This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/StZhxvY-_B_ub526V9QQALd4w7E.roa
File:                     StZhxvY-_B_ub526V9QQALd4w7E.roa (raw, json)
Hash identifier:          ve5eF14IRyN96T89d5MXEUgCQmWW2I4SzJGG8hXG6FA=
Subject key identifier:   4A:D6:61:C6:F6:3E:FC:1F:EE:6F:9D:BA:57:D4:10:00:B7:78:C3:B1
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019B7F84DFA62C155098242E9EF2B1F00B13
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/StZhxvY-_B_ub526V9QQALd4w7E.roa
Signing time:             Fri 02 Jan 2026 16:22:52 +0000
ROA not before:           Fri 02 Jan 2026 16:22:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     395878
IP address blocks:        31.56.46.0/24 maxlen: 24
                          31.56.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Jan 2026 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:df:a6:2c:15:50:98:24:2e:9e:f2:b1:f0:0b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jan  2 16:22:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4ad661c6f63efc1fee6f9dba57d41000b778c3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:dd:18:51:16:28:16:c0:ed:b8:9c:2c:0c:00:
                    83:f5:05:6a:dc:c3:9f:4a:f8:ef:cb:b5:43:c1:2d:
                    db:31:e8:79:94:6d:bf:73:b6:b5:ef:d8:0d:73:c0:
                    40:43:9c:c4:fd:66:21:59:d6:67:9c:ff:1c:a6:8c:
                    ad:5d:5f:45:31:42:6e:e3:95:a9:13:ce:9e:00:2c:
                    33:ab:c3:15:fa:44:82:e3:34:e2:c2:32:1d:66:fa:
                    d0:00:15:6c:2d:c7:82:03:84:b0:ef:7a:19:53:06:
                    a3:12:25:6b:d7:af:cd:60:48:af:6a:23:c4:a0:d9:
                    8f:a6:d0:84:36:66:53:1e:ac:01:59:10:e7:f0:e2:
                    00:d7:19:27:1f:bf:9e:19:3e:fb:4f:d5:e9:fb:54:
                    ff:8b:76:e3:5b:62:e3:b2:87:54:be:b3:eb:4b:54:
                    70:5d:50:5e:f9:6f:c1:a6:bc:7d:23:88:39:0c:17:
                    e3:9f:55:98:0b:5e:b5:aa:1e:51:1b:20:1a:16:98:
                    7d:21:32:8f:1e:81:81:f3:7a:4d:b5:4e:a7:7f:ab:
                    ad:17:fc:f2:4d:68:83:ba:c4:82:61:d4:26:ff:b1:
                    75:b5:23:b2:bc:74:3e:86:82:33:79:e8:c5:a4:54:
                    0c:24:eb:bc:9f:27:95:84:64:ab:c7:a9:0f:ad:be:
                    69:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D6:61:C6:F6:3E:FC:1F:EE:6F:9D:BA:57:D4:10:00:B7:78:C3:B1
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/StZhxvY-_B_ub526V9QQALd4w7E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.46.0/24
                  31.56.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:25:f4:9e:40:80:fe:75:64:55:5f:42:17:9a:c0:a6:14:eb:
         34:e0:ba:81:20:24:23:af:6a:ec:75:00:5d:04:1f:ee:cb:ac:
         92:d1:d3:ec:4e:2e:a5:0b:cb:c0:ef:f3:16:68:e0:52:00:fc:
         6b:b2:a4:0a:43:58:23:9d:bf:0d:34:58:de:d0:0f:e3:9c:6c:
         7c:4f:00:ed:1a:a9:d8:06:c2:9f:03:a3:cb:3a:38:4b:10:b0:
         7a:b4:9b:0c:a5:9b:1d:6e:8d:16:3b:86:42:92:bc:12:49:61:
         ff:e5:c5:07:34:fe:9f:71:de:4d:fe:0f:2b:60:eb:c6:43:da:
         e7:cb:19:db:be:04:78:f3:44:0f:7e:fe:cf:af:0c:a2:78:7c:
         3f:7f:10:d2:1c:aa:4f:9d:bc:50:f1:13:be:89:b0:46:f6:4c:
         3f:9a:d2:cd:f7:fe:dc:f2:66:cd:c3:39:13:88:0f:da:84:b9:
         7a:fe:ef:b5:e7:2b:19:86:6e:8b:f4:27:7f:fe:db:43:b8:67:
         b7:b3:8e:3b:7b:fc:c0:d5:ab:fc:b1:be:a7:3b:dd:1e:ba:b2:
         ef:89:2d:5a:eb:b4:24:ba:c0:d6:7e:b8:f8:3f:7b:32:c9:36:
         87:69:cd:39:37:14:79:2b:b2:e2:bf:4c:a0:f8:09:6f:72:5e:
         46:55:75:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 14:34:45 2026 by rpki-client