This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/LRGE42EYYY0LsfuMjQcrmEr0c-8.roa
File:                     LRGE42EYYY0LsfuMjQcrmEr0c-8.roa (raw, json)
Hash identifier:          TWDwITFz0WnAZFupqL07ce+IToF2+QZ+z5d9VBF9FsY=
Subject key identifier:   2D:11:84:E3:61:18:61:8D:0B:B1:FB:8C:8D:07:2B:98:4A:F4:73:EF
Certificate issuer:       /CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Certificate serial:       019B7DCA16A5463E1BF9E1569F8B3755ECA9
Authority key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/LRGE42EYYY0LsfuMjQcrmEr0c-8.roa
Signing time:             Fri 02 Jan 2026 08:19:14 +0000
ROA not before:           Fri 02 Jan 2026 08:19:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49367
IP address blocks:        176.105.252.0/24 maxlen: 24
                          176.105.254.0/24 maxlen: 24
                          2a0d:c740:1a::/48 maxlen: 48
                          2a0d:c740:1c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:16:a5:46:3e:1b:f9:e1:56:9f:8b:37:55:ec:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
        Validity
            Not Before: Jan  2 08:19:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2d1184e36118618d0bb1fb8c8d072b984af473ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:33:3e:54:83:7a:0d:37:a4:9a:ae:ff:af:95:
                    18:ff:86:3a:1a:53:8b:24:03:ad:e7:4f:9b:bd:c4:
                    9d:8a:3a:2b:e2:fe:f1:9d:b7:aa:9f:ba:1e:fc:f0:
                    e9:6f:a4:c0:a7:1c:ba:d7:6e:79:c3:94:9c:01:cd:
                    04:d5:c8:06:6e:b4:b1:e6:3a:42:09:46:ef:5c:16:
                    ab:41:0f:86:97:bf:2f:97:ad:39:36:c4:3b:8e:5d:
                    c3:cb:1a:35:e0:a3:47:3d:70:ba:2a:03:01:c8:63:
                    fd:b1:8d:c2:e4:b7:70:85:f7:95:34:c7:55:ad:47:
                    4a:df:d8:7d:cf:17:30:34:86:27:2f:e4:ef:71:fb:
                    19:45:84:36:c5:92:3b:41:ff:bf:f7:8b:42:34:05:
                    a4:df:1b:c7:88:bb:c2:20:61:1e:5f:75:5c:6d:8d:
                    54:61:63:f3:47:8d:ac:db:58:a0:ad:1b:90:e8:fd:
                    ae:4f:75:bf:3a:2a:d4:04:55:81:07:b3:9d:e6:3e:
                    61:67:39:98:9a:e0:88:59:2a:1e:04:64:c2:59:df:
                    8c:b7:23:da:f5:96:3d:72:a2:73:34:cf:05:62:21:
                    29:f4:a4:2a:d0:62:f1:f4:03:76:87:27:b8:cf:1c:
                    18:39:3a:ad:ed:b0:ef:24:31:30:65:1f:58:df:12:
                    6e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:11:84:E3:61:18:61:8D:0B:B1:FB:8C:8D:07:2B:98:4A:F4:73:EF
            X509v3 Authority Key Identifier:
                keyid:6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/LRGE42EYYY0LsfuMjQcrmEr0c-8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.252.0/24
                  176.105.254.0/24
                IPv6:
                  2a0d:c740:1a::/48
                  2a0d:c740:1c::/48

    Signature Algorithm: sha256WithRSAEncryption
         ec:21:f9:b5:52:88:41:33:89:42:5f:41:eb:55:bd:b7:88:52:
         ec:4c:d5:a9:73:3a:2f:47:1d:98:91:4d:99:18:af:40:1c:41:
         a4:66:07:99:68:1c:e3:89:28:a3:ac:da:3a:ac:f7:d7:3a:e9:
         e9:71:8b:7d:1e:18:6c:46:1d:35:74:4c:8b:8a:e5:75:bf:e8:
         4b:c2:4b:12:6b:e2:93:05:b0:b0:6f:03:09:50:db:20:17:91:
         b3:73:bc:bb:4c:1e:89:d3:d5:01:e3:68:b7:f2:38:5c:d2:43:
         32:9e:dd:97:0a:27:51:a0:a8:38:cf:c8:fa:e2:52:11:50:5b:
         76:dc:cd:16:f6:9f:74:80:d1:db:41:71:74:43:39:04:4b:11:
         a3:07:51:ab:3b:66:f3:26:93:f5:fb:b8:0c:c3:29:ef:f3:9f:
         40:41:78:6a:5a:55:31:0d:aa:60:ed:c3:81:45:19:70:b3:b7:
         30:d9:e3:59:63:b1:8b:fb:28:62:8d:ae:ed:cf:9a:f2:a8:a3:
         0c:9d:5f:e9:f6:fc:98:1f:a2:fe:00:a0:cc:b4:53:42:de:b7:
         7b:c2:a3:fb:99:c4:8f:76:87:dd:e8:15:99:52:58:b6:c1:de:
         f4:6b:02:95:49:33:71:53:c4:82:8a:e4:58:bf:7a:23:22:f8:
         0d:0d:7f:92
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZt9yhalRj4b+eFWn4s3VeypMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYTI2YjU2Y2VlOTdmNjAyMDk0MWJiMTdjNmE3YzZjZWEw
ZjgxNGEwHhcNMjYwMTAyMDgxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDExODRlMzYxMTg2MThkMGJiMWZiOGM4ZDA3MmI5ODRhZjQ3M2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zM+VIN6DTekmq7/r5UY/4Y6GlOL
JAOt50+bvcSdijor4v7xnbeqn7oe/PDpb6TApxy61255w5ScAc0E1cgGbrSx5jpC
CUbvXBarQQ+Gl78vl605NsQ7jl3Dyxo14KNHPXC6KgMByGP9sY3C5LdwhfeVNMdV
rUdK39h9zxcwNIYnL+TvcfsZRYQ2xZI7Qf+/94tCNAWk3xvHiLvCIGEeX3VcbY1U
YWPzR42s21igrRuQ6P2uT3W/OirUBFWBB7Od5j5hZzmYmuCIWSoeBGTCWd+MtyPa
9ZY9cqJzNM8FYiEp9KQq0GLx9AN2hye4zxwYOTqt7bDvJDEwZR9Y3xJuHwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFC0RhONhGGGNC7H7jI0HK5hK9HPvMB8GA1UdIwQY
MBaAFGuia1bO6X9gIJQbsXxqfGzqD4FKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTZKclZzN3BmMkFnbEJ1eGZHcDhiT29QZ1VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iOTAzZTktNmQwOS00ZTIwLWI5MjYt
MzY5MmY5NmUzM2E5LzEvTFJHRTQyRVlZWTBMc2Z1TWpRY3JtRXIwYy04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iOTAzZTktNmQwOS00ZTIwLWI5MjYtMzY5MmY5NmUzM2E5
LzEvYTZKclZzN3BmMkFnbEJ1eGZHcDhiT29QZ1VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAsGn8AwQA
sGn+MBgEAgACMBIDBwAqDcdAABoDBwAqDcdAABwwDQYJKoZIhvcNAQELBQADggEB
AOwh+bVSiEEziUJfQetVvbeIUuxM1alzOi9HHZiRTZkYr0AcQaRmB5loHOOJKKOs
2jqs99c66elxi30eGGxGHTV0TIuK5XW/6EvCSxJr4pMFsLBvAwlQ2yAXkbNzvLtM
HonT1QHjaLfyOFzSQzKe3ZcKJ1GgqDjPyPriUhFQW3bczRb2n3SA0dtBcXRDOQRL
EaMHUas7ZvMmk/X7uAzDKe/zn0BBeGpaVTENqmDtw4FFGXCztzDZ41ljsYv7KGKN
ru3PmvKoowydX+n2/Jgfov4AoMy0U0Let3vCo/uZxI92h93oFZlSWLbB3vRrApVJ
M3FTxIKK5Fi/eiMi+A0Nf5I=
-----END CERTIFICATE-----
Generated at Mon Jan 26 19:33:30 2026 by rpki-client