This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/skYFiLdsPLmfRaGmHfHA5MxJY1Y.roa
File:                     skYFiLdsPLmfRaGmHfHA5MxJY1Y.roa (raw, json)
Hash identifier:          +PaUjit2PjFWDO0b+Gec519D23slqinl4RvkX+EMsuc=
Subject key identifier:   B2:46:05:88:B7:6C:3C:B9:9F:45:A1:A6:1D:F1:C0:E4:CC:49:63:56
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019BC35B027E735D24EC1B804B72BB89C38C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/skYFiLdsPLmfRaGmHfHA5MxJY1Y.roa
Signing time:             Thu 15 Jan 2026 20:31:20 +0000
ROA not before:           Thu 15 Jan 2026 20:31:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205886
IP address blocks:        31.57.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Jan 2026 20:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:c3:5b:02:7e:73:5d:24:ec:1b:80:4b:72:bb:89:c3:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jan 15 20:31:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b2460588b76c3cb99f45a1a61df1c0e4cc496356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ee:cb:80:f3:d7:2a:37:30:25:de:da:56:71:
                    34:69:e4:ed:36:61:1d:85:ef:f2:dc:f4:e5:18:c9:
                    8c:81:16:fe:fe:89:d2:98:9c:32:e6:ae:55:73:67:
                    1b:ea:af:8c:98:f4:ec:f8:95:61:82:6b:1c:a5:32:
                    b3:ee:2c:7c:4c:74:6a:83:ed:42:27:79:c4:39:d5:
                    76:8e:8a:d8:c6:3c:87:71:6d:c2:06:d6:ae:78:30:
                    8a:03:30:b9:b8:35:ed:3d:95:3b:ed:52:df:1c:fb:
                    74:f0:38:ba:e3:55:33:c4:2c:e7:e1:1e:96:b1:7c:
                    5e:2f:f3:80:98:5e:1d:ce:07:7e:31:2a:21:08:8c:
                    6c:99:fe:5a:4c:8e:35:3c:37:73:3a:d2:7f:35:dd:
                    7a:95:20:4b:8d:8e:20:b0:87:d3:c3:7a:9f:94:96:
                    3e:7f:75:b0:2f:97:70:59:f9:96:ba:dc:71:50:fc:
                    1c:67:25:4f:fa:5c:86:4b:e4:95:66:4a:ab:0f:c5:
                    d3:b9:67:9d:72:2c:c3:52:34:43:83:4e:0c:0f:6d:
                    76:a4:29:1e:67:50:51:d1:31:15:6f:de:54:21:e9:
                    1d:1e:46:2a:27:5d:9f:c4:91:7c:2d:93:00:78:b4:
                    86:4a:d8:8f:89:82:b8:de:8f:48:7f:60:92:07:a5:
                    b5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:46:05:88:B7:6C:3C:B9:9F:45:A1:A6:1D:F1:C0:E4:CC:49:63:56
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/skYFiLdsPLmfRaGmHfHA5MxJY1Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.57.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:45:37:61:be:33:d1:68:e1:c9:c8:df:9c:c2:f7:4a:94:a4:
         89:4b:ea:0f:11:68:c2:1a:40:62:40:88:c1:0c:5c:0f:32:f8:
         89:4c:d2:c6:f2:e4:02:f2:87:1b:44:64:5f:43:12:88:99:fb:
         7d:8a:a5:d2:50:c0:dd:ef:78:c8:6c:55:c9:69:ce:b1:2e:d5:
         c7:c8:b8:26:bd:62:cf:1e:ad:02:4d:ea:87:2f:9e:51:81:97:
         6b:2c:22:4a:81:49:c1:85:a4:21:6e:89:81:92:5b:e1:00:13:
         23:88:11:3e:9e:76:ea:15:e7:94:65:e5:8c:18:84:87:60:e5:
         f9:d9:90:f7:c5:76:2e:9e:7d:92:56:91:56:e3:dd:c7:3c:27:
         a5:b6:b6:6d:f4:56:25:4d:dc:51:30:b2:a6:9a:18:9b:d6:42:
         eb:a2:e6:2a:a3:51:39:0b:a7:0e:8c:33:32:21:ed:65:a8:5d:
         2b:10:dc:48:ec:5a:18:a0:f6:01:a8:2e:86:c9:60:cf:93:e6:
         a8:00:37:f7:ef:74:e1:92:c8:1f:33:55:f0:7b:b3:c7:49:b1:
         e6:0b:fe:61:57:b2:9f:23:cc:99:89:f1:48:31:92:a2:c8:aa:
         ab:9c:f8:c1:03:9a:1d:7f:2d:7a:78:58:7f:7e:44:69:4f:b0:
         65:51:2e:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZvDWwJ+c10k7BuAS3K7icOMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMTE1MjAzMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjQ2MDU4OGI3NmMzY2I5OWY0NWExYTYxZGYxYzBlNGNjNDk2MzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu7LgPPXKjcwJd7aVnE0aeTtNmEd
he/y3PTlGMmMgRb+/onSmJwy5q5Vc2cb6q+MmPTs+JVhgmscpTKz7ix8THRqg+1C
J3nEOdV2jorYxjyHcW3CBtaueDCKAzC5uDXtPZU77VLfHPt08Di641UzxCzn4R6W
sXxeL/OAmF4dzgd+MSohCIxsmf5aTI41PDdzOtJ/Nd16lSBLjY4gsIfTw3qflJY+
f3WwL5dwWfmWutxxUPwcZyVP+lyGS+SVZkqrD8XTuWedcizDUjRDg04MD212pCke
Z1BR0TEVb95UIekdHkYqJ12fxJF8LZMAeLSGStiPiYK43o9If2CSB6W15wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLJGBYi3bDy5n0Whph3xwOTMSWNWMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvc2tZRmlMZHNQTG1mUmFHbUhmSEE1TXhKWTFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzm/MA0G
CSqGSIb3DQEBCwUAA4IBAQBsRTdhvjPRaOHJyN+cwvdKlKSJS+oPEWjCGkBiQIjB
DFwPMviJTNLG8uQC8ocbRGRfQxKImft9iqXSUMDd73jIbFXJac6xLtXHyLgmvWLP
Hq0CTeqHL55RgZdrLCJKgUnBhaQhbomBklvhABMjiBE+nnbqFeeUZeWMGISHYOX5
2ZD3xXYunn2SVpFW493HPCeltrZt9FYlTdxRMLKmmhib1kLrouYqo1E5C6cOjDMy
Ie1lqF0rENxI7FoYoPYBqC6GyWDPk+aoADf373ThksgfM1Xwe7PHSbHmC/5hV7Kf
I8yZifFIMZKiyKqrnPjBA5odfy16eFh/fkRpT7BlUS78
-----END CERTIFICATE-----
Generated at Fri Jan 16 05:32:35 2026 by rpki-client