This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/_KaR4wLwZ7labGWt6arnKIQd96w.roa
File:                     _KaR4wLwZ7labGWt6arnKIQd96w.roa (raw, json)
Hash identifier:          nGupux0rLke8QsDU9pv8mG8OuJgGPA7rc9IB5osDncU=
Subject key identifier:   FC:A6:91:E3:02:F0:67:B9:5A:6C:65:AD:E9:AA:E7:28:84:1D:F7:AC
Certificate issuer:       /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial:       019B7B3601840172D90CB869D50FB82420DD
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/_KaR4wLwZ7labGWt6arnKIQd96w.roa
Signing time:             Thu 01 Jan 2026 20:18:15 +0000
ROA not before:           Thu 01 Jan 2026 20:18:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9050
IP address blocks:        31.14.20.0/24 maxlen: 24
                          188.214.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:01:84:01:72:d9:0c:b8:69:d5:0f:b8:24:20:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
        Validity
            Not Before: Jan  1 20:18:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fca691e302f067b95a6c65ade9aae728841df7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2d:57:5f:e8:ce:e0:6c:8d:3c:bb:e2:64:8b:
                    4f:86:93:14:e7:8b:57:c3:ce:fd:2c:26:b3:95:13:
                    91:92:f0:4f:5d:fa:14:2b:67:47:a2:25:df:d7:6e:
                    39:28:5b:c2:50:fb:a0:d3:6b:eb:41:d9:32:9f:84:
                    10:95:34:7d:cb:34:39:31:75:00:46:1e:23:14:bb:
                    d3:31:e3:44:6d:9d:b2:6a:0e:11:a6:5b:e7:3b:ca:
                    96:5a:8b:94:f9:65:ac:01:4b:7d:9b:57:75:5d:45:
                    e1:52:9b:7d:0b:59:74:76:64:77:84:3a:bf:22:11:
                    78:5d:9b:53:62:44:44:e3:e1:c2:52:7c:8f:42:0a:
                    b3:e6:27:d1:d8:e1:f7:11:45:b2:33:c3:29:25:1d:
                    af:7b:15:c8:16:45:71:6e:e0:4a:32:f4:bf:24:b5:
                    a8:93:c0:7e:77:35:b2:58:37:34:33:5e:3e:8b:86:
                    f5:cc:cf:29:94:36:03:a3:a1:60:58:0e:7d:76:79:
                    6e:dd:94:1c:4a:7d:6d:01:ff:6b:00:e8:38:35:27:
                    4d:97:aa:41:7d:d4:a6:7f:79:9a:d1:9f:36:7c:d0:
                    4a:9b:7d:bd:46:9e:6a:6c:db:7e:9a:1a:57:1e:91:
                    7d:ec:40:f3:e7:9d:dc:69:14:4f:15:5b:40:a6:c8:
                    3e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A6:91:E3:02:F0:67:B9:5A:6C:65:AD:E9:AA:E7:28:84:1D:F7:AC
            X509v3 Authority Key Identifier:
                keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/_KaR4wLwZ7labGWt6arnKIQd96w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.14.20.0/24
                  188.214.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:8d:1e:7c:b3:40:4d:0c:2e:75:6c:62:9b:04:93:40:b3:a0:
         8b:10:8c:3e:5c:82:d8:11:c7:82:6f:6d:89:75:c8:c0:e8:b7:
         3a:53:18:91:c8:d3:3e:76:b6:6e:96:b5:0f:0a:53:21:12:a2:
         86:ac:0c:34:fa:57:73:e2:3f:d3:a0:c8:e8:06:72:fd:b1:b3:
         49:7b:5e:b3:0a:4e:6b:72:02:7b:42:b6:c6:c5:ed:50:6a:28:
         02:f8:22:22:48:3b:67:00:bc:b3:46:8e:5b:13:33:55:65:f1:
         79:99:f3:49:9b:cc:93:8b:a7:a8:ea:1a:77:77:aa:99:d6:30:
         07:9e:03:6c:c1:df:d3:00:6e:3e:4c:8b:ca:8a:91:22:75:a0:
         ba:d5:3f:23:c2:10:fd:f0:c8:b1:98:63:34:b2:29:43:be:9f:
         f3:42:5e:36:44:8e:54:98:d8:37:50:d6:70:50:15:3e:ba:ba:
         d8:de:e1:1a:46:ce:c2:0d:c7:66:2b:a4:92:8e:89:6a:82:56:
         2f:70:fc:fa:6b:ff:d5:31:59:89:d3:fc:1b:01:5c:0d:69:c8:
         68:65:a9:da:5c:af:72:c7:73:07:6b:96:37:06:b0:62:7e:49:
         74:23:70:70:b7:b4:7f:e3:ef:6d:97:76:ff:17:be:69:74:fa:
         36:10:cd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:19:39 2026 by rpki-client