This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/p_6B25_VKSLLKGO8pJavxamR_Zk.roa
File:                     p_6B25_VKSLLKGO8pJavxamR_Zk.roa (raw, json)
Hash identifier:          dGxJlqoeHwqEbdInIyeGdbnWpjNL9vFVb47ETgyLdAc=
Subject key identifier:   A7:FE:81:DB:9F:D5:29:22:CB:28:63:BC:A4:96:AF:C5:A9:91:FD:99
Certificate issuer:       /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial:       019B7F14D29AE171E3B0DFAC8093E935D0D1
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/p_6B25_VKSLLKGO8pJavxamR_Zk.roa
Signing time:             Fri 02 Jan 2026 14:20:29 +0000
ROA not before:           Fri 02 Jan 2026 14:20:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48678
IP address blocks:        31.133.80.0/24 maxlen: 24
                          31.133.81.0/24 maxlen: 24
                          31.133.82.0/24 maxlen: 24
                          31.133.83.0/24 maxlen: 24
                          31.133.84.0/22 maxlen: 22
                          31.133.88.0/24 maxlen: 24
                          31.133.89.0/24 maxlen: 24
                          31.133.90.0/24 maxlen: 24
                          31.133.91.0/24 maxlen: 24
                          176.103.224.0/24 maxlen: 24
                          176.103.225.0/24 maxlen: 24
                          176.103.226.0/24 maxlen: 24
                          176.103.227.0/24 maxlen: 24
                          176.103.232.0/24 maxlen: 24
                          176.103.233.0/24 maxlen: 24
                          176.103.234.0/24 maxlen: 24
                          176.103.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:d2:9a:e1:71:e3:b0:df:ac:80:93:e9:35:d0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
        Validity
            Not Before: Jan  2 14:20:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a7fe81db9fd52922cb2863bca496afc5a991fd99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:07:a6:41:57:9a:3b:33:ed:da:46:6f:d7:
                    09:5e:25:3f:56:87:6c:66:19:9b:04:95:68:04:8f:
                    14:61:3d:f7:08:46:fe:05:50:c0:f7:ac:28:16:87:
                    e0:57:ad:a7:42:cf:83:0a:5e:9c:97:ad:a1:ab:b2:
                    b0:d4:63:1b:d4:0d:40:60:1f:cb:b1:90:d8:1f:72:
                    bf:32:59:17:63:73:11:1a:e6:c9:84:aa:85:6b:e8:
                    ff:34:08:b6:ae:f8:54:52:fb:20:3f:c9:2f:c6:eb:
                    41:14:6c:41:c5:98:40:7e:03:d6:95:91:4f:a1:9e:
                    8b:3f:43:2a:26:4b:45:82:87:42:1e:22:e0:f2:97:
                    42:b1:80:d7:98:48:4f:b9:67:d9:77:14:63:be:21:
                    1a:cc:81:f9:a8:33:50:5a:54:80:8a:82:80:41:62:
                    02:be:f9:f1:b8:51:1b:c9:b4:92:72:18:0a:b4:09:
                    e6:d3:da:f9:d4:6c:71:b2:4d:8d:60:e3:03:a6:00:
                    02:22:ef:c4:08:e7:d9:82:16:bc:56:ed:4f:87:5c:
                    4a:a5:03:fc:09:3c:cf:05:d1:42:61:39:2a:7b:26:
                    92:df:7d:30:5f:86:5f:4d:be:f9:ff:c0:95:7a:bf:
                    66:ee:f1:73:ab:aa:4a:f3:0c:65:87:f9:ed:e9:67:
                    86:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FE:81:DB:9F:D5:29:22:CB:28:63:BC:A4:96:AF:C5:A9:91:FD:99
            X509v3 Authority Key Identifier:
                keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/p_6B25_VKSLLKGO8pJavxamR_Zk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.133.80.0-31.133.91.255
                  176.103.224.0/22
                  176.103.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:d6:cf:cf:d6:2a:93:93:57:32:5a:71:96:da:bc:58:50:76:
         1d:24:fb:07:ac:6f:f8:37:e7:cd:40:08:9b:c1:ca:4d:d2:0a:
         34:48:69:40:7a:f3:f9:79:0f:a5:d2:f7:9a:77:6e:2e:6d:ec:
         b7:38:7d:f4:f3:49:a8:f3:05:f6:08:0a:ed:da:96:8f:cc:ae:
         2d:0e:eb:6e:03:7c:19:8e:e6:ee:87:c6:51:bb:9a:fc:87:f7:
         dc:2e:09:ea:9d:25:cb:15:8c:fa:d8:08:8f:6d:06:6c:fc:24:
         2a:89:13:3a:e9:77:0c:37:8d:7e:e9:c6:17:1f:04:d6:31:76:
         85:8b:c4:d5:46:ed:99:6f:80:3f:fb:25:f2:37:65:2e:e8:de:
         be:02:6f:fd:5d:70:73:3d:a3:a8:3a:4d:b5:aa:52:70:1d:af:
         8e:c8:7d:f7:18:23:0a:23:6a:c1:bc:fd:72:d3:e9:a3:eb:90:
         60:eb:26:b8:9d:68:bb:e5:1a:3e:12:b0:8c:46:00:d4:09:f6:
         20:65:e0:ea:9a:d2:4d:37:b4:e9:da:57:1e:06:03:f7:bc:2c:
         ed:bc:91:52:b1:eb:fa:ed:a5:65:1d:05:e1:3a:0f:79:5f:31:
         9a:cd:86:c3:7e:f8:eb:52:4f:5f:c4:9d:48:65:45:99:31:c8:
         db:e3:a7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 16:54:18 2026 by rpki-client