This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/31pv5afhekY0LQrxFQLrojoOysA.roa
File:                     31pv5afhekY0LQrxFQLrojoOysA.roa (raw, json)
Hash identifier:          kFamWlPPASbgIXl7iWyVA0BlMXe9SczhEQ51NUV6M9M=
Subject key identifier:   DF:5A:6F:E5:A7:E1:7A:46:34:2D:0A:F1:15:02:EB:A2:3A:0E:CA:C0
Certificate issuer:       /CN=aa70110d30d52e8a6969588b3f621416bcdf644b
Certificate serial:       019B76EB51F2BFFAF006CBFF3D4DE6E390C1
Authority key identifier: AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/31pv5afhekY0LQrxFQLrojoOysA.roa
Signing time:             Thu 01 Jan 2026 00:18:12 +0000
ROA not before:           Thu 01 Jan 2026 00:18:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57227
IP address blocks:        81.24.85.0/24 maxlen: 24
                          81.24.88.0/22 maxlen: 22
                          81.163.32.0/19 maxlen: 19
                          81.163.63.0/24 maxlen: 24
                          176.120.192.0/19 maxlen: 19
                          185.110.44.0/22 maxlen: 22
                          185.110.44.0/23 maxlen: 23
                          185.110.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:51:f2:bf:fa:f0:06:cb:ff:3d:4d:e6:e3:90:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa70110d30d52e8a6969588b3f621416bcdf644b
        Validity
            Not Before: Jan  1 00:18:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=df5a6fe5a7e17a46342d0af11502eba23a0ecac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e0:c6:8a:3f:94:04:6c:d6:ec:50:be:fa:d4:
                    52:3e:55:9b:83:84:ca:cb:6c:84:61:e9:e5:34:d0:
                    42:2d:f2:33:d2:2c:d1:ce:03:52:13:1c:4d:e8:14:
                    11:c3:82:b1:f9:47:f8:d1:4b:3e:f7:bb:76:2c:6a:
                    67:c2:02:7c:35:c6:3a:31:1a:b6:61:65:8f:14:fc:
                    02:aa:df:1a:5b:e3:db:1e:83:29:2a:bc:46:6e:09:
                    c4:96:36:6d:4e:74:16:09:95:35:8b:95:b2:3f:3a:
                    15:cf:93:67:cd:04:c4:b4:0b:0a:68:57:54:71:7f:
                    e4:55:09:be:d5:58:b8:36:30:66:ab:b2:9a:c1:88:
                    dd:06:31:98:19:bb:25:ab:07:13:5b:28:66:63:1d:
                    b0:2c:4c:88:79:6a:e2:88:46:0c:8f:df:fe:1b:61:
                    73:a4:0d:7b:83:b4:86:79:e8:09:e0:25:b0:44:8c:
                    e4:1b:e0:e0:4f:02:a4:2f:ad:c8:2f:e7:b6:3f:04:
                    e3:11:07:0e:88:08:e2:0f:c4:38:b8:39:7f:4a:44:
                    73:bd:77:60:8a:10:83:29:4e:eb:43:45:71:41:42:
                    23:bf:87:27:3b:e9:eb:9d:37:fd:00:32:64:f6:18:
                    66:80:c5:ab:d9:87:47:99:92:e0:9b:0a:02:16:66:
                    c2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5A:6F:E5:A7:E1:7A:46:34:2D:0A:F1:15:02:EB:A2:3A:0E:CA:C0
            X509v3 Authority Key Identifier:
                keyid:AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/31pv5afhekY0LQrxFQLrojoOysA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.24.85.0/24
                  81.24.88.0/22
                  81.163.32.0/19
                  176.120.192.0/19
                  185.110.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:f9:2b:94:ae:c2:e7:29:98:ca:c3:67:89:34:d4:44:f7:12:
         94:ff:41:d2:42:e3:51:18:91:fb:ac:c2:8f:09:6e:01:ac:e5:
         33:22:37:a5:0a:a5:16:8e:6e:3d:e5:2e:55:57:2a:a3:00:4b:
         37:77:84:b3:1c:b2:4f:30:ab:7e:0b:dd:a7:d5:77:e3:da:a4:
         f5:f6:49:d6:b6:db:47:af:4c:eb:1a:4b:85:ac:f2:e1:3f:10:
         d7:e5:ca:1a:67:5b:6e:c2:1a:9c:6f:02:75:e3:6e:e4:70:44:
         1a:ca:a8:e4:8a:8d:f3:b3:0e:1b:e9:74:6c:12:bb:4f:24:44:
         8c:12:65:db:67:04:d0:c6:15:2e:5c:5a:7e:b2:66:3c:25:af:
         89:0c:b0:f5:7f:62:e3:e6:bd:71:4e:b3:00:30:d4:e9:eb:53:
         f8:cd:6f:ab:8f:39:4d:41:d8:1f:52:f1:89:68:e4:53:62:2c:
         19:09:39:7f:de:86:80:a5:c9:e0:92:0b:55:5b:2b:7f:94:f7:
         13:32:32:a2:c0:cf:a5:b9:11:66:08:a7:3e:f6:0c:9c:5f:84:
         98:b0:3a:50:42:c8:40:8d:9a:9c:bd:71:8f:59:39:cd:ee:64:
         ff:3d:44:c3:27:8b:50:a6:ca:70:08:38:c6:88:31:e0:2e:88:
         fb:bf:16:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:15:05 2026 by rpki-client