This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/31uNkISRag-wT4cWe3Qsq9B_mck.roa
File:                     31uNkISRag-wT4cWe3Qsq9B_mck.roa (raw, json)
Hash identifier:          f3Kkclc9OULTHQr2gfSW2xkvzmYqxbR8AW4HZqe/VQ8=
Subject key identifier:   DF:5B:8D:90:84:91:6A:0F:B0:4F:87:16:7B:74:2C:AB:D0:7F:99:C9
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       019B78A2614417D76D9628746088B00DE6F5
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/31uNkISRag-wT4cWe3Qsq9B_mck.roa
Signing time:             Thu 01 Jan 2026 08:17:46 +0000
ROA not before:           Thu 01 Jan 2026 08:17:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     262287
IP address blocks:        93.152.28.0/24 maxlen: 24
                          93.152.33.0/24 maxlen: 24
                          93.152.34.0/24 maxlen: 24
                          93.152.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:61:44:17:d7:6d:96:28:74:60:88:b0:0d:e6:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Jan  1 08:17:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=df5b8d9084916a0fb04f87167b742cabd07f99c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:92:ab:bc:a5:e4:e7:b8:5e:b0:82:10:69:8c:
                    c0:5c:e7:15:06:5d:b5:7c:8c:8a:3c:77:0b:1c:27:
                    5f:67:ed:6f:7e:ef:ad:a7:a9:20:c0:b6:1d:c3:e6:
                    3a:a9:dc:26:a4:f2:8a:82:78:2a:56:f4:cb:b5:76:
                    b9:80:5c:91:cd:26:e5:de:62:e9:fa:fe:76:9c:a0:
                    f9:f9:d4:41:d9:84:3d:39:f3:45:37:74:9f:f3:28:
                    22:31:bc:1e:35:b1:8a:21:5e:c7:1e:2b:4d:15:71:
                    3e:25:d8:20:f8:31:dd:b4:6e:d0:4d:e8:4f:87:7b:
                    28:c2:b1:69:95:99:0d:d4:1b:5a:f7:a4:1f:73:0e:
                    c4:b5:b8:30:60:90:95:6c:4b:02:3b:cc:95:a6:cd:
                    28:3b:84:84:e2:83:0a:d3:dd:37:1b:86:00:f8:61:
                    ac:56:01:06:9c:f8:b3:98:fa:7a:50:3c:72:03:b0:
                    27:7b:a7:74:87:4d:f7:c1:d6:25:41:50:08:d0:b7:
                    7a:df:e7:30:9d:b3:e3:e2:f6:9e:51:39:52:7f:fd:
                    7f:ca:d7:12:a0:16:7a:af:b0:e1:c4:16:03:6e:a7:
                    75:e3:8e:55:82:07:b6:19:79:cf:64:49:d3:50:1e:
                    41:de:54:21:3c:f3:3d:36:25:a2:31:01:81:82:aa:
                    6b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5B:8D:90:84:91:6A:0F:B0:4F:87:16:7B:74:2C:AB:D0:7F:99:C9
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/31uNkISRag-wT4cWe3Qsq9B_mck.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.152.28.0/24
                  93.152.33.0-93.152.34.255
                  93.152.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:33:de:19:10:83:1b:64:b3:e6:35:79:7e:b1:00:83:1c:e4:
         c3:61:4f:27:f3:5e:0d:f0:7b:7c:fd:30:e9:38:6c:a6:6f:12:
         83:80:37:50:de:ca:78:e3:7f:06:ec:1d:2b:1a:23:9c:e3:ec:
         6e:a0:01:34:d4:3c:70:ac:58:53:a8:c2:51:64:8f:a3:7d:31:
         5e:82:11:39:91:b9:80:82:b5:e9:e1:22:b7:69:e6:d4:5d:5c:
         0d:77:94:7e:f3:a7:f3:3d:6b:94:4c:ad:d5:09:42:0c:0c:61:
         5d:9a:a1:3c:ca:b3:0a:5d:b1:70:46:cd:ad:e4:2f:ef:12:78:
         9b:a5:60:8c:c3:1d:18:c3:d0:04:57:1c:ff:22:63:b4:fa:58:
         05:4f:d9:0a:a8:d0:cf:f8:42:72:86:4e:b9:a3:24:4d:d8:01:
         ac:e6:94:ad:a4:2e:f1:a5:eb:c3:96:c6:e7:da:39:2f:df:e0:
         c5:09:f3:5d:4b:bb:89:31:e9:4f:59:6c:6f:44:d3:9b:ed:73:
         0a:6e:99:5c:67:1f:f5:0b:29:f2:74:e2:9c:51:31:ed:60:95:
         07:8e:3f:0a:52:70:31:58:f9:83:f7:6c:d4:03:47:72:dd:22:
         48:ff:fd:27:4e:3f:16:1f:14:de:c4:23:b3:0a:bf:cb:4f:7c:
         2e:46:37:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 08:15:51 2026 by rpki-client