This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/p7xlQ5fQEJFr9otgIpR7QV4leo8.roa
File:                     p7xlQ5fQEJFr9otgIpR7QV4leo8.roa (raw, json)
Hash identifier:          pzJT1nif0fL8arEey872KnfNwYpzD/Gw+qoudSccqg4=
Subject key identifier:   A7:BC:65:43:97:D0:10:91:6B:F6:8B:60:22:94:7B:41:5E:25:7A:8F
Certificate issuer:       /CN=55973204a369680586de27f946fc81665632aa83
Certificate serial:       019B7F8305CBEE6819BC4D394E5784383202
Authority key identifier: 55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/p7xlQ5fQEJFr9otgIpR7QV4leo8.roa
Signing time:             Fri 02 Jan 2026 16:20:51 +0000
ROA not before:           Fri 02 Jan 2026 16:20:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56711
IP address blocks:        31.193.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:05:cb:ee:68:19:bc:4d:39:4e:57:84:38:32:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55973204a369680586de27f946fc81665632aa83
        Validity
            Not Before: Jan  2 16:20:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a7bc654397d010916bf68b6022947b415e257a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:15:a6:a4:f9:32:36:ab:56:e4:26:d4:bf:0b:
                    2b:15:68:a4:85:85:ca:6b:f7:3b:ca:c3:6a:45:82:
                    05:2b:4c:9e:c0:8e:af:27:f4:c0:7d:62:b5:4e:f0:
                    c5:cd:1c:57:b6:d3:b6:6b:00:ac:29:d6:12:01:45:
                    7b:1e:65:a5:da:49:d7:c0:0e:3e:a4:d7:aa:75:0e:
                    3f:dc:31:3b:25:40:78:6f:e7:b8:7e:d6:ef:66:fe:
                    4b:b2:2e:68:68:55:64:3a:63:45:8b:cc:13:04:e2:
                    6f:8e:da:55:27:6a:8a:c6:5c:60:13:22:95:4d:c4:
                    f9:a8:36:4f:86:8f:90:66:1a:2c:cf:d3:e7:44:3f:
                    e7:a8:41:1c:58:95:f2:67:10:15:5d:48:02:bd:0b:
                    05:d5:6c:5f:86:3e:13:cd:7a:bc:07:70:7e:83:06:
                    e3:cb:6e:2e:a2:9b:35:0b:be:7a:54:08:b3:4f:7d:
                    c8:d9:6f:c0:39:17:4d:b8:1f:09:7a:c2:4e:98:a1:
                    df:fc:2b:8c:0f:ed:02:c6:71:5d:24:e4:74:4e:cc:
                    00:31:6a:57:bb:b4:18:15:a3:c7:f9:63:bf:29:be:
                    0f:81:e7:07:c7:de:c5:0b:cd:83:5c:c8:2a:99:16:
                    2c:46:7d:fe:18:61:32:ec:90:f8:93:a9:4e:cb:21:
                    17:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BC:65:43:97:D0:10:91:6B:F6:8B:60:22:94:7B:41:5E:25:7A:8F
            X509v3 Authority Key Identifier:
                keyid:55:97:32:04:A3:69:68:05:86:DE:27:F9:46:FC:81:66:56:32:AA:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZcyBKNpaAWG3if5RvyBZlYyqoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/p7xlQ5fQEJFr9otgIpR7QV4leo8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b37216-3ea6-4f90-983b-09c8148bd23f/1/VZcyBKNpaAWG3if5RvyBZlYyqoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.193.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ce:99:66:ca:d2:3e:12:b0:bf:32:b1:19:92:fe:2f:34:71:5a:
         3a:97:0c:ad:d8:b2:6b:a7:4c:de:07:dc:fc:2f:6d:08:39:d9:
         91:43:b4:1e:65:81:4b:be:15:54:16:2a:86:47:7e:69:09:88:
         d3:8f:3b:1d:1a:27:e5:51:31:d9:f8:43:5d:c5:60:d1:d9:03:
         9a:80:bc:c3:20:91:3e:76:2b:4c:13:57:b0:6b:85:8c:0f:4d:
         71:a5:0a:02:00:8a:d8:ec:eb:4a:7a:b3:de:27:bf:2f:84:87:
         91:d2:12:81:ca:b1:6a:c7:23:99:9b:cb:b3:78:ba:31:e1:2a:
         c4:06:0c:63:a3:5a:de:a8:69:08:41:0f:7b:f0:07:7f:e3:57:
         97:56:51:8e:5f:c9:38:46:3b:d3:ae:b0:67:8c:01:99:bb:7e:
         5c:94:e2:58:76:c5:bd:b4:f2:d2:56:57:f1:08:c3:02:16:6a:
         06:39:9a:28:e6:88:3b:6c:71:74:e3:84:fa:34:f5:8a:37:ae:
         16:15:c4:31:3d:24:e0:a9:48:fd:65:20:9e:9e:a5:50:02:99:
         4a:1c:d3:ab:e0:67:89:e4:13:1d:a1:f7:fd:6e:ad:49:46:a2:
         76:ac:05:aa:78:c1:97:18:b3:b0:91:cf:12:e3:a1:85:45:fc:
         11:1a:79:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:11:14 2026 by rpki-client