This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/R5CXuXJ-0aV_4D-c3-2BEFQjBhE.roa
File:                     R5CXuXJ-0aV_4D-c3-2BEFQjBhE.roa (raw, json)
Hash identifier:          vOlsjgHViOkWKRSKLf/tBUW3dVemzvoe/iKUkAruF3g=
Subject key identifier:   47:90:97:B9:72:7E:D1:A5:7F:E0:3F:9C:DF:ED:81:10:54:23:06:11
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019B9CB74707C457C85E4F789A1EC1A94D84
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/R5CXuXJ-0aV_4D-c3-2BEFQjBhE.roa
Signing time:             Thu 08 Jan 2026 08:26:55 +0000
ROA not before:           Thu 08 Jan 2026 08:26:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50868
IP address blocks:        31.57.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 01:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9c:b7:47:07:c4:57:c8:5e:4f:78:9a:1e:c1:a9:4d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jan  8 08:26:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=479097b9727ed1a57fe03f9cdfed811054230611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f3:1d:a8:28:1f:e8:65:8d:c8:65:4f:39:86:
                    fd:78:7b:fe:76:df:61:00:b9:e2:9a:0e:28:65:05:
                    50:0f:7c:40:3f:ca:67:af:e4:02:1c:c3:e1:21:b4:
                    e2:65:c3:1d:c9:88:fb:c2:89:2b:09:b1:78:79:05:
                    f6:cb:f1:b9:0c:a8:32:27:94:17:ab:1c:61:ea:8a:
                    03:34:86:b2:f8:9e:f4:23:21:b9:f5:9e:29:ce:1c:
                    29:33:8f:f8:87:9e:c3:00:03:5b:33:57:f7:03:d2:
                    6c:fa:70:22:e3:38:27:1b:0f:3b:b7:fa:19:03:b4:
                    85:45:cb:ab:48:44:a0:0a:61:c0:ec:3a:29:2d:51:
                    96:72:f4:4c:60:ae:07:f6:a4:23:8f:c5:de:44:2e:
                    4e:96:4c:93:6b:9b:ab:a5:ec:0b:b2:f1:82:26:b4:
                    5d:04:4c:87:d5:02:41:6f:fd:39:97:17:80:53:82:
                    1d:1f:0b:68:a2:b4:d7:5b:97:a6:ff:5e:9b:a7:2f:
                    70:3f:0a:cc:1b:53:37:3e:57:d3:fe:04:ac:1b:0b:
                    5a:09:98:af:6c:2b:79:a9:c4:0d:1a:9d:33:78:68:
                    13:e7:22:e1:5f:d0:45:f2:c2:94:30:aa:64:17:64:
                    57:d3:37:25:ac:c0:68:07:66:0d:6d:33:c2:32:f0:
                    15:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:90:97:B9:72:7E:D1:A5:7F:E0:3F:9C:DF:ED:81:10:54:23:06:11
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/R5CXuXJ-0aV_4D-c3-2BEFQjBhE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.57.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:fa:73:fa:e4:b4:ab:37:bc:c7:0d:22:ac:5e:85:c9:89:df:
         e1:09:ff:48:10:9c:a2:05:da:0f:6c:ef:29:20:56:42:bc:8b:
         c6:f3:4d:86:11:20:53:6a:ab:e5:b3:9d:40:bd:30:be:a6:6f:
         a8:9e:bb:28:94:c8:ef:ca:1f:5f:b1:02:7b:b6:4b:27:4f:5e:
         cc:6d:2a:30:3b:58:57:77:30:71:c1:9b:d1:cc:2b:f9:f6:4a:
         5e:46:26:0b:d2:cc:73:8a:9b:de:4e:31:a7:b7:bb:ed:05:ad:
         b6:f7:c0:df:2b:6d:52:eb:7d:7d:19:f2:7f:86:aa:71:84:0c:
         2e:45:39:5f:c5:53:40:02:8d:32:94:f6:31:7a:ca:e7:04:b7:
         62:df:36:94:1f:21:b8:e1:84:35:02:be:a0:a1:dd:a8:ec:a8:
         a5:2a:75:f9:89:7c:ad:cd:ce:fa:b4:11:ef:f9:38:28:93:dc:
         fb:25:06:b3:b2:b8:e4:01:45:ce:ba:07:87:ca:fc:43:67:6d:
         c1:08:5d:1f:15:26:b8:4c:ce:2a:33:b3:62:82:53:f1:04:f1:
         4e:cf:db:5f:13:0b:79:51:3b:53:c8:0a:dd:ec:9f:92:c5:62:
         54:88:f1:2b:72:8b:f0:dd:fc:2e:a0:35:9b:e3:90:54:b7:15:
         38:e9:b9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 09:45:17 2026 by rpki-client