This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/W_LFT7hZ98Q2SAef1lLEgXtR4ug.roa
File:                     W_LFT7hZ98Q2SAef1lLEgXtR4ug.roa (raw, json)
Hash identifier:          vD0SgmBpRaS+US/uSxziiP76wRlKWsz/Af2i2tARlAE=
Subject key identifier:   5B:F2:C5:4F:B8:59:F7:C4:36:48:07:9F:D6:52:C4:81:7B:51:E2:E8
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019B7F8468743F975E2DB889E3404A92134E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/W_LFT7hZ98Q2SAef1lLEgXtR4ug.roa
Signing time:             Fri 02 Jan 2026 16:22:22 +0000
ROA not before:           Fri 02 Jan 2026 16:22:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     46177
IP address blocks:        31.56.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Jan 2026 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:68:74:3f:97:5e:2d:b8:89:e3:40:4a:92:13:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jan  2 16:22:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5bf2c54fb859f7c43648079fd652c4817b51e2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:27:66:88:4e:75:28:44:95:76:ef:a0:98:3f:
                    a4:09:c3:11:a4:09:29:ab:29:81:a9:2a:34:de:20:
                    a5:70:ee:ae:e8:bc:4d:8b:e5:de:d9:4d:21:e1:6c:
                    73:d8:ee:8e:2d:20:5c:5e:3b:3f:e6:69:1a:6b:b8:
                    b8:d2:3b:78:3d:8d:cc:15:0d:5f:f1:f0:00:4a:e8:
                    01:0d:3e:0f:ec:80:7a:16:a2:d6:9c:9b:e8:34:cc:
                    e4:78:64:1e:45:b0:f3:cc:6b:b7:37:de:04:d7:4a:
                    42:5f:e4:74:4f:26:c2:ed:bf:62:b5:24:6c:18:e6:
                    77:d5:8d:14:01:20:47:39:7a:6c:25:ae:ce:0e:85:
                    1e:8e:24:6f:76:f7:7d:89:3a:7c:cf:d9:29:fa:dd:
                    04:54:58:5e:1b:2c:a7:2c:f0:92:35:80:cd:f2:0a:
                    7e:4d:40:3c:60:10:37:b6:f1:60:98:7d:22:cc:18:
                    8f:fd:7f:42:ea:95:66:49:20:5b:5e:e2:c1:e7:79:
                    47:18:ec:54:44:bb:91:66:eb:e7:35:ec:be:37:e8:
                    5a:a2:30:bf:94:11:74:e2:49:82:5f:e7:1a:37:f1:
                    31:07:d1:09:c8:10:53:b9:06:24:49:41:bb:aa:26:
                    e5:51:aa:27:35:ee:1d:d1:21:23:7f:cd:73:49:95:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F2:C5:4F:B8:59:F7:C4:36:48:07:9F:D6:52:C4:81:7B:51:E2:E8
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/W_LFT7hZ98Q2SAef1lLEgXtR4ug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:4e:72:f7:88:35:ec:62:be:32:b8:d0:ae:cd:6d:bc:8a:07:
         cd:b7:ea:63:03:e7:16:b2:8a:72:43:57:1e:ee:a5:1f:9a:0b:
         a9:2f:38:53:c3:b4:91:b9:12:6d:37:fb:62:60:53:56:80:c1:
         28:81:a9:1a:c1:af:6e:29:b0:9b:94:15:c7:f8:22:22:f6:9b:
         72:c1:4b:c8:16:e0:f9:89:46:34:1c:ff:b1:e1:ff:77:e5:47:
         f7:eb:08:89:c9:9d:e9:2e:9d:71:e3:00:d5:6f:89:9b:3f:b6:
         1b:86:5f:47:c2:85:1e:58:fe:e6:62:55:97:b3:c4:72:f8:6f:
         9e:ca:6d:8d:a0:ca:03:46:fd:34:ad:81:66:86:a1:5c:85:b7:
         06:df:f9:6f:c1:b4:ca:2e:dd:37:d2:87:32:52:31:1c:93:d1:
         be:03:34:9a:af:4e:08:8f:ef:1f:9c:02:5a:6f:2c:fb:62:c6:
         36:95:7a:2b:82:36:cc:18:5a:f2:3a:79:88:14:ba:c1:80:92:
         db:79:55:e6:ed:d5:a9:93:32:6e:31:20:c6:86:ed:55:5b:51:
         2f:52:58:41:27:0b:10:d4:ba:ae:7c:c0:11:e0:61:86:c3:4d:
         73:cd:d8:76:08:42:65:f3:22:57:1b:ed:bc:f4:8c:b0:d8:8c:
         c3:d0:61:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 14:33:12 2026 by rpki-client