This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/LP-962DLDMgpRMI7_mhHbAEeXHI.roa
File:                     LP-962DLDMgpRMI7_mhHbAEeXHI.roa (raw, json)
Hash identifier:          L11irqAmN9Yh9SwUVInvcZWfgHtuDzon2+axE8dju+M=
Subject key identifier:   2C:FF:BD:EB:60:CB:0C:C8:29:44:C2:3B:FE:68:47:6C:01:1E:5C:72
Certificate issuer:       /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial:       019B7EA69739DC3FBB227B2C37E7647E9AB3
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/LP-962DLDMgpRMI7_mhHbAEeXHI.roa
Signing time:             Fri 02 Jan 2026 12:20:05 +0000
ROA not before:           Fri 02 Jan 2026 12:20:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     1820
IP address blocks:        91.247.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 19:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:97:39:dc:3f:bb:22:7b:2c:37:e7:64:7e:9a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
        Validity
            Not Before: Jan  2 12:20:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2cffbdeb60cb0cc82944c23bfe68476c011e5c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c9:cd:a4:c1:75:44:3b:18:6d:d7:02:b9:c4:
                    ae:7a:a4:6c:8f:f4:f9:41:c9:de:a7:c0:d0:ad:45:
                    47:61:4d:06:19:c9:af:a4:ee:cd:c9:72:5d:a1:23:
                    bf:16:e2:15:45:16:ea:cb:ca:a6:a8:6d:7f:e0:b6:
                    73:76:90:a8:30:e6:e2:2f:2d:78:5e:69:8b:64:75:
                    8c:8d:32:5d:30:98:42:01:cb:c2:55:78:56:85:ca:
                    fe:76:68:30:53:b8:f7:e0:8a:e3:e0:d4:c0:b9:c7:
                    18:0b:c9:65:a9:4f:92:09:cf:34:9e:1e:f3:fa:3d:
                    58:38:44:eb:22:2f:dd:89:9b:71:1c:69:4c:18:1d:
                    2d:fc:b6:58:c3:c3:c8:56:06:cb:ef:ea:d4:bc:21:
                    fb:84:b3:d0:9c:9c:da:3a:54:df:45:12:cd:19:cb:
                    52:3a:67:9a:76:5e:75:59:2e:06:cf:dc:21:3c:c7:
                    98:91:31:07:8b:89:7e:ce:c1:96:33:a1:c3:88:79:
                    4d:5e:cb:62:f8:40:4f:47:80:25:3e:99:66:2b:29:
                    fc:b7:6b:ba:e6:61:4f:cf:df:b3:90:ad:a2:99:b7:
                    01:6e:e5:65:94:73:59:df:a7:06:59:f0:a4:e8:a1:
                    b1:0f:71:65:7e:b4:df:93:bb:04:e6:98:b4:6d:86:
                    ca:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FF:BD:EB:60:CB:0C:C8:29:44:C2:3B:FE:68:47:6C:01:1E:5C:72
            X509v3 Authority Key Identifier:
                keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/LP-962DLDMgpRMI7_mhHbAEeXHI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.247.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:43:1a:36:e8:c1:0d:df:07:2a:e9:52:18:db:95:98:6e:7c:
         8f:cc:5c:64:0b:35:02:f8:9b:08:42:9e:1d:ec:b0:5c:05:37:
         78:f3:5e:c0:65:f6:37:ef:0d:60:fa:df:b0:27:22:ee:39:16:
         1d:10:38:84:96:91:61:fd:4e:ab:10:c3:82:3c:e8:71:15:20:
         e4:a8:70:6a:d6:86:a9:89:dc:4f:8e:06:94:a6:1a:ed:0d:72:
         25:0d:30:10:b3:03:a9:87:28:f2:0c:7e:a0:eb:95:0e:62:e8:
         37:39:e5:36:d1:c6:7a:3f:72:f7:c1:d3:c7:03:2f:6e:a3:2c:
         51:ea:29:68:2a:35:28:3a:8b:74:f6:52:41:35:ae:0b:3b:fc:
         57:33:4e:24:8f:aa:ae:1f:eb:59:38:06:18:65:e0:ca:81:34:
         5f:70:d2:6a:f5:3e:93:b3:97:9f:9b:c4:51:38:7f:a2:f9:f6:
         4a:b0:cc:48:63:30:b1:70:1a:ac:a3:5a:8f:eb:13:18:d9:06:
         1b:14:9e:59:a7:e4:ea:84:02:18:07:19:02:f9:c3:f1:d8:d9:
         b3:6c:b6:d8:27:e8:2b:e5:76:75:1c:53:d4:8c:c8:3d:f8:4b:
         28:9d:c7:88:93:15:19:ca:78:c3:50:03:20:74:88:5a:a7:3c:
         b0:d2:9c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 04:50:44 2026 by rpki-client