This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/lccfsoW3vR6R_hPtm9uXpAiVavE.roa
File:                     lccfsoW3vR6R_hPtm9uXpAiVavE.roa (raw, json)
Hash identifier:          6tcCfZjYESMQ8pyCtnpM2RFHSDWt8Iyew4zedOU08ls=
Subject key identifier:   95:C7:1F:B2:85:B7:BD:1E:91:FE:13:ED:9B:DB:97:A4:08:95:6A:F1
Certificate issuer:       /CN=78878edda6ae4a0147db70b66105cfd17f2066a3
Certificate serial:       019B7BA432C4C13CAEDA2FE7A1AF506F02A6
Authority key identifier: 78:87:8E:DD:A6:AE:4A:01:47:DB:70:B6:61:05:CF:D1:7F:20:66:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/lccfsoW3vR6R_hPtm9uXpAiVavE.roa
Signing time:             Thu 01 Jan 2026 22:18:37 +0000
ROA not before:           Thu 01 Jan 2026 22:18:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     680
IP address blocks:        149.205.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 01:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:32:c4:c1:3c:ae:da:2f:e7:a1:af:50:6f:02:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78878edda6ae4a0147db70b66105cfd17f2066a3
        Validity
            Not Before: Jan  1 22:18:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=95c71fb285b7bd1e91fe13ed9bdb97a408956af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:65:71:86:54:63:69:b8:94:73:f3:03:a5:d7:
                    c2:7c:b3:ca:39:7d:d1:67:59:d0:87:4f:c8:58:bd:
                    89:3c:33:c7:c2:a2:43:c1:54:34:b6:bf:a5:11:a0:
                    23:54:4c:f8:fe:e5:71:9a:db:60:bf:43:81:d8:d7:
                    fd:9d:14:da:2f:f7:ac:e4:32:bd:00:b5:65:43:2f:
                    66:da:35:f2:dc:01:5e:c9:25:7c:a8:48:4c:d9:8d:
                    cb:a4:6e:45:6b:5b:ac:a2:f2:84:f9:8f:ed:a4:7c:
                    fd:78:c5:ee:e9:9d:51:2f:33:e0:2a:4e:76:81:d1:
                    13:61:55:f8:60:3e:b7:c7:82:15:ac:fb:5b:ef:e7:
                    a3:93:a2:c7:d5:d2:de:37:1a:bf:45:cf:c0:61:c2:
                    c3:b2:96:04:18:e5:96:9c:52:ee:ff:3d:95:24:9f:
                    95:b2:25:a3:da:20:b1:ed:c9:46:c8:54:98:ce:2c:
                    38:f5:3c:de:76:54:61:9d:bd:14:16:cf:d0:4b:a2:
                    ef:76:bb:33:82:7a:96:58:e4:70:d1:e4:6f:79:59:
                    48:03:44:f0:c3:84:ec:c5:55:1a:51:4c:1a:93:94:
                    ec:0d:95:ee:0e:3c:52:af:87:8b:14:27:07:9c:40:
                    21:60:5b:67:76:aa:3d:4a:cd:d4:25:e3:73:28:6c:
                    7a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C7:1F:B2:85:B7:BD:1E:91:FE:13:ED:9B:DB:97:A4:08:95:6A:F1
            X509v3 Authority Key Identifier:
                keyid:78:87:8E:DD:A6:AE:4A:01:47:DB:70:B6:61:05:CF:D1:7F:20:66:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/lccfsoW3vR6R_hPtm9uXpAiVavE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.205.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8b:d4:8b:bb:54:d4:15:24:7b:67:f9:48:cd:36:9e:32:3b:a1:
         17:6f:1f:ee:2f:ef:26:1a:f5:3c:0e:e2:b0:bc:63:49:8e:36:
         b3:1c:13:55:14:b5:13:f6:7c:cb:93:cc:e9:c2:12:5c:d8:f1:
         ee:13:d3:79:43:45:bf:f2:36:25:2d:a1:af:57:ac:6b:0c:02:
         d9:41:ef:46:b5:f9:ad:9c:72:62:dd:8c:42:51:52:41:8c:44:
         8b:5a:4d:2a:df:83:81:e7:1b:f5:74:e1:de:61:5b:4f:ee:d2:
         b4:f0:8d:8b:54:b5:34:ea:ff:24:49:44:4a:6e:cc:fc:49:87:
         cf:8c:17:e8:65:2d:b9:ec:8f:cd:06:2c:6e:37:eb:97:98:78:
         4b:c1:3b:47:45:83:37:12:90:af:73:c6:5e:5f:c2:9a:33:9e:
         65:ad:1b:2a:da:82:f8:56:f2:5a:a1:4e:a7:04:dc:d1:8b:e6:
         1c:b4:9f:b5:5d:70:53:e6:53:9d:fa:eb:ca:5a:3b:79:8b:9d:
         da:e7:f3:8c:16:d3:27:95:55:1e:0e:dc:c6:10:b9:c4:75:fa:
         f6:66:d3:3c:92:15:55:fe:81:50:a6:82:1a:81:f6:0b:ec:be:
         6f:6f:60:6f:91:a7:c1:27:1f:b1:30:d9:6d:92:3d:c8:de:94:
         f1:27:21:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 11:25:37 2026 by rpki-client