This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/92BPR5lvI07-es0ROLWifKo-K6M.roa
File:                     92BPR5lvI07-es0ROLWifKo-K6M.roa (raw, json)
Hash identifier:          PAuzJ+7bFcImN1OH46J1IxknO+znhB9BZ6ZITi4tGkg=
Subject key identifier:   F7:60:4F:47:99:6F:23:4E:FE:7A:CD:11:38:B5:A2:7C:AA:3E:2B:A3
Certificate issuer:       /CN=2cb178fc335df01543728e29b78e9528ef1f5f6e
Certificate serial:       019B2C6314CB6753378CB1A42FEF22F75245
Authority key identifier: 2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/92BPR5lvI07-es0ROLWifKo-K6M.roa
Signing time:             Wed 17 Dec 2025 12:57:29 +0000
ROA not before:           Wed 17 Dec 2025 12:57:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     44947
IP address blocks:        2001:3b80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2c:63:14:cb:67:53:37:8c:b1:a4:2f:ef:22:f7:52:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb178fc335df01543728e29b78e9528ef1f5f6e
        Validity
            Not Before: Dec 17 12:57:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f7604f47996f234efe7acd1138b5a27caa3e2ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:cf:f5:45:de:f0:aa:53:f8:66:b2:8f:bb:
                    6a:2b:09:70:db:6d:53:7e:68:aa:87:25:cf:4c:09:
                    bc:2f:c9:16:6d:ab:73:73:4c:c6:cd:da:20:75:a1:
                    57:2a:c4:dc:a4:ba:2b:40:d5:82:6f:a0:32:1a:36:
                    d2:30:41:5e:d0:2a:84:8b:9d:90:fd:d7:cf:38:ed:
                    ac:ae:cd:c4:55:a7:5e:c0:cb:41:e5:8b:cb:55:da:
                    6e:59:86:05:b4:70:8d:5e:38:dc:d5:d5:6e:81:3c:
                    a6:1c:7d:85:23:0e:3c:9d:f0:c9:e5:f0:b7:1b:50:
                    a3:a1:56:94:9a:a2:1c:0b:a7:96:cc:5a:e0:a1:92:
                    aa:bc:dc:ef:fa:ff:02:c3:37:47:bd:a1:aa:2a:35:
                    10:e5:3b:ce:8a:3d:87:a4:e6:b4:58:d9:85:ed:66:
                    b7:a8:85:bd:0d:7f:8f:fc:23:d7:3c:a9:34:26:cb:
                    28:f1:65:20:72:ab:8e:92:c9:dd:bd:a9:2a:fb:f8:
                    2f:f8:84:28:ff:a9:a7:82:0e:2c:8b:a0:99:27:08:
                    24:4a:5d:89:c7:66:a7:ee:6a:a3:c4:b5:35:8c:33:
                    33:8f:79:92:cb:9e:ea:02:77:67:e9:1e:26:5e:6a:
                    6d:90:1a:ac:4b:cc:d2:23:ec:b4:06:e5:c7:47:5e:
                    ee:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:60:4F:47:99:6F:23:4E:FE:7A:CD:11:38:B5:A2:7C:AA:3E:2B:A3
            X509v3 Authority Key Identifier:
                keyid:2C:B1:78:FC:33:5D:F0:15:43:72:8E:29:B7:8E:95:28:EF:1F:5F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLF4_DNd8BVDco4pt46VKO8fX24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/92BPR5lvI07-es0ROLWifKo-K6M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eea330-e5be-4f22-b11b-0f7964321ce1/1/LLF4_DNd8BVDco4pt46VKO8fX24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:4c:a4:41:53:e1:1e:5b:ac:56:e0:8e:a5:43:b2:5f:3f:f6:
         5c:39:8b:4c:27:46:47:08:68:94:6c:f8:d6:97:77:89:ea:df:
         96:24:27:2a:31:e0:95:81:b3:1b:e3:3e:26:f3:8b:b2:f8:37:
         3f:85:c2:89:35:12:76:41:15:73:a3:a9:56:ad:43:60:4f:e8:
         ad:94:bf:7d:1a:77:2f:9a:9b:e7:33:48:41:17:1c:4c:5b:7e:
         d2:b3:f1:c1:2f:cd:5b:3b:e4:54:f8:79:bc:27:5d:31:6f:de:
         67:9d:3f:60:8f:d4:ee:7a:a6:83:ce:7d:e8:1a:7c:ce:35:d3:
         a3:fa:ac:9e:9f:27:19:3f:92:53:a7:0b:a2:ce:1a:f7:16:b9:
         f1:c1:7c:b4:14:48:1b:bb:36:40:85:5b:c9:84:81:15:4e:61:
         eb:ab:1b:db:77:fc:01:f4:ae:36:ff:9b:7f:5c:9a:fa:ed:95:
         5b:4a:26:84:19:6a:11:16:83:c8:3a:b7:7d:a5:03:2a:6f:a3:
         71:5e:a7:1e:85:6d:3e:59:6f:af:3e:30:89:a1:17:89:e4:ec:
         fb:9d:c8:ad:ad:d6:ae:3e:f7:5c:71:f4:c4:3c:d1:6d:e9:54:
         66:c1:9f:24:95:59:0f:b9:d5:e6:06:ce:da:7d:ca:e6:15:52:
         0c:51:04:4e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZssYxTLZ1M3jLGkL+8i91JFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYjE3OGZjMzM1ZGYwMTU0MzcyOGUyOWI3OGU5NTI4ZWYx
ZjVmNmUwHhcNMjUxMjE3MTI1NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzYwNGY0Nzk5NmYyMzRlZmU3YWNkMTEzOGI1YTI3Y2FhM2UyYmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2nP9UXe8KpT+Gayj7tqKwlw221T
fmiqhyXPTAm8L8kWbatzc0zGzdogdaFXKsTcpLorQNWCb6AyGjbSMEFe0CqEi52Q
/dfPOO2srs3EVadewMtB5YvLVdpuWYYFtHCNXjjc1dVugTymHH2FIw48nfDJ5fC3
G1CjoVaUmqIcC6eWzFrgoZKqvNzv+v8CwzdHvaGqKjUQ5TvOij2HpOa0WNmF7Wa3
qIW9DX+P/CPXPKk0Jsso8WUgcquOksndvakq+/gv+IQo/6mngg4si6CZJwgkSl2J
x2an7mqjxLU1jDMzj3mSy57qAndn6R4mXmptkBqsS8zSI+y0BuXHR17upwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPdgT0eZbyNO/nrNETi1onyqPiujMB8GA1UdIwQY
MBaAFCyxePwzXfAVQ3KOKbeOlSjvH19uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTExGNF9ETmQ4QlZEY280cHQ0NlZLTzhmWDI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lZWEzMzAtZTViZS00ZjIyLWIxMWIt
MGY3OTY0MzIxY2UxLzEvOTJCUFI1bHZJMDctZXMwUk9MV2lmS28tSzZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lZWEzMzAtZTViZS00ZjIyLWIxMWItMGY3OTY0MzIxY2Ux
LzEvTExGNF9ETmQ4QlZEY280cHQ0NlZLTzhmWDI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAE7gDAN
BgkqhkiG9w0BAQsFAAOCAQEAS0ykQVPhHlusVuCOpUOyXz/2XDmLTCdGRwholGz4
1pd3ierfliQnKjHglYGzG+M+JvOLsvg3P4XCiTUSdkEVc6OpVq1DYE/orZS/fRp3
L5qb5zNIQRccTFt+0rPxwS/NWzvkVPh5vCddMW/eZ50/YI/U7nqmg8596Bp8zjXT
o/qsnp8nGT+SU6cLos4a9xa58cF8tBRIG7s2QIVbyYSBFU5h66sb23f8AfSuNv+b
f1ya+u2VW0omhBlqERaDyDq3faUDKm+jcV6nHoVtPllvrz4wiaEXieTs+53Ira3W
rj73XHH0xDzRbelUZsGfJJVZD7nV5gbO2n3K5hVSDFEETg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 16:07:28 2025 by rpki-client