This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/La0BhNU4VvmgRSm8ubnQEzR2vNo.roa
File:                     La0BhNU4VvmgRSm8ubnQEzR2vNo.roa (raw, json)
Hash identifier:          1zOaGF7LRM3VElFTI+Ny6gzAVWNGd19+/gg7PLSZJBk=
Subject key identifier:   2D:AD:01:84:D5:38:56:F9:A0:45:29:BC:B9:B9:D0:13:34:76:BC:DA
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       019B7A5A9E0AE9A09C6FBB44F8969E4CF46C
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/La0BhNU4VvmgRSm8ubnQEzR2vNo.roa
Signing time:             Thu 01 Jan 2026 16:18:37 +0000
ROA not before:           Thu 01 Jan 2026 16:18:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     21840
IP address blocks:        83.147.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:9e:0a:e9:a0:9c:6f:bb:44:f8:96:9e:4c:f4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Jan  1 16:18:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2dad0184d53856f9a04529bcb9b9d0133476bcda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1f:2f:ca:90:8e:69:19:ed:0e:4f:11:e6:f4:
                    30:98:5f:a7:85:0c:b6:2b:a9:80:a0:0c:0c:f7:48:
                    07:80:fb:87:94:88:83:ad:22:e8:5c:fa:b0:4d:9a:
                    a2:04:25:f8:e1:8b:e6:90:7e:e7:b6:61:19:c9:37:
                    7f:66:14:4b:01:fe:43:bd:c3:9a:02:1f:97:ee:29:
                    8e:16:ce:c7:77:b3:7e:a3:af:f1:ee:32:71:08:a2:
                    5e:0d:b3:1d:d4:f1:fd:b3:2f:6d:77:9a:71:65:91:
                    23:29:bd:49:4d:55:f5:eb:de:ed:8f:71:e7:71:42:
                    0d:6a:17:c1:8c:c2:06:13:39:32:dc:7a:6a:08:f4:
                    92:73:1d:db:bb:46:bd:2d:60:84:66:30:ba:bd:e5:
                    4e:a7:82:be:39:4a:9e:ec:2e:50:1d:07:6e:60:58:
                    80:ac:0c:1c:6e:27:9f:3a:90:d3:18:84:50:57:56:
                    46:8e:fa:9a:2e:cf:3c:55:6a:10:36:4a:09:41:3b:
                    91:43:2b:41:75:04:57:77:44:b7:9b:7f:4c:97:d4:
                    19:87:e9:4e:47:26:92:5a:57:7e:03:15:5d:de:89:
                    f9:7d:bd:ba:7a:89:ea:dc:a3:1f:5a:c8:98:8e:89:
                    85:76:ab:33:38:5b:15:1a:b8:d7:0a:f4:6b:10:7d:
                    4f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AD:01:84:D5:38:56:F9:A0:45:29:BC:B9:B9:D0:13:34:76:BC:DA
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/La0BhNU4VvmgRSm8ubnQEzR2vNo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:54:d5:e6:87:35:4c:7a:8c:e7:e8:d0:bb:bb:a0:a7:70:cc:
         42:9f:0f:0c:73:a0:b1:17:02:e0:62:40:40:0f:26:36:01:a9:
         0b:8b:de:75:23:60:57:06:f7:00:a7:16:80:e1:99:cc:ce:e5:
         ef:27:ef:57:46:2b:29:92:bb:84:88:2f:95:de:e3:31:9a:b0:
         06:26:83:9d:5d:f7:43:f4:b4:23:7a:13:5b:7c:50:4e:06:36:
         4d:a4:47:ab:b2:b0:5c:d4:48:12:8f:7b:a3:2b:2a:02:12:59:
         15:50:3c:fc:ca:cb:82:c2:4c:15:84:1c:ab:51:92:23:ce:26:
         85:ac:cc:f5:1e:01:5d:04:ab:6a:6b:cb:12:b6:fa:17:48:16:
         f3:95:0a:83:d9:e3:01:a9:48:d8:4b:f0:a0:fd:e8:dc:63:1e:
         35:8f:a7:35:e2:04:3f:47:ae:c4:2b:de:07:79:46:ee:55:b3:
         3e:cc:1a:37:f7:0c:fc:1a:7d:62:50:00:f8:e1:39:5e:31:af:
         9e:e6:71:03:61:20:dd:ea:36:e3:e8:51:d2:32:51:c6:74:82:
         bf:ee:75:91:8f:65:90:1a:f8:e6:cd:ae:2f:86:69:39:6e:d4:
         d5:d0:57:6e:e0:ca:4b:8a:40:47:b1:29:16:57:b9:2e:2a:e8:
         4b:0e:f7:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6Wp4K6aCcb7tE+JaeTPRsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjYwMTAxMTYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGFkMDE4NGQ1Mzg1NmY5YTA0NTI5YmNiOWI5ZDAxMzM0NzZiY2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx8vypCOaRntDk8R5vQwmF+nhQy2
K6mAoAwM90gHgPuHlIiDrSLoXPqwTZqiBCX44YvmkH7ntmEZyTd/ZhRLAf5DvcOa
Ah+X7imOFs7Hd7N+o6/x7jJxCKJeDbMd1PH9sy9td5pxZZEjKb1JTVX1697tj3Hn
cUINahfBjMIGEzky3HpqCPSScx3bu0a9LWCEZjC6veVOp4K+OUqe7C5QHQduYFiA
rAwcbiefOpDTGIRQV1ZGjvqaLs88VWoQNkoJQTuRQytBdQRXd0S3m39Ml9QZh+lO
RyaSWld+AxVd3on5fb26eonq3KMfWsiYjomFdqszOFsVGrjXCvRrEH1P6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC2tAYTVOFb5oEUpvLm50BM0drzaMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvTGEwQmhOVTRWdm1nUlNtOHViblFFelIydk5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU5M+MA0G
CSqGSIb3DQEBCwUAA4IBAQCrVNXmhzVMeozn6NC7u6CncMxCnw8Mc6CxFwLgYkBA
DyY2AakLi951I2BXBvcApxaA4ZnMzuXvJ+9XRispkruEiC+V3uMxmrAGJoOdXfdD
9LQjehNbfFBOBjZNpEersrBc1EgSj3ujKyoCElkVUDz8ysuCwkwVhByrUZIjziaF
rMz1HgFdBKtqa8sStvoXSBbzlQqD2eMBqUjYS/Cg/ejcYx41j6c14gQ/R67EK94H
eUbuVbM+zBo39wz8Gn1iUAD44TleMa+e5nEDYSDd6jbj6FHSMlHGdIK/7nWRj2WQ
Gvjmza4vhmk5btTV0Fdu4MpLikBHsSkWV7kuKuhLDvct
-----END CERTIFICATE-----
Generated at Tue Jan 20 12:51:50 2026 by rpki-client