This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/18qRl8gKuD81jxTM6FvJix3aD1c.roa
File:                     18qRl8gKuD81jxTM6FvJix3aD1c.roa (raw, json)
Hash identifier:          e0E/pu0gPfcOeGXrxuz6rX5shJvgz0zLi3OLEUxuv9U=
Subject key identifier:   D7:CA:91:97:C8:0A:B8:3F:35:8F:14:CC:E8:5B:C9:8B:1D:DA:0F:57
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019B4220983F9E0D21A238406DBB1E0D72F3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/18qRl8gKuD81jxTM6FvJix3aD1c.roa
Signing time:             Sun 21 Dec 2025 18:16:30 +0000
ROA not before:           Sun 21 Dec 2025 18:16:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     59432
IP address blocks:        31.56.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 18:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:42:20:98:3f:9e:0d:21:a2:38:40:6d:bb:1e:0d:72:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Dec 21 18:16:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d7ca9197c80ab83f358f14cce85bc98b1dda0f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0a:1d:0a:1a:c0:54:1c:e9:32:c7:82:30:da:
                    e1:af:fd:ef:4c:1e:08:ca:ee:96:27:63:1d:9e:6f:
                    23:fd:17:78:00:60:e1:a2:25:62:36:db:bc:7a:7e:
                    66:14:29:7d:26:01:54:53:64:15:08:02:1f:b9:55:
                    f4:28:db:93:ca:f7:4c:3a:7b:a5:c9:e6:7a:a3:34:
                    ea:ac:e7:7f:19:b3:61:3e:dd:a1:ac:99:cb:25:3a:
                    2b:81:d1:26:54:56:ad:fa:4d:91:bf:4d:c0:e3:fe:
                    8e:31:80:8c:66:1b:dd:95:c0:dd:59:1f:2d:42:e4:
                    9b:e5:f5:34:07:03:45:02:01:f0:73:54:fa:4a:7d:
                    d6:da:bc:84:f0:33:0a:d2:97:06:56:51:7a:93:f5:
                    1d:38:4b:0d:56:9d:1a:84:fc:d6:ea:dd:b9:20:36:
                    be:ab:32:ab:73:e2:81:11:6a:f8:8a:3b:a5:33:4c:
                    59:49:60:ae:42:b0:d7:e9:05:34:3f:7a:1a:db:1e:
                    07:f7:86:2b:a8:4c:3d:28:5e:78:9a:fe:20:19:03:
                    83:52:d3:72:53:fa:f7:24:0c:42:d2:24:e7:b9:c2:
                    29:ca:4a:5c:a8:41:8d:43:9e:17:06:9c:a7:74:d0:
                    9d:ff:04:63:dc:2e:81:70:a4:b7:92:5c:1f:a0:27:
                    17:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CA:91:97:C8:0A:B8:3F:35:8F:14:CC:E8:5B:C9:8B:1D:DA:0F:57
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/18qRl8gKuD81jxTM6FvJix3aD1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:a6:03:38:fb:b8:71:91:65:25:3c:14:a0:3f:84:3a:2a:88:
         26:91:c0:0c:b7:61:57:4a:8a:4f:6c:9d:2b:2c:ff:11:7f:fc:
         ae:4d:6b:b4:4a:06:0a:9f:f9:99:a0:4b:13:2e:15:5b:e3:de:
         f1:4c:6f:dd:9d:d7:44:96:fc:36:02:04:70:31:2d:a0:29:09:
         45:f6:63:e5:d6:85:c2:d2:ee:f6:5a:f2:23:75:7e:70:75:a4:
         ad:8f:5a:43:2a:59:ef:3f:de:a5:82:43:02:32:c1:6b:ff:b6:
         19:53:7b:ce:fe:6b:88:e4:da:72:f8:63:d7:fb:26:fe:7b:96:
         47:8f:2b:94:9c:4e:12:57:e3:f9:da:ec:9d:06:df:89:80:4f:
         c0:17:8b:16:cb:33:21:9a:f0:68:48:0f:20:25:1f:83:33:f6:
         0e:af:86:b7:1b:f6:8c:24:b7:e5:07:28:ae:4d:5c:ea:22:ca:
         a7:bf:b9:94:af:a8:4c:fb:85:b5:d8:42:60:a6:d3:f6:b5:d0:
         d9:53:ca:eb:97:79:06:87:e9:e4:e0:dd:9e:99:8f:2b:2d:25:
         42:58:85:f6:73:93:cd:25:13:62:31:24:89:df:ee:a6:a4:b9:
         f6:21:b3:ec:49:af:c8:a8:08:7e:9d:cd:d7:a4:2c:8c:00:6a:
         03:1a:37:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 01:31:37 2025 by rpki-client