This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zOzaMU5X6wnV6Ms1Fd_BOgUHU5s.roa
File:                     zOzaMU5X6wnV6Ms1Fd_BOgUHU5s.roa (raw, json)
Hash identifier:          QpPJ1Nm8XvjoUwVkpz3uLgnjCJjC/44C/LHPYDF50aI=
Subject key identifier:   CC:EC:DA:31:4E:57:EB:09:D5:E8:CB:35:15:DF:C1:3A:05:07:53:9B
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019B7F84D17C2FADFE73E963850D81CAA3C5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zOzaMU5X6wnV6Ms1Fd_BOgUHU5s.roa
Signing time:             Fri 02 Jan 2026 16:22:49 +0000
ROA not before:           Fri 02 Jan 2026 16:22:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215727
IP address blocks:        31.57.206.0/24 maxlen: 24
                          31.59.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Jan 2026 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:d1:7c:2f:ad:fe:73:e9:63:85:0d:81:ca:a3:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jan  2 16:22:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ccecda314e57eb09d5e8cb3515dfc13a0507539b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b5:25:9e:3d:da:30:81:c6:93:b8:53:4c:2f:
                    5a:e0:38:74:cf:bf:38:09:b2:9f:4b:3c:ca:99:d5:
                    54:48:fe:93:41:fe:f9:3e:16:8c:85:0c:2a:4a:6a:
                    c3:21:d9:27:1f:e8:6e:86:40:b8:ab:f9:02:28:4b:
                    26:5c:81:fb:9a:c6:e9:39:da:73:ec:4c:35:7d:df:
                    1d:37:56:0d:39:8f:d0:61:c5:dd:93:1b:53:d2:6d:
                    93:37:35:ac:ed:8b:0d:e7:37:36:a9:87:4d:f2:00:
                    c3:14:f4:c4:6d:83:bf:47:29:d1:a8:8c:51:f1:17:
                    f9:47:ab:8d:69:05:c2:8a:e7:4a:6a:bd:11:98:4c:
                    6f:c2:e7:38:7a:e0:f8:71:9c:1b:57:ab:c9:b2:5e:
                    c9:ab:90:7a:71:d9:64:c7:47:4b:e0:e7:d4:9c:ab:
                    af:12:df:e1:98:76:2c:ba:89:57:65:5a:84:cd:07:
                    ba:fa:a9:89:7e:87:12:2c:a6:96:ed:6f:a9:e6:38:
                    74:12:b4:b7:e7:98:fb:7e:2d:9d:99:5e:e5:56:b3:
                    d7:f1:54:cd:63:58:77:77:3c:90:f1:2f:fe:92:49:
                    a7:68:ec:e5:e7:55:25:3e:7e:21:46:47:79:08:db:
                    ce:91:8c:c7:50:54:82:c6:9f:54:91:6e:fc:b6:dc:
                    b2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EC:DA:31:4E:57:EB:09:D5:E8:CB:35:15:DF:C1:3A:05:07:53:9B
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zOzaMU5X6wnV6Ms1Fd_BOgUHU5s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.57.206.0/24
                  31.59.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:97:bc:b7:25:41:b0:0d:04:e2:2a:0d:d7:86:bd:f0:14:9f:
         30:35:62:05:68:38:ac:89:bf:ef:48:c5:c1:0f:50:6f:9d:7e:
         d2:5e:b0:e8:57:1a:52:5b:7c:fe:1c:78:4e:94:64:03:d2:3d:
         82:bf:07:49:98:dd:88:20:60:ea:c0:1a:77:3c:b3:07:14:31:
         ae:b0:3f:e9:62:77:4a:21:d7:7f:c1:66:27:79:34:da:6d:db:
         17:93:f7:a6:5a:18:72:59:34:a9:c5:f5:49:0a:a7:47:1c:ac:
         cb:d6:09:1f:b6:f1:03:42:db:85:c9:ee:20:23:20:ba:45:c4:
         e1:24:e3:bf:b3:d1:f3:c5:c6:28:1f:fa:17:05:e0:f9:7c:ef:
         b9:ad:51:34:38:12:92:95:f0:25:27:5c:e9:db:e4:05:e1:35:
         67:1e:b7:cb:d4:5c:db:96:96:2c:95:7d:2b:55:11:5a:00:f5:
         da:fd:39:00:33:a2:88:b5:81:5f:8e:e2:b3:f3:e6:51:3b:fc:
         ec:66:ca:74:1d:94:70:c7:f4:c5:f1:05:74:bc:cf:95:72:4f:
         a7:e3:22:ef:60:11:56:d5:97:96:ae:ea:15:68:ba:64:31:e0:
         a8:0e:db:6e:28:19:28:30:a2:3f:ba:73:78:43:e8:f7:12:04:
         f3:51:26:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 14:39:16 2026 by rpki-client