This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YW5dO_gwe1gHueE7M-U30xl9wrw.roa
File:                     YW5dO_gwe1gHueE7M-U30xl9wrw.roa (raw, json)
Hash identifier:          D5daEw4//Wg0rAr7fOxsitL5uND1qoioK9YxXwWBfMI=
Subject key identifier:   61:6E:5D:3B:F8:30:7B:58:07:B9:E1:3B:33:E5:37:D3:19:7D:C2:BC
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019BB0D433354A8639A7EC469B779656A3EB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YW5dO_gwe1gHueE7M-U30xl9wrw.roa
Signing time:             Mon 12 Jan 2026 06:10:55 +0000
ROA not before:           Mon 12 Jan 2026 06:10:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     20326
IP address blocks:        31.58.56.0/24 maxlen: 24
                          31.59.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Jan 2026 01:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:b0:d4:33:35:4a:86:39:a7:ec:46:9b:77:96:56:a3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jan 12 06:10:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=616e5d3bf8307b5807b9e13b33e537d3197dc2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6c:fc:cd:cf:52:c1:56:e9:bf:62:ce:ac:55:
                    80:ef:17:70:cf:22:2e:b9:5f:2d:0d:55:2e:87:4e:
                    f8:7b:62:01:94:ae:5f:ac:59:48:c7:26:85:5d:bc:
                    71:97:3f:67:ea:df:97:53:4f:67:44:79:01:9e:fb:
                    1b:67:e2:02:c4:17:3d:6b:8c:5c:da:68:87:d6:3b:
                    07:6f:3f:67:01:75:b8:87:54:f8:8b:07:b3:90:0d:
                    47:78:b4:20:ae:a3:90:82:80:c6:f0:81:2e:ea:33:
                    98:04:58:b7:29:2a:54:11:fc:e9:05:0e:66:30:51:
                    02:bd:99:8b:6e:13:27:27:8d:89:9e:91:a9:9b:08:
                    79:f2:bd:3d:cb:5d:da:5f:6a:d5:93:43:7d:9f:67:
                    aa:b0:d8:dd:b4:a8:cd:0e:49:13:8a:b0:e1:02:13:
                    0d:cb:7b:9a:16:00:5a:d5:27:6c:94:22:fc:5d:58:
                    b0:cc:f8:95:47:f1:55:e3:4f:6a:18:77:15:d7:1c:
                    48:30:38:e2:0c:6c:36:6c:b1:1c:6d:e4:68:f8:a0:
                    1c:f9:99:e7:a1:b0:8f:8f:c0:35:9c:27:ee:28:ef:
                    32:5e:2e:95:7a:4e:fc:1d:e3:ea:7a:ac:8f:29:c6:
                    3a:1c:cc:52:b9:b3:33:e8:25:df:50:ab:cf:6c:18:
                    5e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6E:5D:3B:F8:30:7B:58:07:B9:E1:3B:33:E5:37:D3:19:7D:C2:BC
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YW5dO_gwe1gHueE7M-U30xl9wrw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.58.56.0/24
                  31.59.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:e7:3b:76:8d:42:99:e1:89:38:25:2f:55:6f:bc:c0:b2:7e:
         4c:30:00:79:c0:29:72:f0:b2:62:b3:44:74:c6:5b:ef:df:64:
         ab:00:42:3f:d9:f7:24:99:b1:46:64:ad:d4:ce:8c:58:e6:ed:
         4f:74:0e:46:fe:7d:0b:ba:24:71:13:82:59:f8:dd:3d:92:f4:
         04:ed:00:fe:b2:1d:9b:81:26:5f:2e:09:5e:73:8c:62:4b:40:
         db:1a:3a:3e:d8:ef:54:d9:d8:16:32:b2:cc:25:6b:7e:9f:01:
         2b:a3:2b:77:72:81:b1:40:65:31:ef:8b:38:f7:de:cf:bc:3c:
         39:56:ac:56:d8:78:2b:20:67:f1:53:ec:04:51:69:3b:13:35:
         40:ad:aa:26:68:de:54:60:5a:23:22:7e:96:1b:cf:c4:db:93:
         b6:f5:da:bd:68:ec:06:48:88:78:e3:6f:4d:c9:e6:8a:dd:45:
         66:3f:63:12:80:a1:52:a2:58:4f:2f:06:1f:d7:e4:11:a1:02:
         59:89:12:dc:5b:c3:45:2d:bb:f5:10:83:71:5d:90:40:a9:fd:
         44:f6:f0:1a:50:42:97:c0:b5:5d:6c:7b:a1:91:70:c6:9e:95:
         be:ef:e7:c8:8f:81:60:c7:91:74:d0:4a:57:b0:44:98:c7:ed:
         37:30:81:b3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZuw1DM1SoY5p+xGm3eWVqPrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMTEyMDYxMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTZlNWQzYmY4MzA3YjU4MDdiOWUxM2IzM2U1MzdkMzE5N2RjMmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumz8zc9SwVbpv2LOrFWA7xdwzyIu
uV8tDVUuh074e2IBlK5frFlIxyaFXbxxlz9n6t+XU09nRHkBnvsbZ+ICxBc9a4xc
2miH1jsHbz9nAXW4h1T4iwezkA1HeLQgrqOQgoDG8IEu6jOYBFi3KSpUEfzpBQ5m
MFECvZmLbhMnJ42JnpGpmwh58r09y13aX2rVk0N9n2eqsNjdtKjNDkkTirDhAhMN
y3uaFgBa1SdslCL8XViwzPiVR/FV409qGHcV1xxIMDjiDGw2bLEcbeRo+KAc+Znn
obCPj8A1nCfuKO8yXi6Vek78HePqeqyPKcY6HMxSubMz6CXfUKvPbBhe0QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGFuXTv4MHtYB7nhOzPlN9MZfcK8MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvWVc1ZE9fZ3dlMWdIdWVFN00tVTMweGw5d3J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzo4AwQA
HzusMA0GCSqGSIb3DQEBCwUAA4IBAQBt5zt2jUKZ4Yk4JS9Vb7zAsn5MMAB5wCly
8LJis0R0xlvv32SrAEI/2fckmbFGZK3UzoxY5u1PdA5G/n0LuiRxE4JZ+N09kvQE
7QD+sh2bgSZfLglec4xiS0DbGjo+2O9U2dgWMrLMJWt+nwEroyt3coGxQGUx74s4
997PvDw5VqxW2HgrIGfxU+wEUWk7EzVAraomaN5UYFojIn6WG8/E25O29dq9aOwG
SIh4429NyeaK3UVmP2MSgKFSolhPLwYf1+QRoQJZiRLcW8NFLbv1EINxXZBAqf1E
9vAaUEKXwLVdbHuhkXDGnpW+7+fIj4Fgx5F00EpXsESYx+03MIGz
-----END CERTIFICATE-----
Generated at Tue Jan 13 06:59:24 2026 by rpki-client