This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/g0uMLXQPPHy9S3B-t9dGUF-D4xg.roa
File:                     g0uMLXQPPHy9S3B-t9dGUF-D4xg.roa (raw, json)
Hash identifier:          uRsQUfVx79LD6gSFUrMKipF0VMnQaJBYHcAODMotdvM=
Subject key identifier:   83:4B:8C:2D:74:0F:3C:7C:BD:4B:70:7E:B7:D7:46:50:5F:83:E3:18
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019B7F84BC088910D2B9E65222B4EFBA13C6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/g0uMLXQPPHy9S3B-t9dGUF-D4xg.roa
Signing time:             Fri 02 Jan 2026 16:22:43 +0000
ROA not before:           Fri 02 Jan 2026 16:22:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214036
IP address blocks:        31.56.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Jan 2026 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:bc:08:89:10:d2:b9:e6:52:22:b4:ef:ba:13:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jan  2 16:22:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=834b8c2d740f3c7cbd4b707eb7d746505f83e318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:51:ac:d7:a1:df:92:f4:f6:f4:82:29:be:6b:
                    3a:8e:1a:19:47:d0:8f:bf:3a:09:11:eb:57:9a:f3:
                    a1:5b:0d:15:a2:d4:3d:8c:be:e0:14:18:46:1e:f9:
                    25:b5:0b:e0:42:39:76:79:43:5c:7a:b9:03:94:4f:
                    f3:df:40:2c:00:0a:64:e6:68:0e:e8:0b:13:f0:91:
                    a3:8f:13:8d:7a:b6:32:bb:fb:c2:13:52:c8:e4:15:
                    82:a0:ac:44:29:cc:76:24:3a:4c:28:2c:14:fd:63:
                    b0:a7:10:39:26:f8:e7:d4:67:4e:0d:e0:f7:2c:d3:
                    63:46:fa:9d:41:ee:fc:33:6e:0f:b0:5b:59:0a:cc:
                    03:da:38:fb:68:5b:14:66:e8:97:f7:20:63:7a:36:
                    04:4b:43:8e:2d:83:ec:6b:4a:52:83:19:90:92:31:
                    45:d9:dc:56:bf:8b:c7:ce:f4:39:89:d2:2e:90:38:
                    59:47:6c:d5:36:b6:1b:cb:d3:fd:55:18:76:ce:6e:
                    00:36:4e:71:38:e4:67:42:81:3a:68:72:39:68:c3:
                    14:ab:3c:89:94:c4:77:7d:24:2e:db:44:e3:34:13:
                    b4:04:a4:94:0c:b4:44:21:13:5c:6c:0c:44:ef:a2:
                    40:1b:a0:af:00:67:d3:a9:28:be:90:de:7e:55:a8:
                    9a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4B:8C:2D:74:0F:3C:7C:BD:4B:70:7E:B7:D7:46:50:5F:83:E3:18
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/g0uMLXQPPHy9S3B-t9dGUF-D4xg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:3f:35:9a:eb:e5:1f:05:17:06:0e:bd:93:03:f9:fa:42:83:
         ae:0f:16:7d:11:fc:0f:f0:34:71:92:f9:72:50:ee:fe:f4:47:
         67:fe:e0:19:65:0e:bc:61:97:ae:cc:5d:c3:e7:f4:cf:2a:e2:
         2d:2c:d7:fc:cb:1b:08:ff:1d:3d:e5:c0:62:6d:0a:95:5d:2a:
         68:db:9a:40:cf:d8:fe:07:45:4b:cd:fc:c2:20:ba:b1:46:62:
         68:a5:62:7b:3f:bc:e5:f8:c3:a2:d8:f2:13:52:43:f8:aa:ca:
         2d:ee:5a:7f:4c:02:42:e1:fc:6f:65:7c:8c:83:5c:df:b0:ce:
         43:71:fa:2a:55:83:a0:92:a7:45:4f:4d:c6:ba:ce:b3:68:7c:
         15:b2:1d:ff:cf:32:c5:3f:10:6c:83:d0:bf:16:90:77:d5:24:
         f9:74:8d:00:68:6f:f1:87:6e:89:60:95:f5:51:d2:7e:95:cf:
         61:71:91:fe:b1:d4:c2:93:1d:1f:7c:b3:0b:7e:07:89:6c:32:
         31:33:45:99:f7:38:79:3e:4d:db:8e:8b:bd:37:d0:de:06:61:
         f0:75:2f:e2:28:d6:cd:10:f0:05:e2:35:3f:e3:5e:c8:d9:1d:
         84:06:c1:b5:66:bd:19:0d:c6:03:dd:73:b8:fa:d4:e8:db:86:
         e8:f8:bb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 14:36:43 2026 by rpki-client