This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/w20XyxuuaARBzK1qL0zEmyKvIYU.roa
File:                     w20XyxuuaARBzK1qL0zEmyKvIYU.roa (raw, json)
Hash identifier:          IS1UT6gp8osjnObrRDdOrfk5LEidTBHD8iIkx2rsCEA=
Subject key identifier:   C3:6D:17:CB:1B:AE:68:04:41:CC:AD:6A:2F:4C:C4:9B:22:AF:21:85
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       019B7F84C5CDA91CBB25D746C58D349C6142
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/w20XyxuuaARBzK1qL0zEmyKvIYU.roa
Signing time:             Fri 02 Jan 2026 16:22:46 +0000
ROA not before:           Fri 02 Jan 2026 16:22:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56419
IP address blocks:        31.148.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:c5:cd:a9:1c:bb:25:d7:46:c5:8d:34:9c:61:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 16:22:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c36d17cb1bae680441ccad6a2f4cc49b22af2185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:96:56:2e:03:54:4e:e1:e9:92:38:d8:8f:40:
                    cb:2b:15:d8:12:67:ac:b6:fe:df:f0:d4:e7:b9:37:
                    0b:62:b0:dd:2e:4d:45:e9:e8:95:b1:8a:e8:64:69:
                    f6:0a:35:3b:20:75:71:66:24:90:e8:9c:0f:b1:38:
                    c5:1c:0f:ee:30:45:e6:5c:e4:1a:a1:9a:f3:53:3e:
                    b7:4b:01:05:16:17:2d:33:01:89:48:3c:d8:16:bd:
                    ca:c2:a9:b1:39:10:2c:28:7a:dd:9b:62:95:c6:1e:
                    ea:b6:54:23:ac:51:62:a6:d4:e9:1f:fe:3a:9f:9b:
                    41:bc:22:dd:58:2e:ee:ce:b8:d7:fc:c2:0c:02:30:
                    f6:f2:c0:0b:2f:29:71:d6:f6:02:c8:99:0c:8a:0e:
                    f5:6b:24:ec:83:f6:cf:f8:2c:1d:b0:5a:77:f3:3f:
                    b7:00:20:b0:bf:ca:b7:08:ea:ca:ac:7c:da:eb:49:
                    8f:98:70:b4:ee:4d:99:e9:62:07:94:f4:c3:00:73:
                    16:fc:64:6b:8d:1c:92:de:2f:34:c6:1a:93:15:cb:
                    34:e3:66:eb:7f:bc:7b:55:33:a8:38:e1:14:8b:35:
                    b6:bb:11:5f:5a:6c:6e:d8:52:7c:dd:b5:79:ad:42:
                    62:b9:5c:a4:9f:58:9c:51:f7:ea:1b:c2:9b:2d:aa:
                    ff:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6D:17:CB:1B:AE:68:04:41:CC:AD:6A:2F:4C:C4:9B:22:AF:21:85
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/w20XyxuuaARBzK1qL0zEmyKvIYU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.148.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:ab:7d:cc:f1:78:5b:5f:b9:fa:51:16:50:0d:44:c3:5d:b4:
         7d:01:9c:4e:7b:83:8b:da:0b:e7:dd:0b:10:18:09:26:f4:3e:
         4e:34:a0:ef:6f:d7:01:f5:0f:e5:af:54:6d:80:95:df:79:df:
         f0:2e:2d:31:e3:70:bc:3f:b1:0e:67:a4:8c:0e:47:ea:d5:ca:
         34:58:db:12:4e:df:99:d7:0f:53:a2:90:5f:19:0c:d1:da:de:
         b0:7c:f2:16:e1:df:fb:ff:35:ee:48:1f:0b:35:08:e1:d7:8f:
         96:49:f1:45:06:ae:a3:80:f9:7e:47:c9:01:20:4b:69:c9:bd:
         db:db:d6:8a:31:2b:39:5b:7f:00:6e:39:84:a9:72:3e:f3:67:
         1d:3e:be:ed:e1:a5:0b:2b:69:60:96:bd:11:fa:f8:8a:80:31:
         a7:fa:ae:b9:2b:29:52:75:82:0f:b6:cd:78:1c:dd:38:70:ca:
         30:a2:bc:45:7b:77:84:4d:59:c7:73:36:e6:ef:f4:c8:79:18:
         6e:56:fd:0d:18:43:4d:1a:e0:e9:1d:f6:5a:40:9c:b9:a3:86:
         6d:7d:90:8d:6a:89:14:f7:09:64:2a:13:87:b8:0e:3b:62:71:
         a5:33:84:3d:be:0e:95:62:12:2f:f9:55:7c:09:e0:cf:78:1a:
         6b:e6:c9:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/hMXNqRy7JddGxY00nGFCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjYwMTAyMTYyMjQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzZkMTdjYjFiYWU2ODA0NDFjY2FkNmEyZjRjYzQ5YjIyYWYyMTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5ZWLgNUTuHpkjjYj0DLKxXYEmes
tv7f8NTnuTcLYrDdLk1F6eiVsYroZGn2CjU7IHVxZiSQ6JwPsTjFHA/uMEXmXOQa
oZrzUz63SwEFFhctMwGJSDzYFr3KwqmxORAsKHrdm2KVxh7qtlQjrFFiptTpH/46
n5tBvCLdWC7uzrjX/MIMAjD28sALLylx1vYCyJkMig71ayTsg/bP+CwdsFp38z+3
ACCwv8q3COrKrHza60mPmHC07k2Z6WIHlPTDAHMW/GRrjRyS3i80xhqTFcs042br
f7x7VTOoOOEUizW2uxFfWmxu2FJ83bV5rUJiuVykn1icUffqG8KbLar/7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMNtF8sbrmgEQcytai9MxJsiryGFMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvdzIwWHl4dXVhQVJCeksxcUwwekVteUt2SVlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH5SqMA0G
CSqGSIb3DQEBCwUAA4IBAQCUq33M8XhbX7n6URZQDUTDXbR9AZxOe4OL2gvn3QsQ
GAkm9D5ONKDvb9cB9Q/lr1RtgJXfed/wLi0x43C8P7EOZ6SMDkfq1co0WNsSTt+Z
1w9TopBfGQzR2t6wfPIW4d/7/zXuSB8LNQjh14+WSfFFBq6jgPl+R8kBIEtpyb3b
29aKMSs5W38AbjmEqXI+82cdPr7t4aULK2lglr0R+viKgDGn+q65KylSdYIPts14
HN04cMoworxFe3eETVnHczbm7/TIeRhuVv0NGENNGuDpHfZaQJy5o4ZtfZCNaokU
9wlkKhOHuA47YnGlM4Q9vg6VYhIv+VV8CeDPeBpr5snP
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:28:39 2026 by rpki-client