This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ve6zewET-v_jsts1QvZSSHLYcA0.roa
File:                     Ve6zewET-v_jsts1QvZSSHLYcA0.roa (raw, json)
Hash identifier:          TwxNG2obhKbPFxfF8wLbATiwew3D33IAnlVuvXVjNiU=
Subject key identifier:   55:EE:B3:7B:01:13:FA:FF:E3:B2:DB:35:42:F6:52:48:72:D8:70:0D
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019B834ECFCAF9E29B7D71AEAD107381A164
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ve6zewET-v_jsts1QvZSSHLYcA0.roa
Signing time:             Sat 03 Jan 2026 10:02:18 +0000
ROA not before:           Sat 03 Jan 2026 10:02:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     20473
IP address blocks:        31.56.86.0/24 maxlen: 24
                          31.57.122.0/24 maxlen: 24
                          31.57.124.0/24 maxlen: 24
                          31.57.125.0/24 maxlen: 24
                          31.57.140.0/24 maxlen: 24
                          31.57.162.0/23 maxlen: 24
                          31.57.164.0/23 maxlen: 24
                          31.57.180.0/24 maxlen: 24
                          31.58.42.0/24 maxlen: 24
                          31.58.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Jan 2026 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:83:4e:cf:ca:f9:e2:9b:7d:71:ae:ad:10:73:81:a1:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jan  3 10:02:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=55eeb37b0113faffe3b2db3542f6524872d8700d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:70:ad:d7:ea:ad:24:45:b6:f3:b6:d7:7b:2a:
                    0c:14:a8:6b:5c:1e:5a:ce:c9:f1:1f:a5:7a:69:72:
                    8d:b8:5b:9b:1c:87:f7:37:ce:46:39:99:84:96:85:
                    6f:dd:05:12:c6:3a:c2:59:8c:41:54:00:50:6e:e1:
                    5d:ed:69:3f:ed:d2:9f:d8:fa:aa:f0:47:41:8a:67:
                    75:d9:b3:99:3c:e3:82:86:04:98:74:81:79:f1:56:
                    06:c2:1b:6f:62:f8:9e:cb:d1:88:26:ea:35:fe:f7:
                    34:a9:cf:a0:1c:5a:a4:e0:34:23:3a:dd:0c:5a:3f:
                    1d:db:17:35:a0:67:8f:bd:0a:93:d2:d9:c9:38:51:
                    99:d9:0b:8f:e9:0e:b5:9c:94:d2:00:17:9b:5c:10:
                    8d:48:84:74:b3:12:e5:9f:3b:46:e1:7a:a9:c7:ed:
                    68:96:7a:a6:16:48:76:40:7f:07:a1:ff:23:11:13:
                    97:36:e9:a1:db:b2:85:78:86:22:48:3f:79:3b:fd:
                    da:e1:89:04:b7:25:ad:19:a2:e0:19:1c:8c:07:58:
                    61:ff:28:7d:48:7e:b2:fb:ff:a6:4a:cd:4c:00:c4:
                    a5:1e:d3:10:2c:d0:b0:9c:64:ad:d2:72:8f:bb:50:
                    41:e2:44:4f:00:6b:36:20:91:d0:31:3c:d2:42:7a:
                    f5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EE:B3:7B:01:13:FA:FF:E3:B2:DB:35:42:F6:52:48:72:D8:70:0D
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ve6zewET-v_jsts1QvZSSHLYcA0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.86.0/24
                  31.57.122.0/24
                  31.57.124.0/23
                  31.57.140.0/24
                  31.57.162.0-31.57.165.255
                  31.57.180.0/24
                  31.58.42.0/24
                  31.58.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:ce:ed:31:e9:6e:e5:a2:a4:dd:de:16:a4:20:1a:29:5e:4b:
         2e:f8:b3:10:de:bb:23:8d:13:5d:f7:76:7e:17:48:5d:c2:9a:
         85:d5:65:af:15:45:da:97:a7:a8:ed:d1:4c:c8:b5:cb:8b:09:
         01:d4:47:9c:2f:74:9b:34:9d:98:06:eb:dd:02:b6:84:40:e4:
         e8:1a:fe:bc:c8:6a:28:50:88:f2:d3:93:df:59:2b:b0:c9:39:
         3f:c9:b4:1f:23:90:18:d9:2b:6d:9a:d9:29:55:d0:01:ee:b0:
         86:72:79:7b:35:df:21:20:e0:9d:4f:42:71:35:9e:c4:15:2b:
         62:19:b1:7a:32:e0:bc:01:83:c9:26:3b:0d:89:d2:c3:ab:35:
         4f:6c:a6:a5:c8:c9:6f:46:70:22:35:35:25:88:46:dd:7b:51:
         61:ad:64:23:fc:07:bf:35:6b:c0:7b:3f:54:3f:eb:31:98:95:
         a9:fb:e4:7b:02:03:9b:ef:6f:f3:16:ca:99:38:3a:19:15:a6:
         b1:d5:57:a4:01:d8:c2:b1:c1:1e:1a:57:97:8f:db:72:a8:e7:
         6d:a7:f7:65:07:2f:bf:a7:d4:6b:a0:ad:e7:d4:a4:b3:9d:8f:
         74:b6:b3:5d:ef:73:c7:b1:fb:20:cd:68:95:2a:a6:40:84:aa:
         0c:fb:25:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 14:35:51 2026 by rpki-client