This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bDZ7rQGPZmqPOzFu6zxUC-gp-sc.roa
File:                     bDZ7rQGPZmqPOzFu6zxUC-gp-sc.roa (raw, json)
Hash identifier:          X8RwFdXNNCaMQE4uvhJSCNVkqHZ4AIA9LI0/LwANrS8=
Subject key identifier:   6C:36:7B:AD:01:8F:66:6A:8F:3B:31:6E:EB:3C:54:0B:E8:29:FA:C7
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019B9F7DB984BD7BC7473963C08854EF6191
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bDZ7rQGPZmqPOzFu6zxUC-gp-sc.roa
Signing time:             Thu 08 Jan 2026 21:22:55 +0000
ROA not before:           Thu 08 Jan 2026 21:22:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135682
IP address blocks:        31.56.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 01:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9f:7d:b9:84:bd:7b:c7:47:39:63:c0:88:54:ef:61:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jan  8 21:22:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6c367bad018f666a8f3b316eeb3c540be829fac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:10:97:ce:fa:f1:78:72:b8:16:bb:2a:70:f6:
                    8a:87:6b:ae:db:1f:67:97:85:61:6c:c9:ab:6b:a7:
                    06:d1:32:6c:a9:30:c0:4d:c2:3b:35:71:35:f4:e4:
                    db:56:d7:be:15:d7:47:84:d6:58:ec:3e:62:5b:bf:
                    7e:e2:c2:48:51:57:8d:54:8b:4b:48:c2:74:f5:48:
                    e0:e5:d7:19:b3:36:31:47:8d:dd:a3:bc:69:d5:45:
                    ad:7a:02:ec:b9:c0:77:f5:41:b5:1f:c1:f8:3d:df:
                    fe:89:06:8c:7e:f3:44:30:f9:98:a9:84:9c:71:88:
                    61:8f:fe:75:7d:51:38:c4:b6:ec:9a:2f:17:a3:1c:
                    2b:4d:eb:4f:2e:0f:e8:e5:9a:dd:11:bb:79:9c:59:
                    c6:3b:4f:65:ed:80:ea:d9:60:0b:64:42:d6:6c:16:
                    17:62:81:ad:11:cf:ad:44:5f:1d:f9:2c:df:22:1f:
                    63:9a:50:1a:00:86:ed:23:56:61:97:40:36:b4:27:
                    ab:0b:0b:a6:36:02:3c:c9:93:b1:d9:e6:97:72:ed:
                    f7:0b:3f:d1:ec:0b:95:87:84:3b:f3:08:4b:c1:29:
                    56:c4:15:6d:d5:be:66:54:76:68:f1:69:be:b7:15:
                    9c:fd:a8:24:9f:36:92:da:03:6b:50:d9:09:08:ca:
                    de:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:36:7B:AD:01:8F:66:6A:8F:3B:31:6E:EB:3C:54:0B:E8:29:FA:C7
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bDZ7rQGPZmqPOzFu6zxUC-gp-sc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:e9:f9:cf:84:4a:34:19:4e:c1:a7:47:d9:90:fc:18:0e:e5:
         26:97:e8:bd:ee:1e:52:64:94:1b:65:3d:27:59:ed:22:45:dc:
         f0:a3:c9:da:8b:7f:bd:f6:df:ec:4e:8a:21:00:21:3b:9c:49:
         1e:5d:1d:02:ec:59:1f:3d:b2:70:dc:c1:36:ad:5b:01:08:39:
         29:4f:74:d6:e9:2f:16:b8:fb:f7:38:f8:c2:9f:e3:c0:4a:4f:
         9d:29:63:17:4d:1a:87:8e:5c:a4:b1:b1:a0:3b:d3:70:68:56:
         c7:c9:1c:2b:80:55:8f:b1:d2:83:7d:e8:6c:0b:45:c9:92:8f:
         4f:0f:8d:35:f1:4d:d8:0a:22:06:89:fa:3d:66:35:7c:7f:74:
         c7:52:3a:aa:56:f1:da:34:63:73:dd:99:91:75:a8:0c:09:ce:
         88:97:3a:0d:88:4f:18:1d:52:0c:62:80:e7:6e:27:fa:62:d9:
         c0:f1:56:9d:f0:f4:66:b5:7f:08:b6:4d:76:8c:92:78:f8:56:
         b4:43:ba:55:07:50:2f:20:67:fd:6e:06:1d:c1:b0:e9:2f:25:
         a6:62:01:7d:84:7a:4e:f5:4d:36:f4:c4:bd:a4:59:46:5f:22:
         dd:cf:e6:c3:b5:e5:6b:ce:5e:c2:ba:98:be:d2:0b:95:dc:88:
         52:b1:6d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 09:45:18 2026 by rpki-client