This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/lNbG4oNSHogZj9bUCOksl3sIiCU.roa
File:                     lNbG4oNSHogZj9bUCOksl3sIiCU.roa (raw, json)
Hash identifier:          QBwKLCWTanLfjj9Ldl11eqQ5vT6OMeNXavMPoAXGH4g=
Subject key identifier:   94:D6:C6:E2:83:52:1E:88:19:8F:D6:D4:08:E9:2C:97:7B:08:88:25
Certificate issuer:       /CN=e3958384e346956a00663a565507b96f14cc0973
Certificate serial:       019B7A5AF5EF0D743AC76500EBE7A73C5D91
Authority key identifier: E3:95:83:84:E3:46:95:6A:00:66:3A:56:55:07:B9:6F:14:CC:09:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/lNbG4oNSHogZj9bUCOksl3sIiCU.roa
Signing time:             Thu 01 Jan 2026 16:18:59 +0000
ROA not before:           Thu 01 Jan 2026 16:18:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212131
IP address blocks:        194.9.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:f5:ef:0d:74:3a:c7:65:00:eb:e7:a7:3c:5d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3958384e346956a00663a565507b96f14cc0973
        Validity
            Not Before: Jan  1 16:18:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=94d6c6e283521e88198fd6d408e92c977b088825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d5:60:56:3b:d3:8d:54:d4:1b:ed:72:46:a6:
                    cb:5b:31:29:9d:ab:14:ea:3c:86:b3:3d:94:4f:e7:
                    7a:06:ff:92:75:93:5a:64:ce:28:30:de:da:2d:86:
                    bd:d6:3e:11:8e:5a:5d:5c:d9:d9:b3:5e:d9:21:90:
                    b0:63:cb:27:49:a1:08:e4:ac:79:96:9a:da:6e:53:
                    03:0f:9d:17:ec:c1:77:81:e2:a3:10:a0:41:c7:a1:
                    47:a9:0f:78:b0:7b:38:4c:36:2c:74:da:3a:f4:09:
                    ee:12:ea:f3:2f:21:b8:13:cb:61:17:cf:b3:31:29:
                    1e:d6:19:80:4d:be:36:eb:40:dd:2f:82:55:4e:eb:
                    dc:27:b9:3c:36:ce:25:85:c5:9a:60:ed:96:03:74:
                    70:93:0e:f6:11:89:86:b5:fc:72:3a:3a:c0:6c:06:
                    bb:b5:73:c2:8f:bd:17:09:75:3f:80:1c:1a:91:f0:
                    39:b2:ac:6d:51:3e:1a:ea:73:69:07:6a:db:da:53:
                    89:f5:65:54:d6:c3:be:90:9a:3f:a4:34:b4:f7:12:
                    a3:4a:c6:44:43:57:3c:4a:70:92:da:85:13:6d:9d:
                    b0:86:6c:60:82:f6:45:07:10:28:b9:eb:f4:fc:ec:
                    29:13:5e:3e:2e:47:6e:a3:f3:e2:d2:5f:bd:dd:88:
                    f3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D6:C6:E2:83:52:1E:88:19:8F:D6:D4:08:E9:2C:97:7B:08:88:25
            X509v3 Authority Key Identifier:
                keyid:E3:95:83:84:E3:46:95:6A:00:66:3A:56:55:07:B9:6F:14:CC:09:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/lNbG4oNSHogZj9bUCOksl3sIiCU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.9.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:a3:43:02:cf:33:f4:f7:1c:07:23:5c:d4:46:8c:32:28:31:
         9f:f1:72:a6:cb:e2:a5:ce:14:c5:00:4b:3c:12:ba:f5:74:fb:
         99:79:e1:24:a8:4c:f2:39:db:81:42:f8:e7:15:e0:0f:56:aa:
         de:8e:74:a2:23:7f:ac:7a:2a:b3:8b:0b:47:c3:73:1d:4f:c4:
         69:9a:fd:c3:85:f8:4a:d3:b0:86:ce:6a:ff:5f:bc:39:86:6c:
         36:c3:36:1e:f0:a0:ed:6c:f8:e3:49:ee:26:70:a8:48:15:e0:
         75:5c:31:80:1b:a8:78:f6:d6:60:80:16:69:14:1a:88:b8:72:
         20:75:13:4d:b8:03:1c:01:7a:48:45:a6:84:ef:75:53:e1:94:
         44:5d:cd:37:44:b4:86:82:03:10:28:2c:eb:32:f4:d1:fe:61:
         82:f2:eb:aa:8b:64:5d:2a:3e:15:99:32:31:30:fd:e1:8b:21:
         56:d6:e0:7b:fa:31:4f:18:51:ff:32:0d:87:69:3f:2e:ad:cb:
         8a:59:b6:dc:53:ea:1f:7b:06:10:32:18:5f:9a:bd:e5:79:83:
         1a:7d:a3:04:83:33:c3:f7:29:43:63:d1:07:69:17:99:a1:22:
         cf:e9:cf:75:65:3c:ae:64:83:2f:ec:42:d6:44:1d:f2:a0:f8:
         e8:36:58:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:34 2026 by rpki-client