This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/LVLHCbJcyDZSnlN60YzfQsK0HpA.roa
File:                     LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (raw, json)
Hash identifier:          vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=
Subject key identifier:   2D:52:C7:09:B2:5C:C8:36:52:9E:53:7A:D1:8C:DF:42:C2:B4:1E:90
Certificate issuer:       /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial:       019B7C12FB68483638BA9125FA669A7F6C53
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/LVLHCbJcyDZSnlN60YzfQsK0HpA.roa
Signing time:             Fri 02 Jan 2026 00:19:37 +0000
ROA not before:           Fri 02 Jan 2026 00:19:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208590
IP address blocks:        79.110.170.0/24 maxlen: 24
                          2a0d:1a43::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 06:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:fb:68:48:36:38:ba:91:25:fa:66:9a:7f:6c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
        Validity
            Not Before: Jan  2 00:19:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2d52c709b25cc836529e537ad18cdf42c2b41e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4e:a6:c2:15:eb:f3:22:a9:f0:b2:b7:34:79:
                    4e:a9:af:e3:3b:4f:ef:2c:58:a4:71:da:58:58:f9:
                    7d:38:f9:bc:54:bb:cc:71:94:0e:79:d9:5b:f0:8d:
                    f0:fb:00:d0:93:1a:d1:3b:e0:7c:5b:ae:12:2d:4f:
                    a5:71:bd:8c:61:87:cd:ee:78:e4:d4:f2:25:76:f5:
                    86:35:f9:64:ea:64:a0:4b:9b:f4:41:51:2a:cd:ef:
                    7a:9e:5a:d1:29:c9:98:f0:70:17:f0:aa:60:ab:df:
                    a2:ed:a3:bf:87:22:47:db:fd:5a:8c:3c:6d:b6:30:
                    7a:77:29:d7:82:ff:30:9d:bc:81:4f:bf:77:38:db:
                    82:10:69:fd:58:1a:d4:84:a7:49:c4:e1:4e:de:cf:
                    8a:86:be:67:b1:9f:74:bf:0d:9e:92:a6:95:55:b0:
                    0d:a7:d3:89:74:05:60:a5:c9:a1:df:ff:c3:f8:ff:
                    b0:b1:fa:71:66:3e:2d:74:c0:ea:e5:5a:b8:c9:c0:
                    fe:ae:76:bc:dd:ac:fb:0d:29:c5:b3:fd:d1:8d:c4:
                    3d:89:5b:8f:1d:e8:3f:00:44:41:bc:fd:23:d5:9f:
                    aa:40:30:a2:7c:6e:94:51:b0:6c:76:1d:22:22:a1:
                    37:e8:a0:92:22:44:5f:81:6b:fe:0f:d9:d4:dc:b4:
                    05:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:52:C7:09:B2:5C:C8:36:52:9E:53:7A:D1:8C:DF:42:C2:B4:1E:90
            X509v3 Authority Key Identifier:
                keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/LVLHCbJcyDZSnlN60YzfQsK0HpA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.170.0/24
                IPv6:
                  2a0d:1a43::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:4b:6c:e7:c4:63:20:b2:c1:6c:69:58:18:71:ef:6e:9a:bc:
         8d:56:4d:d0:4b:64:41:c8:45:c9:e0:36:b3:2b:d5:e6:dc:08:
         43:fa:d9:48:cd:0c:60:62:97:9a:f3:65:aa:13:f1:f7:d6:52:
         3c:3d:76:0f:a2:8d:0f:fd:62:ae:74:b3:c7:ec:37:50:f9:6f:
         a5:db:74:ae:7e:30:14:f6:30:3f:55:48:ad:5b:47:3e:f2:53:
         9b:21:54:a5:e8:59:88:00:7d:d0:d9:5d:c8:6d:f1:78:1e:48:
         ce:d8:88:53:86:d7:f3:8f:4e:86:ff:e7:96:84:5b:a7:79:8e:
         57:69:1b:40:37:e1:ea:26:2a:32:e9:ea:f4:10:03:60:7e:dc:
         5f:77:61:84:bc:09:97:57:98:9c:06:70:29:63:9a:1f:8d:6a:
         ce:38:8a:ef:85:92:f9:87:91:38:12:a0:c6:2e:f4:44:c0:9b:
         0d:74:a8:46:00:24:a5:a8:31:59:af:e9:b3:f1:86:c5:17:53:
         95:39:fa:ca:58:29:23:0e:d7:f6:28:1c:8e:9b:2d:dd:03:dc:
         b9:cf:48:9c:d2:26:39:a9:fb:89:62:0d:83:ff:5e:d8:c3:2f:
         00:16:ec:6f:f5:9e:82:06:ff:d9:02:39:dd:ea:75:e7:75:20:
         8a:d5:ff:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 15:53:10 2026 by rpki-client