This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/31LqXCpHojYx6Rt887DjR163xxo.roa
File:                     31LqXCpHojYx6Rt887DjR163xxo.roa (raw, json)
Hash identifier:          Fk0wJvz9kNK6jsX7wBhWeVOLH39ghJFDMdON8iP/W5M=
Subject key identifier:   DF:52:EA:5C:2A:47:A2:36:31:E9:1B:7C:F3:B0:E3:47:5E:B7:C7:1A
Certificate issuer:       /CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
Certificate serial:       019ACECED717EDDF5BF2B06415BAC969C1C9
Authority key identifier: E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/31LqXCpHojYx6Rt887DjR163xxo.roa
Signing time:             Sat 29 Nov 2025 08:50:53 +0000
ROA not before:           Sat 29 Nov 2025 08:50:53 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49556
IP address blocks:        185.155.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ce:ce:d7:17:ed:df:5b:f2:b0:64:15:ba:c9:69:c1:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
        Validity
            Not Before: Nov 29 08:50:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=df52ea5c2a47a23631e91b7cf3b0e3475eb7c71a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:29:7a:29:a3:c8:7e:66:5d:18:df:88:06:33:
                    99:71:cb:90:b6:13:cd:8c:2c:76:f9:4e:cf:2d:85:
                    c9:f8:0f:1c:de:a3:67:bb:e7:a8:6a:26:93:ea:36:
                    de:fb:e0:25:57:09:c0:c0:36:71:75:20:9d:b6:1b:
                    2e:32:d4:27:af:6b:35:1b:c8:dc:88:c0:d3:c0:d4:
                    e3:b7:18:cc:89:ab:f8:31:89:05:11:f1:f2:ca:ff:
                    d9:83:50:58:93:b2:f5:8e:93:69:3a:ba:82:c3:99:
                    2d:51:e2:84:99:d3:72:69:04:ef:4c:1f:86:78:be:
                    b2:77:d0:fd:a9:d1:63:fa:04:cd:b6:37:8d:5e:88:
                    83:71:9e:20:5e:01:b7:6c:f1:3d:e4:64:b6:f7:f9:
                    75:94:fd:5a:63:a2:62:bf:c9:38:82:8a:1b:72:cb:
                    18:52:bf:c8:29:f5:d9:45:aa:9b:61:e2:5b:06:cc:
                    66:bb:4c:83:c7:a3:10:8c:89:da:e4:ca:af:e7:e4:
                    56:7d:80:f3:07:6b:04:f3:c0:60:e3:bb:a3:56:46:
                    05:5f:f7:8d:a7:ae:b9:1d:7b:f5:c8:7e:72:06:76:
                    ad:4d:09:b0:95:18:5c:8b:f5:52:32:d8:87:2d:2b:
                    68:cf:2e:22:2a:04:eb:01:b0:e7:df:0b:2c:50:b0:
                    32:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:52:EA:5C:2A:47:A2:36:31:E9:1B:7C:F3:B0:E3:47:5E:B7:C7:1A
            X509v3 Authority Key Identifier:
                keyid:E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/31LqXCpHojYx6Rt887DjR163xxo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:c8:a1:11:e0:be:46:d2:93:36:22:f5:b8:f2:38:1d:13:1e:
         ec:24:2a:72:42:3b:da:3d:9c:93:45:6e:46:2e:3c:52:3c:86:
         73:a7:d9:89:d1:4e:26:c0:f4:29:f9:75:2d:31:af:17:f2:ee:
         e0:9c:d8:0a:8c:2c:47:35:7d:91:09:a6:f6:62:06:ea:ca:aa:
         bd:e7:05:60:b7:4f:90:b0:18:66:12:0a:6a:21:3f:fe:ff:d7:
         b6:37:e9:d4:ee:5a:d7:70:b7:df:82:9c:99:08:66:c4:3f:46:
         73:d8:ff:41:0d:c7:fe:46:0c:16:5c:19:2e:38:0e:be:1b:cf:
         3e:31:25:50:51:00:2d:0a:c1:66:5b:0f:f6:79:55:95:fd:76:
         79:b4:d2:ef:78:3e:ec:cf:42:d8:d4:dd:99:df:6c:3a:8f:81:
         2f:7b:66:08:7a:63:ac:aa:7f:3f:32:f0:4f:d1:59:03:35:20:
         08:59:e3:83:f3:ff:0c:cd:f1:95:3c:69:20:8a:55:9b:36:8c:
         a0:6d:e4:12:29:a6:62:dc:59:21:d4:b8:48:81:dc:da:a9:8c:
         1c:16:9d:88:e3:1f:71:6c:2e:93:a3:38:8f:41:99:e5:83:fe:
         0c:e3:e2:be:c2:d4:b5:6d:aa:a7:6e:d4:a5:99:d1:bb:33:0d:
         74:4c:60:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:34:58 2025 by rpki-client