This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EnEEfSouh8PgNyoyyyTXisFiVDc.roa
File:                     EnEEfSouh8PgNyoyyyTXisFiVDc.roa (raw, json)
Hash identifier:          l3uh9rbVZFyT1PXtYOymX0ALTRdCQeZfsRGG1HSrjJA=
Subject key identifier:   12:71:04:7D:2A:2E:87:C3:E0:37:2A:32:CB:24:D7:8A:C1:62:54:37
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019B7F84CF32CFF8ABFE2410FCC9C6DE9204
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EnEEfSouh8PgNyoyyyTXisFiVDc.roa
Signing time:             Fri 02 Jan 2026 16:22:48 +0000
ROA not before:           Fri 02 Jan 2026 16:22:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215492
IP address blocks:        31.56.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Jan 2026 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:cf:32:cf:f8:ab:fe:24:10:fc:c9:c6:de:92:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jan  2 16:22:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1271047d2a2e87c3e0372a32cb24d78ac1625437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:98:4f:1c:28:8e:bd:c2:f6:09:e4:df:bf:7c:
                    5c:d5:dd:e9:bb:48:81:fa:ad:fd:e9:73:28:ef:c3:
                    d1:87:2e:61:f3:c6:56:72:f2:43:30:a9:72:02:b8:
                    70:ae:10:0a:7a:51:e7:d4:d8:65:15:2c:f2:14:d5:
                    9d:3f:0c:91:c3:25:92:ae:0f:e9:ad:d6:3b:79:ca:
                    36:7f:dc:60:79:00:cf:59:e5:c8:cb:d5:ce:c2:2b:
                    53:2d:81:40:4d:b0:f7:be:2c:43:e3:bd:28:a2:ac:
                    0c:26:7c:1c:8c:b8:16:b7:f3:c9:76:71:b2:7c:a5:
                    ba:85:db:fc:01:44:bc:f4:b5:e0:87:c7:c6:9d:3b:
                    90:42:26:90:fb:4f:b2:8c:45:55:19:5a:3f:19:94:
                    c4:1b:f1:46:04:43:af:bf:32:59:6f:2a:ca:c4:34:
                    89:9d:1c:ff:7d:f2:d1:b4:6a:6f:cf:5f:13:c0:52:
                    3d:1a:80:34:57:10:fe:0a:d9:bd:08:0e:64:d4:b5:
                    ee:84:66:f8:46:d7:48:51:fb:cb:3c:f0:44:91:35:
                    66:0f:97:02:f2:3e:84:dc:7a:85:67:45:40:71:97:
                    ab:54:a7:9e:25:32:67:8d:81:39:07:c9:d4:92:4f:
                    d2:1e:3e:b6:dc:f6:40:60:ea:09:e2:f9:3c:41:eb:
                    a5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:71:04:7D:2A:2E:87:C3:E0:37:2A:32:CB:24:D7:8A:C1:62:54:37
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EnEEfSouh8PgNyoyyyTXisFiVDc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:82:f0:b3:ef:2b:83:e6:ff:5b:69:5d:c0:01:c2:61:e0:6b:
         4b:2b:00:54:de:6d:2a:c0:45:ea:b3:33:ab:95:5f:12:61:16:
         b3:77:e1:4a:fb:5f:f2:4b:8d:d2:81:bd:f4:6d:fd:6b:4a:39:
         d0:5d:57:7e:99:78:a4:ed:d6:55:1f:22:f9:e2:ae:df:40:b9:
         21:c2:7a:a9:c6:0a:d4:73:76:aa:5d:09:2e:72:49:3f:16:23:
         5f:da:2c:e3:55:99:55:60:e9:22:64:e5:68:b4:76:68:cd:f4:
         e1:7e:b4:50:ba:4c:b6:e5:53:fc:87:5c:77:f1:fd:59:29:d6:
         99:48:97:2f:14:d5:4f:f3:1f:2b:51:3b:f8:72:91:ab:8b:7f:
         f4:a0:e2:7b:b7:a2:48:08:8e:c1:4e:f7:e2:58:4c:f4:bf:17:
         3c:13:f4:d0:20:13:35:4b:61:c2:18:b3:03:4d:dd:d4:f3:76:
         4b:a3:34:b2:ea:d8:dc:2c:d6:d3:a3:b0:34:36:42:80:fa:c5:
         94:b7:eb:90:60:32:a8:53:27:2f:7e:57:67:7c:43:02:4f:2b:
         08:cf:5a:06:a4:3c:f9:83:95:81:c1:81:a9:47:6f:7d:75:cf:
         8a:26:d0:08:4d:ed:6b:3d:03:ff:7b:5c:0d:bc:de:4a:50:56:
         94:86:c2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 14:34:37 2026 by rpki-client