This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ULUUv57PcYsRMC77flSVwqB9Emo.roa
File:                     ULUUv57PcYsRMC77flSVwqB9Emo.roa (raw, json)
Hash identifier:          vl/5mxEGYjVr3B68xDFyByXpuGcGFlTWpAkhbXkaG3E=
Subject key identifier:   50:B5:14:BF:9E:CF:71:8B:11:30:2E:FB:7E:54:95:C2:A0:7D:12:6A
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019B7F845028399A1B144B1CF4470566C1EB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ULUUv57PcYsRMC77flSVwqB9Emo.roa
Signing time:             Fri 02 Jan 2026 16:22:16 +0000
ROA not before:           Fri 02 Jan 2026 16:22:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9304
IP address blocks:        31.56.6.0/24 maxlen: 24
                          31.56.34.0/24 maxlen: 24
                          31.56.35.0/24 maxlen: 24
                          31.56.231.0/24 maxlen: 24
                          31.57.11.0/24 maxlen: 24
                          31.57.25.0/24 maxlen: 24
                          31.57.53.0/24 maxlen: 24
                          31.57.59.0/24 maxlen: 24
                          31.57.120.0/24 maxlen: 24
                          31.57.129.0/24 maxlen: 24
                          31.57.142.0/24 maxlen: 24
                          31.57.146.0/24 maxlen: 24
                          31.57.151.0/24 maxlen: 24
                          31.57.170.0/24 maxlen: 24
                          31.57.171.0/24 maxlen: 24
                          31.57.249.0/24 maxlen: 24
                          31.58.213.0/24 maxlen: 24
                          31.59.108.0/24 maxlen: 24
                          31.59.109.0/24 maxlen: 24
                          31.59.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Jan 2026 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:50:28:39:9a:1b:14:4b:1c:f4:47:05:66:c1:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jan  2 16:22:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=50b514bf9ecf718b11302efb7e5495c2a07d126a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:b0:25:b1:5d:54:82:ea:30:ec:7b:dd:89:
                    33:d0:a0:0c:23:f4:94:75:cf:99:df:43:dd:76:d8:
                    63:90:10:d0:28:3d:15:6d:54:60:ae:62:bb:92:36:
                    ba:2b:a5:43:90:6c:84:ca:0a:ec:d6:ad:c5:0d:03:
                    3c:f0:e8:16:3f:03:c3:6a:b7:12:af:c5:28:0d:c4:
                    a5:d3:da:a4:4f:82:f0:3f:1a:33:ff:fc:b4:36:d1:
                    c2:94:0c:2e:e4:e4:83:8d:1b:11:e3:95:0c:e8:19:
                    d7:0c:3a:d2:5e:2a:c8:73:ab:4a:4b:14:1f:f7:06:
                    e7:82:04:64:28:61:5e:b7:6d:4a:fd:53:2a:72:61:
                    34:1a:7d:73:b6:88:d7:73:c6:cd:39:89:ed:05:3e:
                    5c:49:1a:66:18:df:20:6e:30:32:d0:dd:cb:11:dd:
                    b2:ea:8b:a7:e5:ff:18:12:26:22:b2:f7:09:a3:1c:
                    8d:8b:2b:be:3b:5b:8c:82:b1:97:6d:3a:58:8d:35:
                    b1:44:e4:03:61:70:11:4c:6a:10:79:66:fa:ba:03:
                    a2:00:ec:f3:e8:e6:35:fe:a1:ca:aa:43:bd:6e:f1:
                    e1:a6:b6:64:54:31:81:65:0c:ea:15:e1:20:14:65:
                    7f:fe:30:d4:c3:34:50:83:92:77:ba:c8:5d:e7:78:
                    b2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B5:14:BF:9E:CF:71:8B:11:30:2E:FB:7E:54:95:C2:A0:7D:12:6A
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ULUUv57PcYsRMC77flSVwqB9Emo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.6.0/24
                  31.56.34.0/23
                  31.56.231.0/24
                  31.57.11.0/24
                  31.57.25.0/24
                  31.57.53.0/24
                  31.57.59.0/24
                  31.57.120.0/24
                  31.57.129.0/24
                  31.57.142.0/24
                  31.57.146.0/24
                  31.57.151.0/24
                  31.57.170.0/23
                  31.57.249.0/24
                  31.58.213.0/24
                  31.59.108.0-31.59.110.255

    Signature Algorithm: sha256WithRSAEncryption
         b3:a7:9e:4f:b5:f0:f3:eb:7f:48:3c:a6:ba:6a:1d:81:d2:60:
         02:de:7e:94:fb:49:67:60:ac:52:dc:0d:ad:a7:bc:2b:55:fc:
         01:aa:3e:2f:db:e4:c1:07:ba:cc:a8:d2:d9:31:4f:cf:4c:b9:
         1b:31:05:dd:23:04:5a:e5:1e:b0:c9:b8:fa:57:f9:c7:29:30:
         35:ea:a6:a8:4b:bc:35:60:78:b1:97:36:a0:f1:74:44:1b:c3:
         61:97:16:dc:f1:e7:10:08:82:80:d9:4e:68:e9:6f:ca:45:ba:
         df:c5:fc:13:0f:f8:0f:a0:4c:5a:1a:c6:db:6a:da:c2:a1:72:
         81:86:0f:3d:a3:d8:3d:85:45:2e:ab:56:7f:c4:0b:98:48:42:
         8b:d5:7e:de:d9:51:ae:82:95:fc:7d:d4:0c:e9:6b:92:7f:b4:
         20:a6:e5:af:83:44:b7:7d:25:4a:cc:37:af:d9:1f:7e:63:1d:
         c5:65:e7:01:76:c0:8f:81:51:2e:c1:03:6f:a0:24:71:c9:54:
         b4:d0:2c:de:26:75:5b:98:91:07:28:6b:7b:f5:9d:ef:81:8a:
         45:f3:f8:50:18:f6:fa:30:31:51:c1:21:96:75:38:a1:35:56:
         ab:18:f0:42:db:71:fb:3a:f2:ba:37:f3:9e:12:b0:81:3b:fb:
         62:80:3d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 14:33:06 2026 by rpki-client