This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/rpLLN-zEc59BcyaW_IW8fwJMCgE.roa
File:                     rpLLN-zEc59BcyaW_IW8fwJMCgE.roa (raw, json)
Hash identifier:          coMYH2LK5We0hlfFCOPDMsdK4brnDNXm6xfRfXEZv9M=
Subject key identifier:   AE:92:CB:37:EC:C4:73:9F:41:73:26:96:FC:85:BC:7F:02:4C:0A:01
Certificate issuer:       /CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Certificate serial:       019B79ED59C638E52650950A9581616AABAC
Authority key identifier: 8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/rpLLN-zEc59BcyaW_IW8fwJMCgE.roa
Signing time:             Thu 01 Jan 2026 14:19:16 +0000
ROA not before:           Thu 01 Jan 2026 14:19:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34538
IP address blocks:        193.239.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 08:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:59:c6:38:e5:26:50:95:0a:95:81:61:6a:ab:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
        Validity
            Not Before: Jan  1 14:19:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ae92cb37ecc4739f41732696fc85bc7f024c0a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:99:d2:d6:43:60:b8:70:5d:78:93:12:1a:55:
                    1e:ab:f5:71:c1:4c:fb:ad:4f:1f:7a:88:b7:82:ad:
                    03:38:ce:59:f7:b9:29:43:15:66:77:b2:e7:40:ac:
                    26:40:00:26:9c:e8:8b:f4:e8:32:e4:fe:b6:18:ec:
                    ff:d4:34:64:87:dd:71:54:27:91:b2:5c:ff:77:bd:
                    f4:81:f1:d5:74:ae:37:8c:95:49:a3:2b:6e:a4:28:
                    65:db:19:a5:dd:06:68:38:fa:e4:17:17:ad:d5:65:
                    cd:3a:53:04:41:37:c9:9f:06:80:23:11:f2:25:d8:
                    17:2f:f1:78:d9:97:05:e0:c6:cd:2c:52:85:13:0a:
                    e3:71:7d:c3:74:1d:6d:cf:d1:01:ae:07:3b:5c:d6:
                    80:e6:a6:59:e5:04:1c:31:c0:d4:88:40:e7:0e:72:
                    80:15:65:5f:58:fc:81:35:85:56:27:d5:51:15:09:
                    fb:b5:15:d3:f4:5a:bc:6b:4d:41:ed:d6:14:3f:90:
                    23:a2:59:9e:af:eb:20:4d:d6:86:79:db:39:91:2b:
                    51:f1:66:69:17:fd:c6:b8:51:a3:53:d5:07:f2:da:
                    de:0a:27:7d:20:4b:53:83:ea:ce:e1:6a:03:84:f1:
                    8a:f9:24:3b:90:8b:92:84:9f:9d:06:7b:55:9b:48:
                    e8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:92:CB:37:EC:C4:73:9F:41:73:26:96:FC:85:BC:7F:02:4C:0A:01
            X509v3 Authority Key Identifier:
                keyid:8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/rpLLN-zEc59BcyaW_IW8fwJMCgE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.239.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:65:1e:e4:af:19:60:a9:a5:7c:88:a1:7b:0a:e6:36:da:c8:
         bd:b9:1d:df:b7:d0:d1:74:e8:0e:13:b7:20:cf:b8:aa:82:b4:
         69:cf:37:29:e3:02:78:f5:c9:1a:6a:b8:d8:37:cb:63:10:c3:
         fe:2d:06:eb:e5:3f:78:71:70:43:db:00:52:a2:87:32:06:58:
         bd:47:5f:e3:3f:4b:35:fb:98:6d:c4:58:2a:ee:30:85:57:e8:
         4e:20:eb:36:ce:63:59:ef:a6:fa:16:46:ae:d1:27:3e:20:51:
         1b:74:51:ad:4d:78:aa:ff:4c:47:8b:fa:50:d9:fc:88:10:70:
         98:02:d4:bd:c2:76:c5:86:8f:70:6d:f3:7d:9c:79:91:f1:30:
         5b:4d:f1:14:6c:8b:cc:73:ef:3d:05:ad:20:79:95:ca:da:be:
         b0:f2:08:68:28:1d:2c:9d:f8:68:c9:53:49:36:a4:1a:73:fc:
         b9:73:fd:cd:ed:e0:8b:88:9a:a8:b8:ae:f6:1b:a9:7d:a9:aa:
         bc:f6:11:19:8b:f6:18:3b:35:74:5a:f2:34:4f:0d:6d:9a:f1:
         29:d4:af:61:df:bd:2e:e4:a6:8f:0e:2e:7c:e9:a3:d4:d4:95:
         d7:81:e3:67:1d:d2:96:9e:9e:98:d6:7e:25:58:6e:da:1f:dc:
         55:c7:5e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 11:03:23 2026 by rpki-client