This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/j-Cpc7hUfKS17e0gGa5HfIeDCrc.roa
File:                     j-Cpc7hUfKS17e0gGa5HfIeDCrc.roa (raw, json)
Hash identifier:          iGVl959nCYg7doI/1moCl4w5Yxfeq8Zm/cLRjQnJQis=
Subject key identifier:   8F:E0:A9:73:B8:54:7C:A4:B5:ED:ED:20:19:AE:47:7C:87:83:0A:B7
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019B78D53B1DDB35DFD3F9BF6C73512295D7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/j-Cpc7hUfKS17e0gGa5HfIeDCrc.roa
Signing time:             Thu 01 Jan 2026 09:13:18 +0000
ROA not before:           Thu 01 Jan 2026 09:13:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     16276
IP address blocks:        31.56.52.0/22 maxlen: 22
                          31.56.112.0/24 maxlen: 24
                          31.56.219.0/24 maxlen: 24
                          31.57.161.0/24 maxlen: 24
                          31.57.199.0/24 maxlen: 24
                          31.58.88.0/24 maxlen: 24
                          31.59.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:d5:3b:1d:db:35:df:d3:f9:bf:6c:73:51:22:95:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jan  1 09:13:18 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8fe0a973b8547ca4b5eded2019ae477c87830ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9e:a9:20:82:be:1d:d6:50:5c:62:6f:f6:47:
                    59:b8:ca:2d:07:8d:e6:ca:5d:4c:e5:9a:97:eb:49:
                    db:09:9b:c4:ff:58:d4:0e:ae:82:7a:e5:86:c7:38:
                    ca:ee:03:28:5d:c8:05:1f:40:f4:5b:be:ca:04:8c:
                    96:45:b2:77:25:e1:33:cd:9c:26:74:35:13:0f:ef:
                    d3:5d:9b:a2:07:ae:71:26:89:54:84:8c:ad:e4:38:
                    e7:10:f4:5c:41:55:06:5f:b9:58:05:4d:a8:46:31:
                    c2:67:db:1b:d0:0d:79:f7:7a:b9:da:e1:a7:c6:46:
                    7e:8a:ed:eb:ae:28:0d:e8:eb:91:d1:0d:e3:bd:8f:
                    a5:0a:e3:f7:f3:67:5a:07:62:58:53:81:2d:e0:4c:
                    d2:9c:1b:c9:20:7e:81:9c:01:44:f4:77:57:13:a8:
                    7d:28:82:5c:b7:9c:21:41:ba:07:1c:8c:27:cb:bd:
                    15:23:99:d6:90:7f:e9:5d:54:8c:97:6a:2e:b2:a3:
                    70:36:17:ff:a9:6d:8a:da:6e:08:bd:9b:0d:39:60:
                    b1:17:a1:a5:59:ea:fb:ba:7b:32:07:89:55:89:36:
                    3d:1e:fa:e4:aa:3f:43:3b:6e:47:f8:e2:cf:9a:a6:
                    66:5c:d7:57:f3:5f:fe:e3:f7:dc:de:5a:25:a9:b0:
                    c0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E0:A9:73:B8:54:7C:A4:B5:ED:ED:20:19:AE:47:7C:87:83:0A:B7
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/j-Cpc7hUfKS17e0gGa5HfIeDCrc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.52.0/22
                  31.56.112.0/24
                  31.56.219.0/24
                  31.57.161.0/24
                  31.57.199.0/24
                  31.58.88.0/24
                  31.59.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:9b:d0:52:e7:f8:3a:d1:ca:70:e6:43:c9:77:a8:03:8b:e0:
         a3:a3:7a:9e:06:0b:c8:a0:8e:67:f2:58:76:16:52:3d:52:89:
         4d:bd:ff:bb:dd:6f:bd:54:ff:51:e3:75:31:fd:ba:b1:68:fc:
         02:91:45:b2:61:7e:99:1b:c2:4e:e8:3f:11:ad:2d:d3:d4:de:
         b2:d9:25:d1:4d:72:a2:a0:ae:20:02:5a:9a:bb:6d:e8:45:04:
         3e:51:e0:10:51:37:36:88:8d:94:5b:7a:15:cf:a0:11:e4:ed:
         e2:e0:2f:a9:4c:98:ef:d9:5c:e2:ae:17:36:b9:d4:79:f2:18:
         30:12:88:9a:23:3b:d8:f7:f8:42:2d:39:cf:d3:c8:70:11:d4:
         f7:f3:e3:61:7a:d4:d0:7e:92:b1:ab:0e:7a:0e:67:c5:6f:4c:
         a6:24:c0:8d:b8:b7:24:a6:9d:1a:31:8d:09:2f:18:ac:39:ba:
         ca:c8:0e:4e:e3:2e:1c:2e:22:5b:d8:e4:18:a2:78:12:78:c2:
         46:b0:7b:fc:2c:cd:3c:74:12:dc:16:d5:90:94:65:11:0c:c2:
         b3:9f:31:4e:74:2b:3f:6c:57:85:6b:0e:82:db:03:10:e6:a0:
         71:d3:9f:f4:37:d9:8b:41:ca:2f:d4:b6:6a:36:d5:04:c5:74:
         e5:e2:51:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:30:18 2026 by rpki-client