This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/F1nULM_5OAp5snlJ0wUzTVe_8Pk.roa
File:                     F1nULM_5OAp5snlJ0wUzTVe_8Pk.roa (raw, json)
Hash identifier:          FrHQz6VBgsdDzG1EgR21e8l/oyJBYEHWEEgLbKK49Oc=
Subject key identifier:   17:59:D4:2C:CF:F9:38:0A:79:B2:79:49:D3:05:33:4D:57:BF:F0:F9
Certificate issuer:       /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial:       019B7B369BE1241FB91B83CFFBFCF4B9CE44
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/F1nULM_5OAp5snlJ0wUzTVe_8Pk.roa
Signing time:             Thu 01 Jan 2026 20:18:55 +0000
ROA not before:           Thu 01 Jan 2026 20:18:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57694
IP address blocks:        31.172.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:9b:e1:24:1f:b9:1b:83:cf:fb:fc:f4:b9:ce:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
        Validity
            Not Before: Jan  1 20:18:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1759d42ccff9380a79b27949d305334d57bff0f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e6:f6:6c:66:22:6c:14:f5:97:f5:8e:da:d4:
                    6b:86:8d:69:b2:e4:9b:b4:01:72:8e:1e:57:b4:ac:
                    47:73:61:e8:5d:ae:ba:05:b3:fa:10:ed:52:69:6d:
                    76:95:8c:ff:67:ed:8e:fc:a6:74:ba:e4:f5:c5:df:
                    14:ca:2f:c3:bd:b3:bb:c5:dc:1c:45:9c:f0:17:64:
                    27:ba:20:18:09:a0:cd:f0:4f:40:cc:63:88:10:1c:
                    7c:83:34:11:90:01:61:04:7f:55:b6:ae:53:1c:7c:
                    24:9e:18:32:1c:9f:bb:8b:d6:98:bc:5e:ea:9d:ea:
                    e8:54:02:b2:88:00:62:98:e0:a7:37:bd:90:66:56:
                    17:da:8c:dd:a9:7c:65:9a:b5:0a:a7:02:31:e4:b2:
                    d0:42:11:03:77:5c:cd:51:3a:ee:cc:7c:8f:0e:ad:
                    7f:2a:70:c2:97:81:a8:41:30:0a:ad:12:34:20:3b:
                    04:5b:2d:ee:4e:af:bc:8a:19:69:ee:98:22:30:8f:
                    02:d5:5c:a4:7a:4b:57:46:dd:16:90:b9:fb:4b:8f:
                    38:0b:96:af:14:fb:7a:e8:00:62:46:2b:bd:76:e9:
                    a9:88:bc:42:d9:df:6b:c5:a1:6e:94:01:2b:4f:f9:
                    a7:ab:f5:95:02:fc:91:c5:e6:29:e5:ec:af:9a:44:
                    37:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:59:D4:2C:CF:F9:38:0A:79:B2:79:49:D3:05:33:4D:57:BF:F0:F9
            X509v3 Authority Key Identifier:
                keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/F1nULM_5OAp5snlJ0wUzTVe_8Pk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.172.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:43:c7:5c:81:ff:37:59:7b:d4:ce:48:5f:42:67:5f:ed:46:
         24:5a:23:c1:32:a5:ef:fe:77:63:eb:7a:62:af:0d:26:d1:84:
         7c:47:45:39:56:8b:bb:d9:69:8f:c2:2f:e6:64:fc:86:e4:dd:
         42:5f:94:35:ab:6d:70:c4:c2:58:db:08:62:7d:a2:8f:bd:69:
         58:13:c0:7f:37:31:05:81:f1:90:1b:5c:4c:fc:80:9d:ec:bc:
         ef:1f:4e:bf:ee:46:98:82:a4:2c:d7:7f:6b:ba:e7:2f:9e:f7:
         9b:3d:7f:a4:69:62:b7:ce:2d:d8:94:9d:65:5d:0c:11:b6:4b:
         d2:c2:86:d1:de:df:58:bb:a4:11:d6:84:d0:72:08:8a:85:0f:
         d5:7f:18:21:56:12:81:50:e4:f9:c0:25:49:79:54:d5:5e:9a:
         71:17:a6:46:3d:36:e7:95:d0:85:ab:b6:f4:26:e4:15:75:ec:
         25:36:eb:e3:48:c0:1e:85:65:02:3b:fd:da:3f:27:39:0f:48:
         2a:c6:c7:e7:20:b3:92:a8:1c:ca:b8:86:83:d5:bc:13:1c:a5:
         f4:28:fb:4b:ed:82:6a:d5:e2:86:7c:cc:cf:c5:82:17:38:98:
         df:18:12:60:5c:5e:e2:67:0d:bf:72:76:f0:4b:f1:11:41:86:
         da:af:ab:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:05:40 2026 by rpki-client