This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FuMLmj1EXRbw2TS5reIItMwAvuw.roa
File:                     FuMLmj1EXRbw2TS5reIItMwAvuw.roa (raw, json)
Hash identifier:          gzuK06aFYdw8h7M63f7ZOqJgWjAeWc678r0VRoUsjqs=
Subject key identifier:   16:E3:0B:9A:3D:44:5D:16:F0:D9:34:B9:AD:E2:08:B4:CC:00:BE:EC
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019AE844BC2F0686510F2FDB97DA8A1A201D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FuMLmj1EXRbw2TS5reIItMwAvuw.roa
Signing time:             Thu 04 Dec 2025 07:30:10 +0000
ROA not before:           Thu 04 Dec 2025 07:30:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     5511
IP address blocks:        31.57.155.0/24 maxlen: 24
                          31.57.226.0/24 maxlen: 24
                          31.59.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e8:44:bc:2f:06:86:51:0f:2f:db:97:da:8a:1a:20:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Dec  4 07:30:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=16e30b9a3d445d16f0d934b9ade208b4cc00beec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:54:52:77:21:ee:a6:bc:2b:fb:fc:43:5b:b6:
                    87:4d:0f:0c:ec:78:ea:db:c9:d7:71:81:25:1f:b8:
                    77:61:21:4f:b8:6c:db:37:d0:b0:55:97:6c:87:dd:
                    dc:ea:10:00:50:52:c8:18:58:19:30:a8:25:97:4e:
                    25:4f:ee:d8:38:34:fe:12:96:32:d9:88:09:09:c6:
                    fb:90:58:5d:a4:c7:b4:f0:59:97:58:ed:df:b2:ab:
                    6f:9c:ae:ea:ec:51:68:b4:bf:3c:87:9e:73:de:8d:
                    d0:33:a1:ad:53:9a:12:ff:3b:fb:3a:49:e4:60:68:
                    be:48:31:96:e3:95:b7:8c:bf:fc:38:23:0c:9f:8b:
                    6a:39:c6:5c:12:de:b0:41:96:fb:f5:4b:76:b4:54:
                    6f:99:6a:06:3e:4d:76:24:39:25:29:44:f2:56:1b:
                    96:d8:79:1c:e2:fb:8a:01:bf:22:b1:8f:b7:93:61:
                    c9:4b:50:a1:92:25:3b:b5:e6:23:5f:d5:6a:29:12:
                    6d:c7:22:b9:35:06:5b:2f:f1:73:ea:2f:79:b6:b2:
                    6f:14:09:a3:11:3b:c4:6c:b0:b2:71:a3:3b:4d:84:
                    ba:64:99:bd:88:cc:3a:fb:e0:ef:20:99:3c:13:2e:
                    9a:62:7e:f2:ae:5a:0f:96:6f:b7:29:ae:86:a6:c6:
                    20:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E3:0B:9A:3D:44:5D:16:F0:D9:34:B9:AD:E2:08:B4:CC:00:BE:EC
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FuMLmj1EXRbw2TS5reIItMwAvuw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.57.155.0/24
                  31.57.226.0/24
                  31.59.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:87:bb:95:d1:31:ae:b3:78:fc:93:06:0e:ec:46:94:38:f7:
         c1:34:44:f6:cd:bd:e4:4d:c2:7f:28:a6:ec:f4:bf:1e:7d:6d:
         90:a7:a9:c4:b1:b9:22:8b:0c:b8:44:1b:be:08:6d:d5:8d:0c:
         34:16:95:d3:b8:d7:41:b1:a9:9d:3e:73:8c:55:6a:af:08:60:
         e1:51:07:86:44:15:43:49:1a:58:1a:60:1b:61:a0:7e:ca:e5:
         f9:95:b2:62:b3:83:1d:4a:dc:09:ae:0d:aa:25:58:8c:26:fa:
         eb:17:f3:3a:7b:04:66:22:34:2b:94:01:07:b3:16:0a:80:e8:
         b8:0d:df:33:53:eb:d9:31:94:64:54:ea:22:fd:0c:29:4a:bc:
         01:c8:09:25:7f:cd:eb:d1:df:67:dd:62:03:fa:b2:ce:c3:41:
         2e:e8:aa:16:9a:dc:c5:3d:8d:b7:be:82:c3:6f:54:13:eb:a2:
         73:33:cf:fb:14:02:29:2a:70:29:0c:52:61:f7:78:60:98:31:
         7d:95:da:69:4b:ce:fe:65:4f:f8:ef:b1:80:30:42:ba:1b:83:
         82:bb:dd:4f:68:43:6f:1a:74:5b:68:a4:d3:0c:01:85:e4:c4:
         50:a1:47:ba:fe:52:f3:7f:21:26:97:ca:15:09:f3:17:95:73:
         02:0a:1a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:47:04 2025 by rpki-client