rw_Ryd-z_u4DO17nxl0A5w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:42:29:a2:36:85:2e:c4:59:be:21:d8:b6:92:ff:6c:55:5e:
         59:54:a2:9c:f3:27:e4:7c:8a:a6:7f:78:2d:21:bf:53:f3:86:
         31:f2:25:fc:fc:f7:26:78:d2:1d:34:86:89:2f:e0:19:1d:60:
         a4:6b:ac:fa:94:3a:2b:e9:b2:b1:8d:d1:99:ea:a4:2a:a8:73:
         f1:8b:87:0e:d6:c5:7e:d5:c5:13:3c:e0:98:a3:d2:94:40:2c:
         1e:8f:a6:c4:b7:1e:d2:09:e8:57:0e:b9:dc:ad:59:6b:28:8f:
         b2:98:c0:c5:76:0c:3a:8b:73:ac:a6:ed:ac:fe:67:12:49:ae:
         ed:ca:d4:e0:21:a7:2d:8e:fc:48:9e:7e:35:d5:64:db:55:66:
         35:f3:14:43:9a:10:e1:32:09:d9:7a:46:6e:6c:01:1e:a3:05:
         f3:ef:13:bc:11:55:1e:17:ff:1d:12:ae:d8:88:27:d1:2d:69:
         12:5d:8f:b5:54:1a:8c:71:0e:dc:7d:c4:5e:f8:18:d5:a1:80:
         f2:eb:a5:7b:23:18:9d:1a:4d:34:d9:19:52:7c:15:05:75:cf:
         57:f7:e7:68:d4:c5:f9:f2:28:b2:99:a4:9b:b3:5e:5e:20:39:
         53:4c:79:be:a7:29:b2:42:89:54:6a:e5:78:f8:bc:36:a5:1d:
         45:1e:f9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:54:46 2026 by rpki-client