This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FTtGNISyPjI5xgPyTU9yvM3ZmX8.roa
File:                     FTtGNISyPjI5xgPyTU9yvM3ZmX8.roa (raw, json)
Hash identifier:          T2CDHFIvqKU3LQgVwlnoU19gS/B37fkH7/yi0NURH2s=
Subject key identifier:   15:3B:46:34:84:B2:3E:32:39:C6:03:F2:4D:4F:72:BC:CD:D9:99:7F
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019B7F847CA50C5257A577941021AB746A93
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FTtGNISyPjI5xgPyTU9yvM3ZmX8.roa
Signing time:             Fri 02 Jan 2026 16:22:27 +0000
ROA not before:           Fri 02 Jan 2026 16:22:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135040
IP address blocks:        31.56.66.0/24 maxlen: 24
                          31.57.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Jan 2026 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:7c:a5:0c:52:57:a5:77:94:10:21:ab:74:6a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jan  2 16:22:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=153b463484b23e3239c603f24d4f72bccdd9997f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7e:ea:23:5d:7b:f1:7f:b6:8d:6f:13:d4:cd:
                    33:10:93:35:46:a3:56:dd:59:ee:d7:5c:99:2c:e4:
                    d6:a6:0a:b0:6a:a0:c5:07:44:7a:3a:1b:5c:a5:6b:
                    45:81:8d:11:1a:98:f4:ff:28:72:62:8b:51:23:a8:
                    67:23:13:ed:4e:1c:13:e2:29:86:23:01:e1:50:f2:
                    97:ba:68:40:b2:42:e7:4f:a4:8d:a1:1d:4d:c1:76:
                    15:ec:db:d7:2f:98:9b:1f:3d:d3:1f:c7:15:b3:af:
                    85:fd:71:3e:d2:84:c2:1f:6e:82:33:f4:db:b0:4c:
                    a8:d8:b2:c2:6a:19:62:57:8e:eb:1d:38:20:af:5b:
                    0a:70:ef:a1:21:8b:cc:f0:9d:ef:3d:94:48:57:df:
                    11:e8:e7:72:dc:2c:ad:5c:4c:a5:21:93:c1:09:fa:
                    fd:b4:34:86:c7:a1:e7:24:14:93:10:69:f8:1f:fb:
                    13:20:0a:34:61:da:96:fe:ef:03:ca:36:ae:93:91:
                    b7:44:fe:50:87:a0:9c:fd:4d:c7:20:ab:62:72:2f:
                    25:a2:b4:26:9e:81:0d:67:0d:9d:64:2d:62:22:40:
                    ae:0d:85:8a:e3:41:af:f4:88:66:65:aa:b5:4f:69:
                    af:30:ee:1d:27:a5:d2:08:d8:62:71:1b:d0:7e:c3:
                    68:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3B:46:34:84:B2:3E:32:39:C6:03:F2:4D:4F:72:BC:CD:D9:99:7F
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FTtGNISyPjI5xgPyTU9yvM3ZmX8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.66.0/24
                  31.57.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:46:7c:d8:62:13:6b:69:33:71:8b:89:4e:68:07:09:21:9b:
         1c:88:39:22:01:3e:35:d6:76:0a:31:46:91:7c:09:2d:79:be:
         ef:91:83:f8:c0:6c:69:95:c5:b0:52:46:23:c4:7c:94:f5:5c:
         4d:7b:6b:0e:8c:f7:e6:f7:7e:0f:e5:56:ec:37:40:d9:8f:18:
         af:de:89:42:5d:b0:7c:1d:d9:b0:42:e2:be:e3:53:50:26:ab:
         d4:50:be:21:72:11:37:8e:dd:1f:1c:6d:9c:f7:71:1e:1f:bf:
         c9:fb:30:9e:f9:85:30:4a:b7:9a:53:96:fd:7b:da:f4:da:e1:
         2a:33:4f:24:41:c1:2c:c6:20:47:bc:58:c1:c2:a6:29:b4:55:
         2d:ce:51:0a:1c:93:d4:fc:25:43:2e:d4:79:8d:75:e6:09:e6:
         af:38:ec:f8:6a:ab:e5:91:1a:c0:c3:67:94:d0:2e:46:92:d6:
         3d:7f:6b:a4:f3:f9:55:3e:7e:26:b8:99:7f:6a:d2:f9:25:49:
         49:c6:b7:6a:53:49:82:37:94:67:36:61:3a:00:38:1c:07:e0:
         eb:2e:28:10:cf:ab:94:37:23:b6:6b:9f:f1:df:c8:2b:84:25:
         b9:f7:aa:b0:e3:81:4b:26:bd:5e:89:cc:39:ab:4b:bd:5f:36:
         f9:e5:ca:c4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt/hHylDFJXpXeUECGrdGqTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMTAyMTYyMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTNiNDYzNDg0YjIzZTMyMzljNjAzZjI0ZDRmNzJiY2NkZDk5OTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX7qI1178X+2jW8T1M0zEJM1RqNW
3Vnu11yZLOTWpgqwaqDFB0R6OhtcpWtFgY0RGpj0/yhyYotRI6hnIxPtThwT4imG
IwHhUPKXumhAskLnT6SNoR1NwXYV7NvXL5ibHz3TH8cVs6+F/XE+0oTCH26CM/Tb
sEyo2LLCahliV47rHTggr1sKcO+hIYvM8J3vPZRIV98R6Ody3CytXEylIZPBCfr9
tDSGx6HnJBSTEGn4H/sTIAo0YdqW/u8Dyjauk5G3RP5Qh6Cc/U3HIKtici8lorQm
noENZw2dZC1iIkCuDYWK40Gv9IhmZaq1T2mvMO4dJ6XSCNhicRvQfsNoVwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBU7RjSEsj4yOcYD8k1PcrzN2Zl/MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvRlR0R05JU3lQakk1eGdQeVRVOXl2TTNabVg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzhCAwQA
Hzn4MA0GCSqGSIb3DQEBCwUAA4IBAQB7RnzYYhNraTNxi4lOaAcJIZsciDkiAT41
1nYKMUaRfAkteb7vkYP4wGxplcWwUkYjxHyU9VxNe2sOjPfm934P5VbsN0DZjxiv
3olCXbB8HdmwQuK+41NQJqvUUL4hchE3jt0fHG2c93EeH7/J+zCe+YUwSreaU5b9
e9r02uEqM08kQcEsxiBHvFjBwqYptFUtzlEKHJPU/CVDLtR5jXXmCeavOOz4aqvl
kRrAw2eU0C5GktY9f2uk8/lVPn4muJl/atL5JUlJxrdqU0mCN5RnNmE6ADgcB+Dr
LigQz6uUNyO2a5/x38grhCW596qw44FLJr1eicw5q0u9Xzb55crE
-----END CERTIFICATE-----
Generated at Mon Jan 5 14:33:15 2026 by rpki-client