This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/k1O0e-j_wag-aM-B4yiTk2DDN48.roa
File:                     k1O0e-j_wag-aM-B4yiTk2DDN48.roa (raw, json)
Hash identifier:          nRImz+WFN3bI+10rnU7AOIrKo9KUVTMw7DWLHEL+QYU=
Subject key identifier:   93:53:B4:7B:E8:FF:C1:A8:3E:68:CF:81:E3:28:93:93:60:C3:37:8F
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019B4F836A5AFB96A933EB8144E2AB1BEFFC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/k1O0e-j_wag-aM-B4yiTk2DDN48.roa
Signing time:             Wed 24 Dec 2025 08:39:31 +0000
ROA not before:           Wed 24 Dec 2025 08:39:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     401776
IP address blocks:        31.56.64.0/24 maxlen: 24
                          31.56.68.0/24 maxlen: 24
                          31.56.83.0/24 maxlen: 24
                          31.56.97.0/24 maxlen: 24
                          31.57.55.0/24 maxlen: 24
                          31.57.132.0/24 maxlen: 24
                          31.58.41.0/24 maxlen: 24
                          31.58.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Dec 2025 05:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4f:83:6a:5a:fb:96:a9:33:eb:81:44:e2:ab:1b:ef:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Dec 24 08:39:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9353b47be8ffc1a83e68cf81e328939360c3378f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:38:aa:1f:da:60:c7:bd:40:4c:cd:c4:52:5b:
                    93:d5:1e:ea:80:75:14:89:b0:60:18:2c:35:5c:60:
                    70:32:63:8f:9a:18:e9:a5:3d:74:de:bc:e5:94:ca:
                    dc:d2:40:97:d3:3b:04:77:31:dd:ab:5c:2b:2d:06:
                    e5:94:01:82:9e:a8:cb:bd:91:6f:b4:bc:41:3a:f6:
                    a8:4a:5e:33:95:3a:af:7a:a8:3d:06:54:b3:84:60:
                    db:a1:9b:79:6f:4f:24:5f:23:3b:c7:ba:58:9f:6b:
                    f2:ea:a9:ac:72:e2:4d:ff:d3:24:46:52:bb:75:c5:
                    20:51:1a:88:2c:59:56:30:76:2f:2a:06:9b:95:f2:
                    4d:1b:b4:5e:99:6f:83:92:be:1c:6c:82:3f:a9:60:
                    38:45:6e:c7:cd:0f:11:0e:ed:d4:3e:01:39:44:5a:
                    3d:8b:7a:5a:a8:15:52:79:da:55:0a:bc:50:45:09:
                    f1:3b:47:a3:0a:8c:bd:08:36:d3:d9:fc:84:73:75:
                    bb:f5:14:2c:18:9b:67:27:5e:19:25:39:fa:9a:9f:
                    5d:9f:19:af:de:ab:90:c7:89:e8:af:93:87:30:92:
                    81:0f:29:7e:97:24:eb:eb:c0:42:61:e1:e9:d2:8d:
                    cf:69:ac:19:d8:ba:b9:2e:50:43:7a:6c:b3:04:6c:
                    e4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:53:B4:7B:E8:FF:C1:A8:3E:68:CF:81:E3:28:93:93:60:C3:37:8F
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/k1O0e-j_wag-aM-B4yiTk2DDN48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.64.0/24
                  31.56.68.0/24
                  31.56.83.0/24
                  31.56.97.0/24
                  31.57.55.0/24
                  31.57.132.0/24
                  31.58.41.0/24
                  31.58.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:3f:d8:1d:f6:1f:11:1a:c7:46:12:cc:64:18:a9:af:5e:8c:
         c6:99:b3:bb:e1:cd:11:ea:8c:fd:63:7f:9e:4d:f1:16:89:57:
         fb:7e:10:f9:f8:05:58:3f:ab:f8:c2:d9:df:2a:75:0b:e6:0c:
         30:99:9e:c3:ea:33:a1:54:4c:e6:f8:a1:91:d4:e8:4e:49:27:
         65:f2:02:ac:94:3d:19:1c:2b:3e:15:6b:d0:9a:29:4d:6c:c2:
         2f:e0:be:33:75:26:59:13:4d:28:86:46:cf:1f:86:a1:d3:ba:
         1b:95:d1:03:88:ac:95:65:ab:93:6b:96:ec:cd:06:18:45:39:
         4c:4a:82:70:b7:b0:e3:6b:e0:43:b1:a5:3d:9b:00:01:d5:63:
         36:dc:23:07:52:3a:c5:57:22:92:13:a1:cb:f0:11:a9:42:63:
         b5:5d:71:2e:7f:0f:71:4d:1e:11:3e:20:c4:29:f3:7a:d3:d7:
         0a:1b:e1:15:f0:d1:3d:da:e5:63:9b:93:27:df:72:43:22:d0:
         08:7d:f5:45:fc:3c:9b:3e:8f:53:af:51:56:1b:6e:4e:a7:f0:
         33:ae:81:5a:9d:6e:9b:1c:34:01:f2:20:78:a6:8b:92:57:c0:
         5f:99:95:4a:56:60:28:b1:c3:7b:00:60:4c:52:c0:cb:ba:96:
         64:27:c2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 10:44:02 2025 by rpki-client