This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LG48CU30hLk1-D_XATLf7bX_3Rg.roa
File:                     LG48CU30hLk1-D_XATLf7bX_3Rg.roa (raw, json)
Hash identifier:          NhPTPuk8Ihcqm9NrmrwypD1GGOXWhTlQ/Ic9+eI1nzU=
Subject key identifier:   2C:6E:3C:09:4D:F4:84:B9:35:F8:3F:D7:01:32:DF:ED:B5:FF:DD:18
Certificate issuer:       /CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Certificate serial:       019B76EB31EA9DB69BB6C257C68D0DEB03E4
Authority key identifier: 2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LG48CU30hLk1-D_XATLf7bX_3Rg.roa
Signing time:             Thu 01 Jan 2026 00:18:03 +0000
ROA not before:           Thu 01 Jan 2026 00:18:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29545
IP address blocks:        86.111.32.0/21 maxlen: 21
                          86.111.36.0/24 maxlen: 24
                          86.111.37.0/24 maxlen: 24
                          86.111.38.0/24 maxlen: 24
                          86.111.39.0/24 maxlen: 24
                          86.111.40.0/22 maxlen: 22
                          86.111.40.0/24 maxlen: 24
                          86.111.41.0/24 maxlen: 24
                          86.111.50.0/23 maxlen: 23
                          86.111.50.0/24 maxlen: 24
                          213.163.229.0/24 maxlen: 24
                          213.163.232.0/24 maxlen: 24
                          213.163.233.0/24 maxlen: 24
                          213.163.238.0/24 maxlen: 24
                          213.163.242.0/23 maxlen: 23
                          213.163.244.0/23 maxlen: 23
                          213.163.254.0/24 maxlen: 24
                          2a00:1f88::/32 maxlen: 32
                          2a00:1f88:a402::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:31:ea:9d:b6:9b:b6:c2:57:c6:8d:0d:eb:03:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
        Validity
            Not Before: Jan  1 00:18:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2c6e3c094df484b935f83fd70132dfedb5ffdd18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:99:49:75:c1:0c:f2:57:3c:c9:15:fe:6b:59:
                    45:d6:68:cb:fe:ec:7e:82:62:99:1d:e3:6a:08:51:
                    a2:30:45:47:88:34:f3:6e:0e:b8:c0:4e:50:7e:71:
                    f5:cb:63:e7:d4:07:9c:a6:9d:6a:de:c5:e6:3c:14:
                    e5:b3:2c:7f:98:68:46:2d:a1:70:88:57:dd:ae:b8:
                    d4:0b:37:22:15:e5:85:e6:23:b4:7d:33:c5:c0:34:
                    4b:7e:68:5f:6f:69:e0:96:d2:dc:49:5c:3a:70:2e:
                    7f:55:83:ba:3e:8c:77:1e:9b:1a:58:e5:66:4d:33:
                    95:e6:e5:c4:72:e3:9c:a0:04:81:8b:fa:61:b1:b8:
                    ef:95:06:99:be:20:54:a8:f4:4e:c6:d4:84:bb:b3:
                    24:d0:00:8d:0b:71:4a:cc:2c:41:c5:40:c8:62:f4:
                    2e:e4:ae:a1:55:b5:b8:52:2b:0d:8f:0e:f9:21:48:
                    a1:b8:5a:5d:fe:2b:61:75:de:9d:2c:f6:58:4c:a7:
                    89:dd:c8:5c:c1:a0:c9:1a:4e:ad:0b:31:ec:a1:89:
                    69:6a:c9:26:73:20:ed:a3:03:28:4a:d9:6a:45:9d:
                    85:ae:08:d8:73:18:c0:4f:fa:ff:ed:9c:2c:bd:e2:
                    7f:07:5d:ed:9c:b3:8f:74:ed:d6:1a:52:fe:b6:f2:
                    61:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6E:3C:09:4D:F4:84:B9:35:F8:3F:D7:01:32:DF:ED:B5:FF:DD:18
            X509v3 Authority Key Identifier:
                keyid:2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LG48CU30hLk1-D_XATLf7bX_3Rg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.111.32.0-86.111.43.255
                  86.111.50.0/23
                  213.163.229.0/24
                  213.163.232.0/23
                  213.163.238.0/24
                  213.163.242.0-213.163.245.255
                  213.163.254.0/24
                IPv6:
                  2a00:1f88::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:60:39:3e:5b:7d:02:3b:6c:b6:b0:5f:6a:3e:1b:20:a6:47:
         79:0f:a8:7c:c9:ba:26:93:69:78:fe:eb:ad:da:4a:ae:f6:ab:
         49:2b:9f:58:72:95:1b:95:1b:ee:ab:c7:24:b0:f7:79:17:60:
         94:72:81:4b:fa:2f:b1:01:10:aa:28:3a:b3:88:ab:e5:fb:94:
         4d:ab:bc:81:42:01:23:10:43:14:9e:51:87:60:f2:37:8e:21:
         73:8a:31:88:52:86:49:90:a2:2a:1b:01:00:f7:05:ca:f4:01:
         e8:47:7d:47:f7:98:4d:79:fc:21:97:a5:24:2c:79:04:b6:53:
         1f:3d:f9:21:6b:85:1c:59:d2:b9:26:2f:aa:23:9e:e4:23:1c:
         55:54:e3:1b:cc:8d:a6:85:36:82:41:4f:50:db:a7:28:fd:98:
         5b:22:83:8c:4d:45:7e:eb:20:cf:23:03:63:b9:64:ba:01:6f:
         b5:45:38:f8:94:be:5f:8e:a9:d7:53:8b:2e:58:bb:96:0d:8b:
         2f:a2:95:1f:d1:c9:a1:6a:86:b1:8b:15:31:7a:20:65:80:13:
         29:a5:e8:74:30:15:58:2f:ed:93:93:f2:d1:cb:90:ec:3e:ee:
         5e:b3:9b:db:ea:99:f0:87:2f:7a:06:2d:bf:07:f5:dc:33:74:
         8a:d0:de:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:39:16 2026 by rpki-client