This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/_C6lyxoQMU5yOrfGf8iAi-Sl_ow.roa
File:                     _C6lyxoQMU5yOrfGf8iAi-Sl_ow.roa (raw, json)
Hash identifier:          p2xyfl4wigqQ6in3fdRR4OWjfDysBXxdWoA57WsF6ho=
Subject key identifier:   FC:2E:A5:CB:1A:10:31:4E:72:3A:B7:C6:7F:C8:80:8B:E4:A5:FE:8C
Certificate issuer:       /CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Certificate serial:       019B77C6C1C01C953DA0C815DD9E45DF4134
Authority key identifier: 95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/_C6lyxoQMU5yOrfGf8iAi-Sl_ow.roa
Signing time:             Thu 01 Jan 2026 04:17:52 +0000
ROA not before:           Thu 01 Jan 2026 04:17:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49461
IP address blocks:        31.42.160.0/20 maxlen: 20
                          31.42.160.0/24 maxlen: 24
                          31.42.161.0/24 maxlen: 24
                          31.42.162.0/24 maxlen: 24
                          31.42.163.0/24 maxlen: 24
                          31.42.164.0/24 maxlen: 24
                          31.42.165.0/24 maxlen: 24
                          31.42.166.0/24 maxlen: 24
                          31.42.167.0/24 maxlen: 24
                          31.42.168.0/24 maxlen: 24
                          31.42.169.0/24 maxlen: 24
                          31.42.170.0/24 maxlen: 24
                          31.42.171.0/24 maxlen: 24
                          31.42.172.0/23 maxlen: 23
                          31.42.172.0/24 maxlen: 24
                          31.42.173.0/24 maxlen: 24
                          31.42.174.0/24 maxlen: 24
                          31.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:c1:c0:1c:95:3d:a0:c8:15:dd:9e:45:df:41:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
        Validity
            Not Before: Jan  1 04:17:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fc2ea5cb1a10314e723ab7c67fc8808be4a5fe8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9c:d3:76:8d:65:db:d5:52:e6:72:1c:e8:83:
                    cc:0c:9b:69:74:b4:f4:88:57:a9:43:7e:c9:01:00:
                    b6:77:6b:37:91:d3:6b:92:03:86:4c:8b:3a:4c:38:
                    95:84:96:20:6d:6d:fc:8a:6a:8e:b8:dd:a6:5c:8a:
                    45:3a:e7:6c:f5:65:4e:9d:6a:3a:53:6a:42:a1:90:
                    cc:5b:b5:51:88:14:8e:04:fb:f3:73:1c:83:a2:07:
                    23:5a:a0:37:ce:62:cd:d4:ff:ce:7a:48:fe:3b:ae:
                    be:27:b2:9b:1d:77:c0:d3:69:dc:3b:1f:0f:c0:5e:
                    61:bd:a1:3e:9b:c1:1e:c7:bb:2e:f1:23:1c:9c:e8:
                    70:97:4e:57:d8:7e:b9:7a:0b:7f:e1:42:57:2a:fd:
                    a7:81:60:68:21:18:a2:60:4d:b3:72:5d:d0:20:eb:
                    1a:bc:38:89:e4:19:b0:82:ae:d5:03:46:9d:e4:ee:
                    85:dc:d4:2f:9d:0a:51:b8:3f:85:90:66:4e:20:96:
                    55:cb:40:08:28:b8:52:42:15:2f:fb:4f:2b:c0:35:
                    2f:fd:8f:81:d4:15:42:ca:71:ec:22:df:0c:a5:df:
                    e5:b1:11:2d:7d:8f:3f:fc:04:ef:87:3e:6a:46:f5:
                    cf:58:49:ae:fe:5a:b3:f5:54:65:75:11:58:09:19:
                    ab:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2E:A5:CB:1A:10:31:4E:72:3A:B7:C6:7F:C8:80:8B:E4:A5:FE:8C
            X509v3 Authority Key Identifier:
                keyid:95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/_C6lyxoQMU5yOrfGf8iAi-Sl_ow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.42.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0f:f8:c5:11:d8:a2:e7:77:2e:c8:67:bb:9d:f1:cb:cb:4e:65:
         a9:0d:60:ee:4b:9a:7d:b7:12:33:f1:a7:a6:c0:32:85:24:c9:
         b9:6b:30:17:46:13:b0:e0:35:29:e9:f8:e4:73:2b:08:7f:3c:
         fb:64:e1:82:c9:51:89:0b:64:dd:5a:46:0c:62:50:81:4a:f9:
         c9:3d:4d:65:ff:df:23:c7:26:39:bb:e1:a7:c4:7f:88:aa:5d:
         c1:07:82:53:6f:32:40:3e:98:57:12:ba:3e:9c:f3:44:c4:59:
         fd:4c:a6:31:a1:cd:7b:eb:4f:e2:e6:92:9d:49:a5:0e:12:27:
         ab:a1:23:1d:8f:07:83:bd:f7:65:82:cd:cc:09:16:8f:72:f6:
         e5:45:43:12:7b:f6:ce:75:c1:be:c0:34:a0:01:14:0c:7d:a7:
         d6:3a:4e:a0:11:85:56:32:ef:48:59:fc:66:00:60:60:1c:c2:
         df:f5:92:0d:23:ef:99:b4:da:82:99:f2:c0:00:9e:c9:be:0a:
         ae:b9:fa:d8:b3:5f:dc:e3:1c:e5:88:81:f3:01:28:ee:d8:3d:
         c5:38:d0:d4:b2:1a:1c:30:27:ba:dd:d3:6f:46:49:fe:d1:b1:
         1c:c5:82:80:6b:a8:18:36:61:81:d5:fe:a2:20:21:23:b7:66:
         0e:72:cb:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3xsHAHJU9oMgV3Z5F30E0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZTgxMzExZWYxZDM2ZWNjNmQxMjVlMzZjODJjMjZmOTE1
YjBkZjcwHhcNMjYwMTAxMDQxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzJlYTVjYjFhMTAzMTRlNzIzYWI3YzY3ZmM4ODA4YmU0YTVmZThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupzTdo1l29VS5nIc6IPMDJtpdLT0
iFepQ37JAQC2d2s3kdNrkgOGTIs6TDiVhJYgbW38imqOuN2mXIpFOuds9WVOnWo6
U2pCoZDMW7VRiBSOBPvzcxyDogcjWqA3zmLN1P/Oekj+O66+J7KbHXfA02ncOx8P
wF5hvaE+m8Eex7su8SMcnOhwl05X2H65egt/4UJXKv2ngWBoIRiiYE2zcl3QIOsa
vDiJ5Bmwgq7VA0ad5O6F3NQvnQpRuD+FkGZOIJZVy0AIKLhSQhUv+08rwDUv/Y+B
1BVCynHsIt8Mpd/lsREtfY8//ATvhz5qRvXPWEmu/lqz9VRldRFYCRmrLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPwupcsaEDFOcjq3xn/IgIvkpf6MMB8GA1UdIwQY
MBaAFJXoExHvHTbsxtEl42yCwm+RWw33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGVnVEVlOGROdXpHMFNYamJJTENiNUZiRGZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81YzA2YmMtOGNhMS00MDkxLTk0MTgt
NzM0ZmFiNmZlYzZmLzEvX0M2bHl4b1FNVTV5T3JmR2Y4aUFpLVNsX293LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC81YzA2YmMtOGNhMS00MDkxLTk0MTgtNzM0ZmFiNmZlYzZm
LzEvbGVnVEVlOGROdXpHMFNYamJJTENiNUZiRGZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEHyqgMA0G
CSqGSIb3DQEBCwUAA4IBAQAP+MUR2KLndy7IZ7ud8cvLTmWpDWDuS5p9txIz8aem
wDKFJMm5azAXRhOw4DUp6fjkcysIfzz7ZOGCyVGJC2TdWkYMYlCBSvnJPU1l/98j
xyY5u+GnxH+Iql3BB4JTbzJAPphXEro+nPNExFn9TKYxoc1760/i5pKdSaUOEier
oSMdjweDvfdlgs3MCRaPcvblRUMSe/bOdcG+wDSgARQMfafWOk6gEYVWMu9IWfxm
AGBgHMLf9ZINI++ZtNqCmfLAAJ7JvgquufrYs1/c4xzliIHzASju2D3FONDUshoc
MCe63dNvRkn+0bEcxYKAa6gYNmGB1f6iICEjt2YOcsuN
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:25:19 2026 by rpki-client