This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ask2BzGDncfD2UX_2VXCHj45DbA.roa
File:                     Ask2BzGDncfD2UX_2VXCHj45DbA.roa (raw, json)
Hash identifier:          y17CGzx56JjmGxc2LCgMhku3tftc129oiwS4Potvj+c=
Subject key identifier:   02:C9:36:07:31:83:9D:C7:C3:D9:45:FF:D9:55:C2:1E:3E:39:0D:B0
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019AA2D9870F5E6D80B0494D89B2F5807994
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ask2BzGDncfD2UX_2VXCHj45DbA.roa
Signing time:             Thu 20 Nov 2025 19:59:16 +0000
ROA not before:           Thu 20 Nov 2025 19:59:16 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     205463
IP address blocks:        31.56.213.0/24 maxlen: 24
                          31.58.236.0/24 maxlen: 24
                          31.58.244.0/24 maxlen: 24
                          31.58.245.0/24 maxlen: 24
                          31.58.247.0/24 maxlen: 24
                          31.58.249.0/24 maxlen: 24
                          31.58.250.0/24 maxlen: 24
                          31.58.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Nov 2025 00:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:a2:d9:87:0f:5e:6d:80:b0:49:4d:89:b2:f5:80:79:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Nov 20 19:59:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=02c9360731839dc7c3d945ffd955c21e3e390db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0e:4c:28:89:ae:f1:92:43:3c:76:cb:27:91:
                    f6:fd:4a:ac:54:e3:a9:61:60:ef:16:9a:cd:48:18:
                    62:d9:93:fc:a0:e6:97:57:b3:1a:66:d9:24:0e:56:
                    8b:3d:51:4b:2c:73:15:73:61:95:89:47:dc:fd:5f:
                    c3:c6:87:24:4b:b2:84:21:c6:3c:4d:be:b4:63:d8:
                    b0:14:50:68:b2:e6:89:15:79:b4:91:2f:eb:00:82:
                    77:e3:17:91:6f:64:39:d7:25:67:3d:76:28:9e:63:
                    ea:02:a7:60:6b:43:20:de:ea:48:11:b2:8e:68:c6:
                    4c:07:0b:e5:a7:42:89:85:54:4c:37:85:63:fd:36:
                    d7:5e:d2:b3:7b:05:50:5e:ed:13:91:2c:d9:80:b1:
                    3f:33:f6:8d:b8:af:ef:1e:40:de:93:e5:a2:0d:e1:
                    dd:8f:2a:af:29:b3:30:61:bf:eb:8e:82:3c:77:ce:
                    a3:c3:13:8c:9d:8b:c9:3f:35:8e:de:b3:95:da:65:
                    14:80:20:00:8d:db:b8:44:ba:8a:d9:58:94:d3:14:
                    4b:b6:b2:34:32:ed:fc:94:61:85:59:35:b1:30:62:
                    22:dd:40:3a:ba:c0:6d:a4:86:6b:76:b6:af:a0:4b:
                    b7:8f:99:58:87:50:34:fa:15:24:41:70:6d:3d:f2:
                    b8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C9:36:07:31:83:9D:C7:C3:D9:45:FF:D9:55:C2:1E:3E:39:0D:B0
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ask2BzGDncfD2UX_2VXCHj45DbA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.213.0/24
                  31.58.236.0/24
                  31.58.244.0/23
                  31.58.247.0/24
                  31.58.249.0-31.58.251.255

    Signature Algorithm: sha256WithRSAEncryption
         46:5a:26:37:4f:59:b4:18:c5:3b:ad:ec:1c:3a:ca:e2:dc:d2:
         68:85:b8:a5:3b:09:7a:3a:01:53:d8:d7:99:de:49:5b:4d:ef:
         5b:dc:10:0a:37:41:0f:0a:0b:5b:1e:bd:5f:5c:92:55:6f:91:
         a2:c4:b5:52:04:fb:29:9b:59:5b:c1:eb:1f:df:d7:7f:96:1d:
         08:dd:39:9d:0c:d8:14:c5:b8:ab:99:d4:b6:7c:0e:da:f2:07:
         d0:83:b2:47:ab:47:52:d9:c0:61:ff:c1:ea:b3:a7:2d:fb:87:
         f8:84:c1:d0:f9:be:e8:f3:2c:a4:55:92:01:17:52:3a:69:77:
         c0:bd:89:30:b7:1e:ee:03:2d:83:55:63:bb:6f:bd:08:e9:96:
         d1:d3:ca:06:e1:10:ab:7d:01:94:32:be:f7:a6:ed:8e:c9:3d:
         c9:0e:85:2d:e9:fa:b1:fa:71:80:d1:45:c2:8a:94:69:c8:43:
         de:e3:32:43:58:70:e7:8d:51:d1:48:05:ce:34:b3:46:74:9f:
         4a:23:95:98:c2:5e:cc:e6:af:2b:81:1e:2c:e3:dc:ee:3c:ba:
         c0:dd:07:d8:8e:b7:28:b8:52:00:8c:e0:e0:78:03:b4:26:48:
         c3:04:3a:81:76:a7:42:b9:1b:8c:54:d9:46:24:3c:87:3a:6a:
         b6:a3:30:8a
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZqi2YcPXm2AsElNibL1gHmUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUxMTIwMTk1OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmM5MzYwNzMxODM5ZGM3YzNkOTQ1ZmZkOTU1YzIxZTNlMzkwZGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7g5MKImu8ZJDPHbLJ5H2/UqsVOOp
YWDvFprNSBhi2ZP8oOaXV7MaZtkkDlaLPVFLLHMVc2GViUfc/V/DxockS7KEIcY8
Tb60Y9iwFFBosuaJFXm0kS/rAIJ34xeRb2Q51yVnPXYonmPqAqdga0Mg3upIEbKO
aMZMBwvlp0KJhVRMN4Vj/TbXXtKzewVQXu0TkSzZgLE/M/aNuK/vHkDek+WiDeHd
jyqvKbMwYb/rjoI8d86jwxOMnYvJPzWO3rOV2mUUgCAAjdu4RLqK2ViU0xRLtrI0
Mu38lGGFWTWxMGIi3UA6usBtpIZrdravoEu3j5lYh1A0+hUkQXBtPfK41wIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFALJNgcxg53Hw9lF/9lVwh4+OQ2wMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvQXNrMkJ6R0RuY2ZEMlVYXzJWWENIajQ1RGJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAHzjVAwQA
HzrsAwQBHzr0AwQAHzr3MAwDBAAfOvkDBAIfOvgwDQYJKoZIhvcNAQELBQADggEB
AEZaJjdPWbQYxTut7Bw6yuLc0miFuKU7CXo6AVPY15neSVtN71vcEAo3QQ8KC1se
vV9cklVvkaLEtVIE+ymbWVvB6x/f13+WHQjdOZ0M2BTFuKuZ1LZ8DtryB9CDsker
R1LZwGH/weqzpy37h/iEwdD5vujzLKRVkgEXUjppd8C9iTC3Hu4DLYNVY7tvvQjp
ltHTygbhEKt9AZQyvvem7Y7JPckOhS3p+rH6cYDRRcKKlGnIQ97jMkNYcOeNUdFI
Bc40s0Z0n0ojlZjCXszmryuBHizj3O48usDdB9iOtyi4UgCM4OB4A7QmSMMEOoF2
p0K5G4xU2UYkPIc6arajMIo=
-----END CERTIFICATE-----
Generated at Fri Nov 21 07:30:10 2025 by rpki-client