This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/Lijwv8ed8pOLySWZZGE9d68r6MQ.roa
File:                     Lijwv8ed8pOLySWZZGE9d68r6MQ.roa (raw, json)
Hash identifier:          9P+vvVo2WGEbeXwE6ljHBigsAywfbwq49GCsuySXDx4=
Subject key identifier:   2E:28:F0:BF:C7:9D:F2:93:8B:C9:25:99:64:61:3D:77:AF:2B:E8:C4
Certificate issuer:       /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Certificate serial:       019B7CEDF6AEF294E97605AFCB06A640B343
Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/Lijwv8ed8pOLySWZZGE9d68r6MQ.roa
Signing time:             Fri 02 Jan 2026 04:18:48 +0000
ROA not before:           Fri 02 Jan 2026 04:18:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50597
IP address blocks:        185.180.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 19:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:f6:ae:f2:94:e9:76:05:af:cb:06:a6:40:b3:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
        Validity
            Not Before: Jan  2 04:18:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2e28f0bfc79df2938bc9259964613d77af2be8c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dc:8d:f4:1f:8b:c0:93:fd:08:08:d9:66:9b:
                    bb:44:41:f1:8c:3b:30:f4:99:de:31:a4:ad:28:17:
                    d7:b2:09:72:2a:f1:a1:94:c0:42:70:29:2c:d3:25:
                    b6:44:75:83:b1:db:21:e9:fb:2f:6d:73:e7:da:d7:
                    ef:a9:85:17:b8:31:11:a1:79:43:00:94:d2:2c:df:
                    ed:99:38:14:f2:b9:78:f0:92:fc:29:af:12:4b:07:
                    bd:08:6e:0b:54:5e:d3:f5:de:d8:22:c1:03:95:45:
                    34:d5:57:5d:7c:17:ff:98:01:14:fc:58:33:b4:8a:
                    22:f9:a0:69:6d:7f:e4:4b:76:48:1b:40:51:24:9d:
                    b8:d6:21:41:62:a0:de:e4:59:df:66:5e:ea:c7:60:
                    1f:9f:9b:89:ad:11:7e:5f:ea:d4:3c:2a:23:19:ee:
                    d5:a2:5c:c8:a0:a3:c7:ed:ea:b5:e5:46:e1:92:68:
                    e0:8b:a5:ab:b5:8a:e6:c9:e7:42:b3:5d:ba:c4:de:
                    59:7c:f1:0c:01:a7:b8:4b:36:51:d5:2d:9c:0f:c0:
                    8c:60:50:a1:7b:f6:a8:00:3a:47:3e:a7:f7:16:97:
                    79:b9:fb:3d:d0:d8:d1:bc:30:c3:cb:50:09:b6:f7:
                    ec:e4:ed:fd:87:3d:0f:61:b0:22:77:2e:f6:ce:25:
                    0e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:28:F0:BF:C7:9D:F2:93:8B:C9:25:99:64:61:3D:77:AF:2B:E8:C4
            X509v3 Authority Key Identifier:
                keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/Lijwv8ed8pOLySWZZGE9d68r6MQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.180.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:29:5b:61:89:ee:b9:71:26:02:e0:ad:db:46:df:40:ed:df:
         2a:28:bb:14:cf:68:ac:2a:3c:a3:0e:a2:29:5a:85:41:4e:50:
         b9:9b:42:a7:ba:2c:ab:62:cb:e4:18:e9:5f:60:a0:8d:a4:8f:
         5c:93:d8:62:b6:4c:51:11:7d:61:81:c1:d0:b4:c3:7e:77:b3:
         a0:dd:9c:9e:e6:8f:9c:60:a0:23:87:fc:37:8d:42:61:22:96:
         6a:15:c5:82:37:11:56:d2:3d:a7:25:d4:5d:a2:6d:bc:ec:8a:
         45:57:17:f6:31:71:05:2e:4c:9f:bd:f0:13:34:7b:94:89:1e:
         9d:ae:74:5f:18:f2:1c:96:12:69:ef:46:e0:ea:f2:77:b5:23:
         b0:97:a0:77:a9:10:62:2b:8d:f8:04:b1:8f:2f:4a:1a:c3:12:
         30:2b:bd:5c:77:c1:87:b7:8c:89:ba:d4:9b:76:f8:73:dd:07:
         85:da:54:f0:5f:43:39:b0:bc:61:c9:92:1c:99:b3:36:1a:2c:
         55:6a:79:8c:17:9b:66:20:50:46:af:92:6a:f3:09:29:09:41:
         bc:e0:a7:f0:76:2c:f5:0c:9a:7e:96:07:5f:db:23:1e:2d:2f:
         29:82:9a:7a:44:50:46:86:8c:1f:67:29:41:0b:9b:90:dc:f5:
         62:90:d0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 04:47:44 2026 by rpki-client