This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/LASCfdMWoE20CF7WDK1PIh4LaTI.roa
File:                     LASCfdMWoE20CF7WDK1PIh4LaTI.roa (raw, json)
Hash identifier:          rIpKOSzr2MEm9EPCffOjAkuNKQPPOYskeo9lWvqTyOo=
Subject key identifier:   2C:04:82:7D:D3:16:A0:4D:B4:08:5E:D6:0C:AD:4F:22:1E:0B:69:32
Certificate issuer:       /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial:       019B7EA56135A19714B73462F87AFA058F67
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/LASCfdMWoE20CF7WDK1PIh4LaTI.roa
Signing time:             Fri 02 Jan 2026 12:18:46 +0000
ROA not before:           Fri 02 Jan 2026 12:18:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51903
IP address blocks:        195.26.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a5:61:35:a1:97:14:b7:34:62:f8:7a:fa:05:8f:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
        Validity
            Not Before: Jan  2 12:18:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2c04827dd316a04db4085ed60cad4f221e0b6932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:08:e0:ee:32:a5:66:96:d5:12:e7:ef:e8:
                    5e:64:52:b2:6f:e1:7c:38:43:90:70:7b:7d:9e:d0:
                    1b:f7:f7:fb:50:b8:f4:54:ab:52:aa:57:6a:8d:33:
                    c5:e8:22:88:17:18:1f:5b:8d:82:89:f9:54:fd:9a:
                    9c:80:93:1e:0e:29:c9:1f:6d:ce:e7:dd:73:ac:ec:
                    03:c3:ec:57:e5:14:ab:7d:aa:cc:3b:d5:cd:0d:f8:
                    8d:48:07:9c:c8:d2:f9:6e:0f:86:2b:c3:a6:32:47:
                    ac:8d:65:e8:0d:34:a7:1f:77:65:42:21:d2:55:b7:
                    c5:53:08:1b:67:55:dd:e2:2e:0a:d4:c8:f9:15:87:
                    88:c2:9f:3c:4e:79:8c:07:e5:c7:c5:f6:d9:7a:98:
                    6d:4d:e2:37:fd:c2:81:5b:80:e6:99:fc:fa:c7:69:
                    eb:9a:e7:06:98:f9:95:fc:19:1a:77:0b:3c:03:5f:
                    54:46:14:95:e9:9a:86:8c:9f:8d:1f:39:06:82:cb:
                    2d:ef:28:33:b7:0b:66:63:99:0a:7c:ae:99:6d:38:
                    04:01:5d:a6:5e:6e:bd:39:79:93:06:c8:e4:b6:67:
                    c9:da:2d:60:2d:e0:03:9f:80:b0:09:af:ab:57:7d:
                    00:48:4f:8c:f1:68:2b:8b:3e:6a:f5:0d:bc:1d:fa:
                    3c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:04:82:7D:D3:16:A0:4D:B4:08:5E:D6:0C:AD:4F:22:1E:0B:69:32
            X509v3 Authority Key Identifier:
                keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/LASCfdMWoE20CF7WDK1PIh4LaTI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.26.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:8b:d5:be:34:b3:d4:08:6c:3a:e3:a2:d8:6b:b7:f1:aa:6f:
         5d:79:c5:35:bc:34:22:67:32:de:23:ec:e5:7d:4d:4a:4a:64:
         0f:14:73:64:1c:b9:c3:7c:aa:ba:5d:e4:be:02:f8:60:5f:9b:
         f1:03:31:19:4e:9f:44:74:12:fb:2d:42:ce:21:43:62:13:07:
         43:49:21:1b:9a:89:ec:4e:f5:fd:9a:ee:68:96:76:88:2b:21:
         14:96:38:a9:bc:f3:1a:b7:d8:18:14:a4:fa:2b:b2:ec:fe:0a:
         b6:32:50:e8:8d:96:6b:3f:c0:15:fa:7c:f6:2c:fe:ab:e9:04:
         ff:0b:8c:ab:26:d4:46:de:05:b8:f3:a9:64:15:2e:58:6a:4e:
         1d:93:69:cc:dd:11:2d:5a:ba:87:15:a7:be:8a:6c:4e:79:0d:
         4c:83:a9:55:a1:11:15:7c:3c:02:b5:1e:12:c0:ca:25:fc:68:
         67:b4:93:fe:b0:37:aa:73:c4:3c:69:72:d7:9b:e2:8f:76:42:
         b1:c2:fa:26:f7:2d:bf:4a:11:83:ed:c4:8b:d2:74:1d:77:08:
         1f:3a:41:96:85:72:7d:8b:68:e5:82:14:6c:0a:60:c4:ab:7a:
         30:cc:de:18:7b:ca:98:5a:70:72:6e:ff:51:95:4f:ab:76:46:
         a7:3b:a7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:14:06 2026 by rpki-client