This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RuN78eqjMuJRWrMpbBVeGXDRjAw.roa
File:                     RuN78eqjMuJRWrMpbBVeGXDRjAw.roa (raw, json)
Hash identifier:          hFLOCKj3WJCXUaIpDTEd/0TLPwOEs50aJlRBBEwx4Fc=
Subject key identifier:   46:E3:7B:F1:EA:A3:32:E2:51:5A:B3:29:6C:15:5E:19:70:D1:8C:0C
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019B7F84E13FBD99A2D7415231549487B808
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RuN78eqjMuJRWrMpbBVeGXDRjAw.roa
Signing time:             Fri 02 Jan 2026 16:22:53 +0000
ROA not before:           Fri 02 Jan 2026 16:22:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     398465
IP address blocks:        31.57.226.0/24 maxlen: 24
                          31.57.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Jan 2026 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:e1:3f:bd:99:a2:d7:41:52:31:54:94:87:b8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jan  2 16:22:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=46e37bf1eaa332e2515ab3296c155e1970d18c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:24:a7:08:c8:03:48:de:ea:75:f1:d0:c6:ad:
                    77:94:22:e5:06:2a:26:a5:61:19:69:00:21:3c:36:
                    48:92:09:80:d5:49:c6:38:e5:63:c3:75:3a:a7:25:
                    93:e6:69:7a:ff:30:63:2f:74:46:13:94:8c:4c:b7:
                    97:95:58:25:72:c6:2c:9c:6b:06:2f:8f:ce:2f:e9:
                    53:ec:5f:ce:6d:bb:ec:91:0d:cd:f0:be:4c:51:c9:
                    f5:42:97:69:27:04:da:51:11:1c:42:71:78:da:63:
                    17:10:71:b9:21:d8:97:ae:6b:89:63:76:1d:10:03:
                    0b:76:76:a8:4b:a5:07:b9:0a:d8:59:03:83:3a:a5:
                    56:36:12:fb:1b:19:b3:7d:64:f9:79:cc:34:bf:f7:
                    7e:87:ce:3d:c8:18:a3:5d:64:ea:cb:c3:a2:ce:aa:
                    c0:bc:47:26:67:af:41:34:e9:9a:3e:a7:cf:29:2e:
                    d0:0b:18:95:80:d7:cf:a5:2b:56:25:c8:e2:df:b1:
                    9f:93:54:66:fa:ce:96:f0:17:95:0f:76:87:03:be:
                    bf:5c:72:54:a6:3b:de:da:d6:64:03:5c:0f:38:8d:
                    af:be:04:4e:b3:c7:74:72:8d:c2:7e:d5:6b:64:87:
                    8b:ec:3d:0f:18:3b:58:c7:53:49:f4:af:69:b0:fc:
                    c4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E3:7B:F1:EA:A3:32:E2:51:5A:B3:29:6C:15:5E:19:70:D1:8C:0C
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RuN78eqjMuJRWrMpbBVeGXDRjAw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.57.226.0/24
                  31.57.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:78:8b:1a:a3:f2:c1:0d:7a:b1:34:de:f3:57:69:34:96:86:
         23:a5:6d:83:e3:ff:5b:78:87:77:85:db:89:9a:cc:9a:23:4c:
         d9:da:c1:e1:ca:a3:1c:b4:09:a4:66:d9:b8:45:63:e1:bf:ed:
         bb:d3:0d:ab:8e:24:e9:ea:5e:8f:f8:25:bf:ec:f9:3c:2c:c6:
         8d:ed:56:10:ca:1c:7b:28:05:94:6a:51:c3:93:43:52:a3:fb:
         41:a2:4a:9b:d3:9c:01:e2:ee:06:be:66:33:7a:f0:00:75:ab:
         5c:c5:36:48:44:2e:4b:66:cb:10:c2:97:e6:c6:05:04:55:3a:
         98:bc:22:ee:e2:54:68:50:fb:13:8d:dc:7c:70:28:a5:3b:ad:
         77:28:66:07:34:e7:7d:b6:e9:99:d0:59:65:aa:00:e9:d0:33:
         ac:e0:03:dc:dd:86:d5:83:84:78:95:7c:08:21:52:42:68:61:
         b6:0b:ef:77:8c:9c:02:7f:28:73:0f:50:b4:39:97:42:42:b1:
         d8:01:5f:04:93:06:95:c1:8e:b3:77:15:95:de:d4:09:21:8f:
         5c:e2:71:db:42:16:81:29:b8:ca:18:11:cb:1d:62:db:3e:f0:
         73:56:b0:7b:67:9f:59:de:08:07:90:7a:94:1b:33:b5:5a:0a:
         c7:c7:9d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 14:33:03 2026 by rpki-client