This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/LgH1Me-2eqYoL-0zNcmnVpsomrQ.roa
File:                     LgH1Me-2eqYoL-0zNcmnVpsomrQ.roa (raw, json)
Hash identifier:          382IR5KX357ftVcZUNVV6W3Ot0v8DcTQMbqIjY9RuVI=
Subject key identifier:   2E:01:F5:31:EF:B6:7A:A6:28:2F:ED:33:35:C9:A7:56:9B:28:9A:B4
Certificate issuer:       /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial:       019C4EB9ED166D9B6D1B1ECC2A57EF265C95
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/LgH1Me-2eqYoL-0zNcmnVpsomrQ.roa
Signing time:             Wed 11 Feb 2026 22:02:13 +0000
ROA not before:           Wed 11 Feb 2026 22:02:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     7018
IP address blocks:        62.164.224.0/19 maxlen: 20
                          66.9.96.0/20 maxlen: 24
                          66.117.8.0/22 maxlen: 24
                          77.223.192.0/21 maxlen: 24
                          77.223.200.0/23 maxlen: 24
                          79.139.64.0/23 maxlen: 24
                          83.142.200.0/21 maxlen: 24
                          84.247.59.0/24 maxlen: 24
                          86.104.8.0/24 maxlen: 24
                          88.135.96.0/20 maxlen: 24
                          89.34.171.0/24 maxlen: 24
                          89.42.40.0/24 maxlen: 24
                          93.119.184.0/21 maxlen: 24
                          94.26.110.0/23 maxlen: 24
                          94.101.103.0/24 maxlen: 24
                          121.127.48.0/20 maxlen: 24
                          121.127.56.0/21 maxlen: 24
                          168.75.224.0/20 maxlen: 24
                          176.222.48.0/22 maxlen: 24
                          192.200.192.0/19 maxlen: 23
                          194.149.76.0/22 maxlen: 24
                          195.133.202.0/23 maxlen: 24
                          198.14.16.0/20 maxlen: 24
                          198.145.112.0/22 maxlen: 24
                          205.134.244.0/22 maxlen: 24
                          212.32.96.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Feb 2026 07:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:4e:b9:ed:16:6d:9b:6d:1b:1e:cc:2a:57:ef:26:5c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
        Validity
            Not Before: Feb 11 22:02:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2e01f531efb67aa6282fed3335c9a7569b289ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:7a:42:e2:aa:b3:e8:52:76:13:51:7d:cd:
                    00:32:0c:9a:95:85:1b:cb:07:d9:9b:78:0c:7b:51:
                    d8:31:14:7a:59:65:3a:fa:7e:b7:0b:3d:60:3d:b4:
                    19:44:af:7c:ac:17:e3:67:1d:54:c8:25:f2:36:92:
                    92:7d:f8:ea:bd:46:54:04:71:b1:8b:39:1b:6e:7f:
                    e6:af:8b:e5:ed:03:4f:c9:c4:ea:62:e5:66:2c:b6:
                    5f:cc:2e:55:ae:1f:5b:24:a4:22:40:97:91:49:29:
                    00:5b:50:bf:bb:94:e1:a8:a1:ff:49:1f:f2:dc:70:
                    08:0b:6c:93:e5:ce:ce:e1:2c:65:a6:64:99:05:42:
                    a9:d9:cf:70:85:4d:7b:18:34:9d:7a:ef:c9:c0:49:
                    3d:66:0d:62:1c:b8:99:29:1c:2d:7a:2a:d0:7d:fd:
                    e6:fb:12:ef:56:1b:ab:b9:08:f7:11:bc:53:89:f3:
                    b4:9f:90:b6:eb:5d:72:c6:33:7b:4b:75:d1:e7:bb:
                    da:e6:eb:bc:c2:58:70:20:8d:9a:6e:3b:45:9e:9f:
                    51:aa:dd:6a:31:67:ff:c0:91:bc:7d:12:63:ae:35:
                    bb:d6:fd:17:bf:19:57:40:4e:6d:40:98:8d:31:1b:
                    a1:9b:e5:e9:7c:79:01:61:f1:29:e1:9d:70:ef:fb:
                    ce:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:01:F5:31:EF:B6:7A:A6:28:2F:ED:33:35:C9:A7:56:9B:28:9A:B4
            X509v3 Authority Key Identifier:
                keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/LgH1Me-2eqYoL-0zNcmnVpsomrQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.164.224.0/19
                  66.9.96.0/20
                  66.117.8.0/22
                  77.223.192.0-77.223.201.255
                  79.139.64.0/23
                  83.142.200.0/21
                  84.247.59.0/24
                  86.104.8.0/24
                  88.135.96.0/20
                  89.34.171.0/24
                  89.42.40.0/24
                  93.119.184.0/21
                  94.26.110.0/23
                  94.101.103.0/24
                  121.127.48.0/20
                  168.75.224.0/20
                  176.222.48.0/22
                  192.200.192.0/19
                  194.149.76.0/22
                  195.133.202.0/23
                  198.14.16.0/20
                  198.145.112.0/22
                  205.134.244.0/22
                  212.32.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:da:5c:2d:75:86:a3:2f:5a:aa:1c:47:a1:5e:c3:d3:c0:b5:
         1f:9b:7e:dc:f7:01:bd:95:09:6c:a1:ed:d1:97:af:ab:3d:f3:
         6e:da:8a:8a:90:92:9e:e6:7d:8b:43:a6:9a:2f:65:d4:3d:cd:
         f9:4f:e4:4d:a0:e2:64:eb:6a:21:cc:87:5f:a6:b6:b6:23:d8:
         b7:eb:59:7b:e6:2c:99:d8:31:de:85:4b:37:da:45:2b:72:23:
         b9:eb:04:8d:9b:f4:8d:6a:c4:0d:8b:ac:e3:38:fc:a3:e2:5c:
         f5:92:fe:0a:ea:99:7b:d2:3e:db:27:1f:13:fc:6e:c0:63:12:
         ff:24:99:14:e0:9d:cc:98:8b:fe:e9:a8:d4:4e:66:fa:be:eb:
         51:22:13:54:b4:82:b5:9b:af:81:ce:0c:48:61:d4:c7:d1:0e:
         e7:c7:78:f2:0c:a6:a7:ca:58:65:8a:15:52:1c:a4:74:89:2b:
         5d:fb:5f:86:5f:bd:1a:92:d4:90:b0:28:96:75:fd:e2:3b:ef:
         ee:5f:3b:b8:5f:15:97:27:47:d3:8d:ab:d8:a3:a7:af:57:5f:
         8a:47:c1:ee:41:15:8e:79:ab:42:40:97:b6:ec:f5:e3:5f:df:
         c8:d8:c5:16:4e:c7:f5:30:aa:f5:8a:87:73:0d:03:18:87:5e:
         4a:a6:07:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 17:25:51 2026 by rpki-client