This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/LLHf1llyboYlmMdrimxD-i9OBTA.roa
File:                     LLHf1llyboYlmMdrimxD-i9OBTA.roa (raw, json)
Hash identifier:          FD4h5t5+E9U3hUWnTKbkdjC1oNaGYlXx79R2DfDU7go=
Subject key identifier:   2C:B1:DF:D6:59:72:6E:86:25:98:C7:6B:8A:6C:43:FA:2F:4E:05:30
Certificate issuer:       /CN=7f188adab5b552081ecac821c9b090394873b315
Certificate serial:       019B76EAF132557765A33FA71BFE3E2174D3
Authority key identifier: 7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/LLHf1llyboYlmMdrimxD-i9OBTA.roa
Signing time:             Thu 01 Jan 2026 00:17:47 +0000
ROA not before:           Thu 01 Jan 2026 00:17:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211354
IP address blocks:        185.194.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:f1:32:55:77:65:a3:3f:a7:1b:fe:3e:21:74:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f188adab5b552081ecac821c9b090394873b315
        Validity
            Not Before: Jan  1 00:17:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2cb1dfd659726e862598c76b8a6c43fa2f4e0530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b6:0d:15:5d:71:f7:25:f0:0e:d9:49:5a:b6:
                    42:60:2f:85:e6:82:77:06:a6:66:f0:fb:fb:37:b1:
                    81:de:5a:51:e3:73:c6:69:3c:38:f5:b0:90:ff:9d:
                    5c:dd:44:cd:89:57:c5:89:cf:3f:13:4c:5e:af:fe:
                    db:93:05:1f:c8:c8:54:dd:7c:07:f3:08:9a:18:10:
                    6f:7e:d1:2c:09:eb:d4:9e:b7:20:4b:29:6a:14:64:
                    64:eb:c0:54:d8:c6:75:f6:12:ac:27:57:41:af:b1:
                    47:2f:ef:24:20:69:a0:39:39:55:cb:4f:65:96:fa:
                    08:93:87:fc:07:08:c5:70:55:55:d5:f9:07:9a:ba:
                    92:15:52:6e:99:fd:25:7d:13:c0:63:ae:c7:ee:50:
                    c5:de:64:c8:69:5c:9f:45:a3:37:df:ed:11:dc:7b:
                    06:ce:6a:86:0f:bf:56:38:59:cb:93:ea:93:7a:e5:
                    ce:f5:50:f7:65:58:a2:b0:30:da:77:87:af:15:33:
                    45:ee:24:8a:56:a3:51:53:e4:d5:7c:58:d8:61:24:
                    94:50:5d:ed:7e:9d:b0:61:5d:fd:62:30:40:9b:a9:
                    8a:80:05:81:81:b6:1b:b7:09:d1:79:73:ef:3e:60:
                    5e:f2:a6:c0:63:3b:dd:26:d1:71:f0:2a:89:a1:5c:
                    07:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B1:DF:D6:59:72:6E:86:25:98:C7:6B:8A:6C:43:FA:2F:4E:05:30
            X509v3 Authority Key Identifier:
                keyid:7F:18:8A:DA:B5:B5:52:08:1E:CA:C8:21:C9:B0:90:39:48:73:B3:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxiK2rW1UggeysghybCQOUhzsxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/LLHf1llyboYlmMdrimxD-i9OBTA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a65522-f7c5-487b-b7b8-2e4614141aa4/1/fxiK2rW1UggeysghybCQOUhzsxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.194.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:a9:71:f8:9d:18:ae:3e:a3:f0:96:fb:90:e1:fd:f3:63:63:
         0b:29:54:57:ea:a4:7f:2e:f2:75:25:32:0f:57:76:a8:66:68:
         59:42:03:b0:ab:88:8a:ae:ab:4c:24:5e:c6:64:2a:5c:89:84:
         6a:38:73:a7:f1:91:5f:48:60:7f:ee:f6:b0:ba:03:bb:a6:9b:
         bd:2a:5e:0d:1c:20:c0:a8:ef:1d:b8:3a:d4:63:7b:d4:54:c5:
         51:1b:6b:f1:20:a0:0b:35:bc:17:5c:f2:b2:c9:83:87:f2:2e:
         4e:f0:ba:84:54:49:c9:09:7c:48:e2:b0:4e:42:de:fc:89:10:
         30:1f:94:28:2b:83:5b:dd:ad:09:7d:83:28:0f:c1:c0:f7:1f:
         76:d9:e9:e7:26:44:d8:c3:97:68:6a:74:2a:62:f9:95:47:50:
         0e:1d:39:2e:10:da:76:8b:00:6b:b5:14:83:e6:ff:12:2f:f6:
         de:c0:87:21:30:1b:e2:1d:48:b6:15:da:64:b8:6e:92:98:7f:
         ce:82:d1:22:c3:53:07:39:4c:c3:ae:d0:36:0e:ab:90:de:1e:
         23:1b:fb:b3:35:44:18:d5:ed:d9:49:28:a6:ff:b2:0f:f3:1b:
         e1:1f:83:3f:ba:45:7a:5d:ed:53:6f:68:fa:c3:98:3a:f6:4c:
         4d:0b:0c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:44:25 2026 by rpki-client