This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vqnG1gMLnY-pgSteyChYKcyKjjM.roa
File:                     vqnG1gMLnY-pgSteyChYKcyKjjM.roa (raw, json)
Hash identifier:          hgfZFU+VCgSoaFF4ZYYL1SH2yJfkXnCYIHe2VQMicPE=
Subject key identifier:   BE:A9:C6:D6:03:0B:9D:8F:A9:81:2B:5E:C8:28:58:29:CC:8A:8E:33
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019AED6B6A6FF649ED0E79C160202A216AD6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vqnG1gMLnY-pgSteyChYKcyKjjM.roa
Signing time:             Fri 05 Dec 2025 07:30:31 +0000
ROA not before:           Fri 05 Dec 2025 07:30:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     43641
IP address blocks:        31.56.116.0/24 maxlen: 24
                          31.56.127.0/24 maxlen: 24
                          31.57.192.0/24 maxlen: 24
                          31.57.193.0/24 maxlen: 24
                          31.57.195.0/24 maxlen: 24
                          31.57.232.0/24 maxlen: 24
                          31.57.233.0/24 maxlen: 24
                          31.57.234.0/24 maxlen: 24
                          31.57.235.0/24 maxlen: 24
                          31.58.141.0/24 maxlen: 24
                          31.58.145.0/24 maxlen: 24
                          31.58.148.0/24 maxlen: 24
                          31.58.149.0/24 maxlen: 24
                          31.58.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ed:6b:6a:6f:f6:49:ed:0e:79:c1:60:20:2a:21:6a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Dec  5 07:30:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bea9c6d6030b9d8fa9812b5ec8285829cc8a8e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:53:d1:2e:f6:37:fe:1d:a7:d6:97:07:a9:ce:
                    35:92:d3:96:d9:c7:25:43:a5:ad:26:8c:e2:2b:4d:
                    71:75:87:68:83:5a:38:d4:01:5a:2d:2a:ca:dd:97:
                    54:e0:fa:5f:8b:e6:92:86:12:97:3d:28:27:be:46:
                    d8:36:d1:62:19:ae:08:35:fd:98:8a:68:56:da:86:
                    66:e1:bc:d4:1f:f6:7f:8a:12:ea:20:9d:40:3e:3f:
                    d2:7c:45:13:34:28:b2:43:dd:fe:94:ac:7e:10:8f:
                    9b:39:d1:37:0a:59:78:e1:ba:eb:cf:4e:d9:b7:89:
                    c8:93:36:dd:c6:b5:31:fd:ec:ae:a9:ce:38:d1:1b:
                    69:15:51:c0:b7:8f:45:ea:46:22:1a:bd:a0:17:06:
                    b1:8f:05:c4:6b:ad:25:a4:66:22:4f:5a:6c:ad:9a:
                    c2:23:5f:93:1c:3b:e6:e4:af:87:b0:91:da:b2:dc:
                    f6:58:e4:af:c0:47:1e:7b:68:e5:3f:a2:26:44:9c:
                    38:38:c0:c8:77:84:d1:2c:a7:d4:36:01:20:2c:d6:
                    7a:af:db:f6:d3:b7:f2:50:68:39:f9:e1:fd:4a:14:
                    01:95:95:72:80:3f:83:ba:0b:6c:38:97:6a:c6:57:
                    4f:02:13:3c:44:1a:66:e6:79:b2:be:7c:40:3d:eb:
                    ca:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A9:C6:D6:03:0B:9D:8F:A9:81:2B:5E:C8:28:58:29:CC:8A:8E:33
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vqnG1gMLnY-pgSteyChYKcyKjjM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.116.0/24
                  31.56.127.0/24
                  31.57.192.0/23
                  31.57.195.0/24
                  31.57.232.0/22
                  31.58.141.0/24
                  31.58.145.0/24
                  31.58.148.0/23
                  31.58.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:58:91:b4:1a:56:b5:66:98:87:83:03:51:75:c7:61:55:24:
         4e:d9:0b:08:1a:1c:97:b0:74:7b:1a:5c:87:c7:e4:8c:db:a7:
         06:cc:3d:80:cb:da:7b:37:35:fd:c1:a6:f1:ee:dc:0c:07:f7:
         1a:04:b6:26:76:6c:08:9b:ab:bc:b5:36:7e:bb:54:40:eb:c0:
         ce:37:c3:80:1a:83:53:f7:4d:6c:67:ca:4c:8f:e8:47:fc:39:
         2a:dd:a5:2e:6f:c1:1b:c3:b2:6c:72:28:46:54:d0:aa:50:0a:
         08:9d:84:ba:5b:24:f4:d5:54:a9:b7:12:55:b2:9d:a3:7d:08:
         70:fb:12:e4:89:6e:3a:35:31:c0:78:b8:00:1d:92:86:32:32:
         75:61:7f:76:50:45:04:27:a2:c0:f8:fd:2b:c5:75:a6:c2:a0:
         b5:fa:06:dd:f6:ba:de:02:4e:ac:88:4f:99:80:d7:b4:9a:0a:
         c9:73:5e:69:ec:a0:6a:cd:d2:fd:ca:54:6c:4d:74:c7:51:28:
         ad:0f:95:f2:a8:4e:de:87:a7:0b:19:82:56:88:76:3e:40:c4:
         a7:99:6e:f7:35:d2:9b:2e:53:ee:7a:5b:4a:6f:c5:60:23:13:
         c6:8f:32:b1:ce:97:1b:6e:d4:c0:98:a4:39:6e:55:16:e2:11:
         4e:b5:c7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:53:32 2025 by rpki-client