This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/l6hhFXm91_1hUHfqAiTC3reWmvc.roa
File:                     l6hhFXm91_1hUHfqAiTC3reWmvc.roa (raw, json)
Hash identifier:          g7ZHYlhYjCzwKg6ri+src+vOXxkbh94Rt78zZvtYmJI=
Subject key identifier:   97:A8:61:15:79:BD:D7:FD:61:50:77:EA:02:24:C2:DE:B7:96:9A:F7
Certificate issuer:       /CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Certificate serial:       019B7759622632C40C3AE07DA7C4E5243038
Authority key identifier: 7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/l6hhFXm91_1hUHfqAiTC3reWmvc.roa
Signing time:             Thu 01 Jan 2026 02:18:25 +0000
ROA not before:           Thu 01 Jan 2026 02:18:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212587
IP address blocks:        194.31.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:62:26:32:c4:0c:3a:e0:7d:a7:c4:e5:24:30:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
        Validity
            Not Before: Jan  1 02:18:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=97a8611579bdd7fd615077ea0224c2deb7969af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:90:c2:23:ad:8a:ae:38:c6:d2:39:25:de:2c:
                    41:ed:d9:e4:6d:f0:55:45:07:49:eb:45:e0:1d:e4:
                    da:6d:a1:f5:5c:17:72:77:ce:14:19:05:cf:1a:bf:
                    83:fb:ec:71:10:b9:12:81:62:91:3e:8c:dd:0d:33:
                    d0:b8:87:a2:1a:56:55:9d:fb:97:71:1e:71:d2:70:
                    f0:b0:47:d8:c8:05:dc:38:69:90:4c:f0:f4:31:35:
                    48:1f:a6:4c:60:73:24:59:d2:fd:74:42:48:47:cd:
                    8f:cb:8c:97:ef:ea:57:8f:3f:9c:5a:92:95:c6:68:
                    21:9b:36:b3:f1:81:ab:65:02:c6:04:e5:42:dc:3b:
                    75:02:17:d2:19:0a:cf:32:cd:0f:fb:6a:60:8f:6e:
                    ec:a1:65:dc:02:57:2f:42:c6:9b:0d:a1:a2:04:d1:
                    96:02:43:24:31:bd:20:27:68:c3:c4:70:86:14:3d:
                    9b:92:11:05:2a:3b:31:fe:b0:80:a1:75:92:63:fd:
                    9a:e5:a5:d9:f1:79:5f:90:22:c7:3a:17:c9:46:12:
                    5f:84:df:ca:67:09:fe:7f:1b:bc:e2:5d:db:f9:e4:
                    00:db:3d:41:9d:7e:44:ba:89:85:a9:35:c8:5a:0f:
                    92:77:53:d4:56:ee:36:48:28:c2:50:a5:ab:f8:08:
                    3f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A8:61:15:79:BD:D7:FD:61:50:77:EA:02:24:C2:DE:B7:96:9A:F7
            X509v3 Authority Key Identifier:
                keyid:7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/l6hhFXm91_1hUHfqAiTC3reWmvc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.31.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7d:f2:a0:ae:4b:5d:9d:27:d0:29:28:f4:2d:af:e0:48:fd:13:
         7d:fe:6a:2e:03:48:38:21:8a:c8:72:ab:33:d3:65:d9:c7:ad:
         c9:e5:42:42:18:a5:75:f3:02:f8:6e:0b:9b:6b:2a:44:c6:09:
         b3:4f:c3:12:09:a5:ff:69:a9:e1:8f:c8:33:d0:c1:1c:9b:89:
         fb:b9:c8:73:bf:e5:6f:df:49:79:33:e6:92:4c:c3:a8:c1:80:
         b7:e2:e3:5d:35:ec:11:c8:bf:71:30:85:44:50:99:f3:61:25:
         c7:05:2f:53:04:b8:c0:2b:c1:83:8f:40:53:85:2e:f8:a1:cc:
         b1:ce:ab:fd:89:5b:fa:25:42:1d:1c:b4:1e:af:2a:01:28:6f:
         2c:f7:fb:7d:0e:f7:41:0a:8b:13:88:8d:f5:0d:84:ca:96:52:
         7b:c2:e6:e5:d9:be:fe:29:c7:f6:5a:b3:11:f1:6b:20:0c:72:
         30:72:d3:ee:a9:64:8c:15:60:5b:67:e5:18:e9:4c:3f:26:52:
         ca:9c:d5:e0:49:ef:9c:c8:65:05:a7:35:7e:77:d4:3d:07:0e:
         3b:16:fb:a4:19:a1:b0:6f:d1:42:83:0e:bb:53:ae:9d:db:21:
         1b:93:25:44:54:56:71:f7:13:9e:c5:85:21:6d:c7:72:e4:38:
         3f:12:71:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WWImMsQMOuB9p8TlJDA4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZmM4MjU4NWRmNjliN2M5NGIxNmE2MTkzMmZmYzhiNmUz
MzUxNTYwHhcNMjYwMTAxMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2E4NjExNTc5YmRkN2ZkNjE1MDc3ZWEwMjI0YzJkZWI3OTY5YWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJDCI62KrjjG0jkl3ixB7dnkbfBV
RQdJ60XgHeTabaH1XBdyd84UGQXPGr+D++xxELkSgWKRPozdDTPQuIeiGlZVnfuX
cR5x0nDwsEfYyAXcOGmQTPD0MTVIH6ZMYHMkWdL9dEJIR82Py4yX7+pXjz+cWpKV
xmghmzaz8YGrZQLGBOVC3Dt1AhfSGQrPMs0P+2pgj27soWXcAlcvQsabDaGiBNGW
AkMkMb0gJ2jDxHCGFD2bkhEFKjsx/rCAoXWSY/2a5aXZ8XlfkCLHOhfJRhJfhN/K
Zwn+fxu84l3b+eQA2z1BnX5EuomFqTXIWg+Sd1PUVu42SCjCUKWr+Ag/hwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJeoYRV5vdf9YVB36gIkwt63lpr3MB8GA1UdIwQY
MBaAFH/8glhd9pt8lLFqYZMv/ItuM1FWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZl95Q1dGMzJtM3lVc1dwaGt5XzhpMjR6VVZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC81MzFkMmItZTE3MC00OWE1LTg0MDQt
OTJmNzNmNTZmYzYyLzEvbDZoaEZYbTkxXzFoVUhmcUFpVEMzcmVXbXZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC81MzFkMmItZTE3MC00OWE1LTg0MDQtOTJmNzNmNTZmYzYy
LzEvZl95Q1dGMzJtM3lVc1dwaGt5XzhpMjR6VVZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwh8QMA0G
CSqGSIb3DQEBCwUAA4IBAQB98qCuS12dJ9ApKPQtr+BI/RN9/mouA0g4IYrIcqsz
02XZx63J5UJCGKV18wL4bgubaypExgmzT8MSCaX/aanhj8gz0MEcm4n7uchzv+Vv
30l5M+aSTMOowYC34uNdNewRyL9xMIVEUJnzYSXHBS9TBLjAK8GDj0BThS74ocyx
zqv9iVv6JUIdHLQeryoBKG8s9/t9DvdBCosTiI31DYTKllJ7wubl2b7+Kcf2WrMR
8WsgDHIwctPuqWSMFWBbZ+UY6Uw/JlLKnNXgSe+cyGUFpzV+d9Q9Bw47FvukGaGw
b9FCgw67U66d2yEbkyVEVFZx9xOexYUhbcdy5Dg/EnFD
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:28 2026 by rpki-client