This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/LVeS85DfebbtBcAsMZC_wog4u10.roa
File:                     LVeS85DfebbtBcAsMZC_wog4u10.roa (raw, json)
Hash identifier:          A1rVGsYR8Sw3aAlxQ52458EV4JvWNk3L8x2i96mTExo=
Subject key identifier:   2D:57:92:F3:90:DF:79:B6:ED:05:C0:2C:31:90:BF:C2:88:38:BB:5D
Certificate issuer:       /CN=1abe5eecb23af569aa701a7ab16cf7ac1f90f960
Certificate serial:       019B7C1101CE6187C7F649F7843CABA13F61
Authority key identifier: 1A:BE:5E:EC:B2:3A:F5:69:AA:70:1A:7A:B1:6C:F7:AC:1F:90:F9:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/LVeS85DfebbtBcAsMZC_wog4u10.roa
Signing time:             Fri 02 Jan 2026 00:17:27 +0000
ROA not before:           Fri 02 Jan 2026 00:17:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50989
IP address blocks:        193.104.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:11:01:ce:61:87:c7:f6:49:f7:84:3c:ab:a1:3f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1abe5eecb23af569aa701a7ab16cf7ac1f90f960
        Validity
            Not Before: Jan  2 00:17:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2d5792f390df79b6ed05c02c3190bfc28838bb5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:16:f1:3d:53:42:e7:7c:23:14:a3:27:1c:20:
                    b5:f9:9a:d9:b4:d9:8f:6f:e9:e9:46:7e:10:7d:cc:
                    88:08:c3:9a:5f:99:78:a1:fb:33:b2:f5:85:20:85:
                    73:e1:ca:23:e4:04:09:63:d2:91:73:1e:56:49:5a:
                    13:66:24:7d:38:e8:0e:ae:cb:92:6c:b5:8b:44:33:
                    b1:f3:28:86:ee:13:22:ad:ff:de:70:c0:dc:40:ad:
                    4f:41:19:9f:4d:85:5e:ca:50:17:6a:38:ee:59:fe:
                    1a:2d:18:22:44:e3:42:e1:fc:bd:6a:fe:7e:a0:65:
                    48:0a:fa:2b:29:94:63:53:fe:b8:dc:51:7c:a9:2d:
                    3d:cf:68:b7:22:af:59:01:6d:fd:51:dd:c9:90:b9:
                    b7:c9:eb:3e:50:55:f7:e6:57:b1:a7:02:cf:7e:59:
                    5d:00:eb:02:83:7e:f4:32:ab:e6:89:2b:90:f6:2f:
                    cf:39:21:34:54:28:87:51:27:18:9b:ef:1e:a5:a7:
                    1a:c5:7e:bc:07:ce:b0:bf:8e:3b:d5:3d:ff:5f:b2:
                    38:2a:1f:db:eb:05:96:ed:87:ba:31:c4:7e:62:d8:
                    a9:94:ff:34:76:52:98:bb:2c:3d:e3:a8:27:36:22:
                    70:c4:d5:96:82:f0:74:6b:32:68:e5:cb:18:e9:c5:
                    34:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:57:92:F3:90:DF:79:B6:ED:05:C0:2C:31:90:BF:C2:88:38:BB:5D
            X509v3 Authority Key Identifier:
                keyid:1A:BE:5E:EC:B2:3A:F5:69:AA:70:1A:7A:B1:6C:F7:AC:1F:90:F9:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/LVeS85DfebbtBcAsMZC_wog4u10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:19:1e:73:91:be:8d:eb:17:a1:2e:1b:b1:8e:f8:bd:7e:cd:
         87:36:46:16:06:f5:69:5c:88:c2:c7:3e:c0:89:a8:8e:ee:e0:
         33:6a:2d:bc:43:1f:e8:23:6e:6b:9c:29:15:62:13:94:e0:07:
         52:1a:8c:0c:28:ba:46:d9:26:1a:d1:07:7f:9b:8d:0e:9e:60:
         0e:b2:2b:7e:43:a9:06:60:67:03:55:26:92:d1:40:1e:7a:d4:
         2d:33:74:43:5e:51:3b:a8:6e:6d:c1:6f:ce:f6:26:a0:1c:f7:
         a1:d6:e8:93:21:68:ee:cc:ab:e9:be:71:8c:69:68:a0:4c:89:
         a4:31:38:20:fb:55:ea:11:70:2b:e6:da:c6:28:b8:3c:a8:a6:
         b8:7b:8c:1d:e2:7c:e1:47:94:21:a9:4e:0f:16:85:2f:ad:3c:
         27:87:82:25:61:5b:b1:37:b8:19:35:4d:88:b2:52:1d:b3:b9:
         9a:1b:5c:cc:04:83:53:83:4e:84:78:25:15:0d:64:4f:35:4e:
         38:c7:e4:75:c4:7c:6e:38:31:9e:88:5f:d9:59:6e:c0:7f:3a:
         8b:c6:83:76:ac:e6:45:50:db:da:d5:6a:06:fb:53:63:52:d8:
         c9:7e:79:3c:da:b1:4c:a8:e9:9a:39:56:49:99:ca:6f:63:f9:
         7e:f8:e6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 06:19:34 2026 by rpki-client