This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/rbSihGXODQuXmGdRnxTGjpysN_E.roa
File:                     rbSihGXODQuXmGdRnxTGjpysN_E.roa (raw, json)
Hash identifier:          kNylbr0jppPNSO+4QDcJI79pqrUPxp86qMzkIb3LnQY=
Subject key identifier:   AD:B4:A2:84:65:CE:0D:0B:97:98:67:51:9F:14:C6:8E:9C:AC:37:F1
Certificate issuer:       /CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Certificate serial:       019B7F83DD8F0B3FD857DDA9CB40C4F25877
Authority key identifier: 62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/rbSihGXODQuXmGdRnxTGjpysN_E.roa
Signing time:             Fri 02 Jan 2026 16:21:46 +0000
ROA not before:           Fri 02 Jan 2026 16:21:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56616
IP address blocks:        31.7.88.0/22 maxlen: 24
                          31.7.88.0/23 maxlen: 23
                          31.7.88.0/24 maxlen: 24
                          31.7.89.0/24 maxlen: 24
                          31.7.90.0/23 maxlen: 23
                          31.7.90.0/24 maxlen: 24
                          31.7.91.0/24 maxlen: 24
                          185.116.20.0/22 maxlen: 24
                          185.116.20.0/23 maxlen: 23
                          185.116.20.0/24 maxlen: 24
                          185.116.21.0/24 maxlen: 24
                          185.116.22.0/23 maxlen: 23
                          185.116.22.0/24 maxlen: 24
                          185.116.23.0/24 maxlen: 24
                          2a0a:d340::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:dd:8f:0b:3f:d8:57:dd:a9:cb:40:c4:f2:58:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6264318c1aaa7ca0603155a883d43926ef97e87c
        Validity
            Not Before: Jan  2 16:21:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=adb4a28465ce0d0b979867519f14c68e9cac37f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ea:32:43:bd:68:4d:e0:10:d6:b4:d8:bb:62:
                    a1:60:81:2e:89:0c:f4:ea:ec:18:e0:ef:07:27:33:
                    db:5e:58:dc:c4:a6:3f:8b:94:c3:74:f5:45:ef:58:
                    a5:6d:dd:95:fd:8e:c8:da:30:9f:41:ea:cd:fb:e6:
                    36:82:3c:3d:1d:c3:6f:d5:46:0d:ba:8f:ae:76:28:
                    44:19:c6:f7:59:88:d3:f4:95:ad:27:ba:72:34:95:
                    0a:ef:d9:9c:39:6f:c0:93:88:f9:6a:ff:d3:ca:2c:
                    fa:32:d9:f6:c2:3b:53:98:bc:49:99:29:37:81:c7:
                    bc:72:ae:27:1a:7b:ab:65:a1:99:73:10:a1:fb:29:
                    01:e9:17:2e:9b:14:9b:6f:1f:21:39:b5:ed:0f:c9:
                    2d:da:af:cb:84:f7:5a:b5:26:c8:37:66:31:d0:47:
                    52:bb:d4:82:e2:12:15:eb:f5:9e:62:17:2e:9e:46:
                    f9:6b:69:4c:5f:3e:84:52:8d:04:1d:98:ca:54:45:
                    74:17:58:6c:2f:63:b7:cd:e7:46:40:8c:da:5e:f2:
                    a3:35:eb:dc:05:02:f8:f2:37:6b:68:b0:ac:9a:67:
                    b4:f4:db:34:d2:6e:86:48:f2:62:d8:db:9e:cb:fe:
                    3d:53:31:34:74:2e:67:d7:72:fa:95:ce:53:04:4e:
                    84:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B4:A2:84:65:CE:0D:0B:97:98:67:51:9F:14:C6:8E:9C:AC:37:F1
            X509v3 Authority Key Identifier:
                keyid:62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/rbSihGXODQuXmGdRnxTGjpysN_E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.7.88.0/22
                  185.116.20.0/22
                IPv6:
                  2a0a:d340::/29

    Signature Algorithm: sha256WithRSAEncryption
         0a:c8:8c:67:11:03:77:8f:bf:26:dd:fd:a4:29:09:45:48:46:
         19:fc:19:f7:f6:bb:32:7d:bd:93:94:7d:b9:e7:cb:14:1c:03:
         77:f1:33:27:bb:92:ac:41:0b:b6:79:a6:7d:5e:c3:cc:f0:4c:
         4f:54:a4:d3:76:f9:ce:79:d4:bb:19:bf:25:b1:4f:42:8a:80:
         e2:de:0e:b9:c9:63:19:e2:11:f9:a6:2c:86:63:c7:22:70:65:
         2b:7e:cc:6c:a6:fa:a3:4d:98:de:0d:7e:7b:b9:52:c7:f6:f6:
         b9:cb:a3:d5:cf:7d:6f:04:6a:69:e4:21:13:1f:4e:bc:69:77:
         89:fd:f4:87:9f:0f:2b:b1:18:d7:39:67:03:3b:f1:22:32:f1:
         cf:e0:af:14:4a:f9:de:44:01:cf:cb:02:82:9d:60:42:de:57:
         a7:f2:f1:bb:dc:8f:ed:5e:82:86:7e:0d:7a:b4:93:a2:26:63:
         4a:79:19:af:40:56:95:81:f2:27:04:07:c7:3b:df:55:69:6f:
         6e:23:74:c2:4b:77:94:c3:8d:ae:9e:e8:2b:df:13:c4:6a:2d:
         a2:e0:c1:41:f2:14:b8:0f:a7:07:f6:a3:57:c0:3e:42:53:6c:
         31:f7:70:cf:b3:5c:65:01:e1:6f:0a:8e:3e:e2:b1:89:d4:74:
         03:99:9f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:32:26 2026 by rpki-client