This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS31715.roa
File:                     AS31715.roa (raw, json)
Hash identifier:          FfsTVDrzaEWssZdBgzmO9Udiz0FKfMWo9rM12zm+11Q=
Subject key identifier:   45:BF:E2:32:28:08:80:3B:C0:C6:E0:D0:6A:31:AD:12:4B:B4:7C:C7
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       37F0A214C1F404EDA04D513F9A87A7EA1E2ABEC1
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS31715.roa
Signing time:             Tue 03 Feb 2026 06:24:14 +0000
ROA not before:           Tue 03 Feb 2026 06:19:14 +0000
ROA not after:            Tue 02 Feb 2027 06:24:14 +0000
asID:                     31715
IP address blocks:        91.124.175.0/24 maxlen: 24
                          95.134.107.0/24 maxlen: 24
                          95.134.158.0/24 maxlen: 24
                          178.92.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 01:56:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f0:a2:14:c1:f4:04:ed:a0:4d:51:3f:9a:87:a7:ea:1e:2a:be:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Feb  3 06:19:14 2026 GMT
            Not After : Feb  2 06:24:14 2027 GMT
        Subject: CN=45BFE2322808803BC0C6E0D06A31AD124BB47CC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c9:d9:87:44:fe:6d:56:43:dd:95:79:6f:45:
                    83:44:58:b4:f0:96:f3:c5:c5:00:35:a0:e9:07:ee:
                    3a:f8:7e:c6:41:99:c5:2d:91:0a:8b:b2:59:dd:f0:
                    aa:d6:24:4f:25:2c:03:4a:41:28:7a:8b:04:14:83:
                    cf:23:0b:4a:07:17:75:e8:4e:ba:f4:8f:5e:fa:a3:
                    c0:a5:ba:d3:1d:b4:02:3d:eb:b3:6d:43:11:a1:9d:
                    04:51:31:62:f4:f5:db:e6:13:2f:df:7d:f9:f4:c1:
                    e5:45:90:46:86:c5:40:ea:6d:0f:59:44:e8:63:a2:
                    d7:90:81:2c:43:5d:8d:2a:cd:85:20:ad:da:e3:43:
                    b1:ad:3d:20:ea:50:4e:b7:f3:58:04:fe:3f:1c:c4:
                    b5:29:47:6f:ae:23:89:ec:64:e9:70:17:48:a0:ef:
                    7f:6d:e6:be:13:c4:af:da:a9:74:69:63:a1:8d:90:
                    06:d7:b4:2d:28:13:48:ed:5e:71:4a:5c:7d:f4:61:
                    a7:cf:d3:67:45:10:1b:a6:15:44:84:16:93:e3:31:
                    66:de:0d:dc:95:37:eb:79:bf:c9:6d:95:03:ad:87:
                    d1:58:e8:db:d1:35:d0:18:ac:53:b3:70:cb:59:5b:
                    f1:5a:ed:56:a1:15:32:9d:17:b0:18:bc:a3:a9:2a:
                    9a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BF:E2:32:28:08:80:3B:C0:C6:E0:D0:6A:31:AD:12:4B:B4:7C:C7
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS31715.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.124.175.0/24
                  95.134.107.0/24
                  95.134.158.0/24
                  178.92.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:61:f4:98:5f:af:29:53:af:85:32:a5:1b:a6:70:50:39:41:
         46:fd:48:af:fa:9b:ad:c2:1a:a2:98:97:e3:99:18:26:94:c2:
         f7:2d:0e:16:5b:60:df:50:68:92:ed:14:67:59:5f:88:9a:89:
         24:b0:4c:53:56:e8:f4:db:30:dc:3a:0f:e1:19:ce:b4:1f:df:
         5f:63:6e:49:f8:46:d4:c6:54:c7:4a:24:53:f0:37:52:8c:a2:
         c0:1b:88:d9:a1:51:b4:41:84:57:d7:41:a7:7a:70:c5:bb:60:
         fd:61:48:07:6c:a1:d7:9c:0d:c8:d0:38:2c:57:e3:bf:f7:95:
         31:b6:f8:53:1e:cd:92:ae:a8:13:70:cb:98:01:4d:92:9a:80:
         93:32:60:27:aa:71:7e:7e:a3:af:cf:88:6b:ad:92:c9:47:b1:
         1d:a1:bb:de:ba:df:15:f0:c9:77:d6:33:90:ec:d5:6a:1b:0d:
         f9:64:d2:a2:5b:ab:80:10:12:04:62:7b:16:40:76:6d:43:c5:
         06:bf:d5:1d:09:c3:ef:51:a0:a1:1b:7e:51:94:bd:9e:2b:de:
         aa:4e:fd:4a:90:77:68:40:62:d2:b6:3b:62:3b:c0:8c:12:8e:
         9a:bc:b7:37:0c:51:a9:41:4d:89:4a:01:75:8d:25:76:a2:49:
         66:09:24:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 08:44:28 2026 by rpki-client