This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/Lqur6ZAGNL1ulbCAad6HGsiWQyE.roa
File:                     Lqur6ZAGNL1ulbCAad6HGsiWQyE.roa (raw, json)
Hash identifier:          bghFI/F9IV8PP3AOsFzer9ecqyhiQ6uXbQxrY4jrXXw=
Subject key identifier:   2E:AB:AB:E9:90:06:34:BD:6E:95:B0:80:69:DE:87:1A:C8:96:43:21
Certificate issuer:       /CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Certificate serial:       019C4C153D05E2EF94ABDFFCB8A7D3A43850
Authority key identifier: 42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/Lqur6ZAGNL1ulbCAad6HGsiWQyE.roa
Signing time:             Wed 11 Feb 2026 09:43:06 +0000
ROA not before:           Wed 11 Feb 2026 09:43:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201354
IP address blocks:        2001:67c:8d4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Feb 2026 18:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:4c:15:3d:05:e2:ef:94:ab:df:fc:b8:a7:d3:a4:38:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
        Validity
            Not Before: Feb 11 09:43:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2eababe9900634bd6e95b08069de871ac8964321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ad:6b:fc:88:16:18:75:1d:cc:a9:5b:1d:72:
                    fb:38:b0:97:1e:85:5d:e0:35:68:fd:3c:77:5f:8e:
                    29:be:2b:a2:a8:fa:89:6e:f9:4b:f4:e8:81:a0:97:
                    ac:ff:6c:5f:e5:0c:5d:f4:a1:27:6d:f1:f9:2b:c2:
                    85:6e:a0:06:11:db:e5:f4:26:c5:3f:90:2c:ac:89:
                    53:c6:46:4e:17:c6:c1:32:28:57:c4:7a:c9:3e:89:
                    f8:f4:74:d3:2f:d5:4d:ab:80:06:eb:99:83:5c:cd:
                    30:72:e4:47:c5:46:8e:aa:5f:37:a5:a0:25:43:c4:
                    f2:b6:d7:31:16:7a:15:10:98:9c:47:dd:00:af:da:
                    6d:24:86:30:12:a8:0b:73:13:bd:8e:a2:97:d2:dd:
                    cc:65:49:24:44:c6:cc:35:b6:b2:fa:ca:9f:14:31:
                    13:36:93:59:b9:a4:2d:e4:27:f9:da:1f:22:31:c4:
                    99:13:d7:62:8c:16:09:67:8e:a9:41:d5:46:ce:8a:
                    62:f5:64:ee:0f:70:0c:35:18:f1:ba:bf:ac:8c:3e:
                    10:1f:20:e7:5d:61:6e:ff:04:0a:24:04:42:9e:eb:
                    42:44:df:b6:9f:4f:d7:32:cb:37:6d:60:76:1c:4d:
                    ea:1e:96:fb:1b:75:d1:fa:f3:ea:4b:ff:20:29:c5:
                    64:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AB:AB:E9:90:06:34:BD:6E:95:B0:80:69:DE:87:1A:C8:96:43:21
            X509v3 Authority Key Identifier:
                keyid:42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/Lqur6ZAGNL1ulbCAad6HGsiWQyE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:8d4::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:a7:66:ce:e3:08:20:b7:24:75:bd:4e:62:84:7f:8c:eb:5d:
         5e:b2:85:41:51:48:8d:1b:8e:01:dd:bf:92:37:df:6a:0f:39:
         4a:0c:05:26:22:74:c7:2a:29:02:1f:38:34:57:7f:40:bd:05:
         80:cd:8a:99:e2:53:91:4e:fd:7d:28:75:58:4f:91:ed:ac:8f:
         78:15:9b:18:0c:56:16:ab:0b:f6:27:f1:28:5f:15:fb:3c:a4:
         d1:da:23:a4:3e:c7:65:99:d7:8f:8d:de:74:e0:87:b4:41:14:
         ac:79:6f:5b:34:b2:79:97:d5:66:fa:13:dd:6a:90:8d:e6:7e:
         90:0e:72:26:ad:ff:82:9b:59:e6:51:b5:14:5c:bf:bb:7c:d9:
         b7:e8:47:5b:55:78:b3:b1:86:62:e8:d5:fc:72:3c:ef:ca:45:
         36:61:5d:45:88:ea:10:2e:80:56:bd:ed:f3:09:5c:e5:13:d0:
         0b:d5:34:6b:18:47:cc:82:df:e2:4c:ce:63:4e:3d:88:c2:8c:
         5c:fa:6c:5a:4f:2c:63:4d:a8:ab:20:33:29:30:17:fa:c8:d2:
         af:91:2a:35:a6:33:44:4b:35:3c:10:fb:93:52:b3:d4:42:4f:
         9f:6a:ad:4b:21:44:03:e5:3c:e2:52:3c:e6:b9:40:d1:28:9c:
         e4:ad:35:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 04:15:03 2026 by rpki-client