This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WBw0c7HWRvcQIdjP9YxEFmNnCy8.roa
File:                     WBw0c7HWRvcQIdjP9YxEFmNnCy8.roa (raw, json)
Hash identifier:          n0/N+/vDZeNSftfYc+9QgTxkontg15ZcnmxZHqtgG/0=
Subject key identifier:   58:1C:34:73:B1:D6:46:F7:10:21:D8:CF:F5:8C:44:16:63:67:0B:2F
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019B7F84B90B3362E19D7F56A41B519AA57A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WBw0c7HWRvcQIdjP9YxEFmNnCy8.roa
Signing time:             Fri 02 Jan 2026 16:22:43 +0000
ROA not before:           Fri 02 Jan 2026 16:22:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213930
IP address blocks:        31.57.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Jan 2026 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:b9:0b:33:62:e1:9d:7f:56:a4:1b:51:9a:a5:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jan  2 16:22:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=581c3473b1d646f71021d8cff58c441663670b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:98:59:d7:42:92:47:60:e8:f5:a1:a5:55:fb:
                    2c:56:16:01:dd:40:7c:49:00:4a:84:f2:9a:99:cd:
                    99:b8:52:18:d2:75:98:40:84:0f:37:c0:a4:97:fe:
                    14:c1:1e:f2:48:fe:a1:58:60:1a:6e:a7:2d:08:e0:
                    e3:1c:70:b2:98:83:48:67:e7:1c:bf:02:90:45:48:
                    15:82:ae:a0:fd:18:67:1a:b3:87:53:77:52:4e:09:
                    c2:a6:86:39:0f:72:b6:ce:ac:25:6f:e9:7d:d9:e6:
                    01:89:58:b6:c3:4e:70:6b:f1:73:2e:17:cb:18:55:
                    e1:7d:c8:17:d3:75:30:e7:31:1a:94:1f:ca:4b:3c:
                    b2:1f:a7:f8:41:09:db:43:6c:db:b6:ac:f9:b2:4d:
                    58:18:ab:38:2d:49:cb:54:a4:5a:1e:f8:f1:c6:a0:
                    45:2e:8b:34:0f:55:9b:11:8b:e3:4f:d3:1d:a7:6e:
                    42:57:30:b2:03:35:e7:60:d7:e5:05:5b:bd:38:b0:
                    3c:10:3b:10:ad:70:c6:09:0c:fe:58:ed:86:94:0a:
                    39:56:33:c9:eb:5c:b8:e4:25:b2:7b:67:31:7f:cc:
                    58:86:cb:b9:74:5b:76:9d:f6:bd:4f:8d:5e:f5:68:
                    36:cc:d2:61:b9:27:49:7a:6b:73:b5:d2:5a:05:46:
                    5a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1C:34:73:B1:D6:46:F7:10:21:D8:CF:F5:8C:44:16:63:67:0B:2F
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WBw0c7HWRvcQIdjP9YxEFmNnCy8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.57.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:29:4f:85:e8:7b:37:73:1b:96:c5:f9:56:eb:91:05:35:63:
         3f:e1:6a:78:4d:16:8c:ce:da:a3:26:56:52:fd:2c:b5:13:f9:
         2b:dd:7e:bd:11:18:cb:c1:d8:8a:aa:17:f8:81:f6:18:51:21:
         68:1b:99:5b:a4:70:12:a2:0e:bb:51:a6:3b:84:f5:6c:6b:c5:
         09:e8:94:32:c4:ca:4a:bb:d2:9a:53:ba:04:39:c1:f2:dd:8a:
         e2:bc:bd:56:f2:6e:76:c1:ac:43:29:40:3d:3d:5c:3b:c1:da:
         b2:86:30:54:a9:a9:bb:a9:b6:a4:5d:e6:d6:48:a8:f7:5f:3d:
         a8:b7:e5:af:c2:f3:e8:ad:8d:99:7d:27:15:54:c1:3b:2d:37:
         8d:a5:62:4c:d0:50:1c:65:8b:d0:41:77:3b:0f:1b:53:b4:8f:
         d7:50:a6:8f:07:79:29:cb:35:14:62:74:09:cf:fb:38:65:92:
         38:c6:28:3f:1f:70:83:e1:47:62:a7:54:9d:04:73:5e:12:84:
         26:37:3e:13:25:72:c7:02:6c:37:5b:37:20:14:a4:6d:16:dc:
         24:f1:d7:61:80:bc:fd:37:72:fc:68:89:d2:f1:76:cf:30:00:
         ee:10:50:17:dd:ad:26:0d:a1:ad:67:18:d4:0c:8e:4d:fa:1f:
         42:b9:9f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 14:34:55 2026 by rpki-client