This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RWMscQ9z0FMJnPm2sRZ-ZoQ7gIU.roa
File:                     RWMscQ9z0FMJnPm2sRZ-ZoQ7gIU.roa (raw, json)
Hash identifier:          W7dhX/IbVVO/kfA3IybnB038bot0pwNkCzuTqH/MOmY=
Subject key identifier:   45:63:2C:71:0F:73:D0:53:09:9C:F9:B6:B1:16:7E:66:84:3B:80:85
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019B7F847AD5686C2A016E3CE3801CE9C9CE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RWMscQ9z0FMJnPm2sRZ-ZoQ7gIU.roa
Signing time:             Fri 02 Jan 2026 16:22:27 +0000
ROA not before:           Fri 02 Jan 2026 16:22:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133337
IP address blocks:        31.57.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Jan 2026 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:7a:d5:68:6c:2a:01:6e:3c:e3:80:1c:e9:c9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jan  2 16:22:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=45632c710f73d053099cf9b6b1167e66843b8085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:89:ea:66:49:db:1f:c4:23:f4:3e:2f:06:
                    7f:24:59:97:2b:2a:20:4d:3f:13:13:b2:1f:e3:e9:
                    60:91:ef:ed:6e:77:db:75:bd:b9:9e:51:10:97:71:
                    0d:04:c7:c0:f2:7a:d5:e8:e4:00:fb:72:1c:d5:fb:
                    c4:df:f7:a0:bf:ed:c9:16:31:0d:c6:84:c3:14:7a:
                    da:09:34:57:60:97:18:b0:03:86:66:5e:bb:88:57:
                    c2:a0:65:ad:e4:7c:a6:1e:a3:6d:aa:5f:a6:d9:3c:
                    03:e7:f0:8e:e2:ac:1d:fc:9e:95:c8:e0:58:89:72:
                    7c:0b:56:3c:4b:35:54:6b:18:de:6d:af:44:eb:06:
                    20:64:db:0a:06:6d:db:a6:21:f7:00:a7:b7:e7:1e:
                    59:c2:80:50:c2:03:bd:20:20:7a:34:73:9f:c9:d5:
                    bd:f4:9d:ad:87:0f:38:bf:d2:d6:b1:63:91:11:05:
                    05:69:8a:31:38:c1:cb:bc:d3:be:13:39:d0:9a:bf:
                    eb:8e:c4:3a:2d:ae:d6:c5:92:cf:8b:81:18:63:20:
                    65:98:3f:a1:37:93:71:bd:30:5f:c5:cd:63:e7:c1:
                    2a:c1:bd:a7:5b:21:ad:b3:28:bf:51:f5:88:13:87:
                    51:1d:28:4d:4c:75:73:77:f6:58:d4:92:b5:e6:1e:
                    10:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:63:2C:71:0F:73:D0:53:09:9C:F9:B6:B1:16:7E:66:84:3B:80:85
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RWMscQ9z0FMJnPm2sRZ-ZoQ7gIU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.57.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:78:92:b8:35:01:7a:d5:ed:5e:21:65:81:f2:83:1a:be:72:
         65:22:4b:93:0a:1f:01:9e:f1:44:59:c0:ac:da:ca:34:25:f4:
         4c:3b:47:ca:f8:08:2e:fd:b7:e1:75:9d:fa:80:d6:50:15:c9:
         04:3b:2a:9c:b4:e5:83:19:26:84:52:ad:b9:86:bc:04:21:e8:
         e1:ea:65:12:29:76:39:db:65:04:08:6f:b1:3d:3a:62:d6:59:
         bb:e3:b4:56:7f:36:68:21:89:7f:10:54:e7:68:ba:4e:63:14:
         b9:f6:50:e9:7f:6d:41:38:92:90:2f:a4:de:82:1b:db:e0:4e:
         9f:92:70:57:05:bd:20:63:0f:87:2f:35:9a:98:0b:ba:f8:83:
         d1:98:35:9c:8a:28:e2:9e:ea:63:1b:65:b9:78:e0:75:0e:c4:
         44:f4:76:b1:48:8e:b5:04:a7:c6:9f:47:a6:ea:57:70:04:1b:
         da:3c:15:d8:56:20:67:df:01:8d:49:ef:1b:54:c7:06:c1:37:
         c8:e3:19:d4:5e:c7:81:e5:65:56:c5:6e:de:65:f0:f8:c6:3d:
         82:05:03:16:68:c6:13:75:41:d0:28:3a:2d:3b:1c:04:78:1d:
         10:28:f5:75:e2:c0:9c:ee:a9:04:d8:04:3d:17:e0:fd:6e:56:
         a1:25:dc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 14:34:55 2026 by rpki-client