This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/DELZK5MwczuVxzj3X4of5HLO9Vw.roa
File:                     DELZK5MwczuVxzj3X4of5HLO9Vw.roa (raw, json)
Hash identifier:          GLmFQqmMgF4LsrUkccEanCYe2QvwLzSjgMEN7Qp7IPs=
Subject key identifier:   0C:42:D9:2B:93:30:73:3B:95:C7:38:F7:5F:8A:1F:E4:72:CE:F5:5C
Certificate issuer:       /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial:       019B7F138B061266EFA6AFE740CCC057B267
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/DELZK5MwczuVxzj3X4of5HLO9Vw.roa
Signing time:             Fri 02 Jan 2026 14:19:05 +0000
ROA not before:           Fri 02 Jan 2026 14:19:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56535
IP address blocks:        31.44.240.0/24 maxlen: 24
                          31.44.241.0/24 maxlen: 24
                          31.44.242.0/24 maxlen: 24
                          31.44.243.0/24 maxlen: 24
                          31.44.252.0/23 maxlen: 23
                          31.44.254.0/24 maxlen: 24
                          31.44.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:13:8b:06:12:66:ef:a6:af:e7:40:cc:c0:57:b2:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
        Validity
            Not Before: Jan  2 14:19:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0c42d92b9330733b95c738f75f8a1fe472cef55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:86:d5:db:59:4e:ac:fe:2f:cf:2a:e8:42:56:
                    41:88:27:57:a7:d1:25:c1:74:65:50:c9:37:4d:25:
                    05:78:43:bd:b7:17:85:e3:aa:0f:e2:b7:59:3e:e2:
                    63:60:a9:d0:93:06:84:a9:3b:bf:96:fb:72:19:3b:
                    32:ed:cf:ac:81:5f:28:eb:de:1d:01:03:0b:26:1a:
                    42:1f:95:78:7a:f5:35:bd:b4:75:4d:ba:f7:5f:5d:
                    77:83:fb:1e:72:16:d4:00:17:97:f3:bf:84:55:43:
                    28:42:d3:79:e4:55:76:b0:93:52:76:db:4a:f0:bf:
                    8b:37:f0:55:f7:8e:ba:35:fe:ad:a5:d4:88:3a:74:
                    a1:3e:3c:69:07:3b:91:ac:89:eb:13:c1:f5:e6:76:
                    f9:36:3e:bb:fe:88:b6:ae:9c:d5:07:8d:35:47:03:
                    c9:39:86:f0:5e:79:6b:da:5d:b1:28:51:a4:a9:3b:
                    10:2b:4a:aa:a6:8f:3f:86:93:39:75:58:af:0a:96:
                    99:d0:bb:a4:39:dd:39:4d:21:c5:39:d2:32:b0:ea:
                    f3:f8:4c:f9:a7:c3:3b:62:19:0e:af:97:14:b9:07:
                    5b:ac:e6:23:9f:8e:b8:1e:60:a7:09:8b:a1:e3:f2:
                    73:90:35:36:35:a3:35:35:dd:d0:91:06:86:98:2c:
                    f0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:42:D9:2B:93:30:73:3B:95:C7:38:F7:5F:8A:1F:E4:72:CE:F5:5C
            X509v3 Authority Key Identifier:
                keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/DELZK5MwczuVxzj3X4of5HLO9Vw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.44.240.0/22
                  31.44.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:cf:5f:63:4d:dc:5b:bb:7f:fb:c2:23:50:de:8b:43:51:07:
         8c:8c:29:ac:0e:7f:e5:84:b9:cd:84:3b:00:2d:58:8e:34:87:
         e8:40:69:0b:32:a0:66:0e:8d:85:7e:f6:a4:a6:58:15:c4:d7:
         c5:6b:6a:7b:a0:d4:db:59:4c:48:ad:75:64:79:3c:61:8d:78:
         28:e5:8b:01:91:da:88:f6:00:8a:d5:31:15:b9:69:4b:3c:4c:
         37:50:ae:9e:bc:06:d1:23:0b:46:92:3c:f9:bf:ce:59:8e:f1:
         48:af:ac:1c:7f:4a:26:b8:fc:c6:27:4c:e6:98:fb:41:a4:f6:
         77:66:63:46:46:2d:26:ef:2c:3e:6b:60:6f:aa:ff:e7:69:cc:
         5d:4e:a0:83:9d:f0:52:04:23:ef:a1:a2:30:79:20:10:30:9a:
         bc:41:d8:ed:a3:8f:c5:7a:ce:14:7b:1c:d1:02:9c:3e:42:4f:
         93:67:31:86:d8:f8:8d:a0:58:43:47:d1:37:5d:4e:1c:3d:8f:
         1e:a6:33:c3:51:ea:d1:f3:c2:21:e3:d0:8c:4e:80:24:5b:86:
         d4:da:cf:20:dc:82:13:00:cb:48:9d:87:74:4a:77:85:20:bd:
         42:71:a5:6c:e8:4e:88:50:7f:27:c6:58:34:05:8b:61:31:14:
         b7:f3:07:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:51:37 2026 by rpki-client