This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/lOg--qFlBmx76-ubYUaKmA6pugY.roa
File:                     lOg--qFlBmx76-ubYUaKmA6pugY.roa (raw, json)
Hash identifier:          aef1dmSLDMXhGIpZWewz/Jm1+VbIUIAUbF9tc8qTQqk=
Subject key identifier:   94:E8:3E:FA:A1:65:06:6C:7B:EB:EB:9B:61:46:8A:98:0E:A9:BA:06
Certificate issuer:       /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial:       019B7BA414FB6D883E98D81D79A421D96432
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/lOg--qFlBmx76-ubYUaKmA6pugY.roa
Signing time:             Thu 01 Jan 2026 22:18:29 +0000
ROA not before:           Thu 01 Jan 2026 22:18:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42083
IP address blocks:        31.169.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:14:fb:6d:88:3e:98:d8:1d:79:a4:21:d9:64:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
        Validity
            Not Before: Jan  1 22:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=94e83efaa165066c7bebeb9b61468a980ea9ba06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:50:dd:6a:8c:ec:53:46:27:97:4d:42:75:4c:
                    b6:ac:55:06:d0:06:97:12:38:dd:ea:8c:17:35:43:
                    6a:dc:7c:4f:21:6f:e5:c8:d1:42:a2:1b:0b:f4:46:
                    02:fb:65:f4:38:36:b5:78:f6:b4:d0:c8:d7:96:a3:
                    1b:94:53:5f:c0:48:7f:77:e7:d2:70:d6:53:3a:03:
                    1a:ec:04:e1:22:1b:73:dd:f8:5d:60:4c:9e:6a:b0:
                    da:fe:4a:e9:f3:69:c2:18:d4:69:38:a5:ce:47:7b:
                    a2:68:ca:fc:81:42:9e:e2:29:c8:9b:1e:83:0f:9d:
                    1e:a6:76:ed:fa:38:8d:03:00:75:2b:88:c8:ac:80:
                    50:1a:0b:79:8e:c3:f6:5c:f5:3c:82:94:57:df:f0:
                    fd:7a:b7:13:cb:10:ff:f6:b4:30:0f:0b:12:ab:48:
                    6b:fb:cf:4c:ec:a0:a6:6d:76:2c:3a:34:80:01:f2:
                    6f:5e:35:cc:2e:29:5e:c5:ad:fb:d9:fa:3e:bd:b5:
                    44:6e:d5:a6:5d:d2:af:54:af:bb:dc:c9:94:9d:3f:
                    76:b8:f5:16:08:7c:2f:c2:fe:83:94:0c:58:b8:4d:
                    0c:b2:0c:d4:96:57:d4:0b:cf:de:15:5b:7f:e3:58:
                    b1:2f:3b:6a:89:71:24:85:b5:d8:28:b5:52:66:14:
                    bc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E8:3E:FA:A1:65:06:6C:7B:EB:EB:9B:61:46:8A:98:0E:A9:BA:06
            X509v3 Authority Key Identifier:
                keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/lOg--qFlBmx76-ubYUaKmA6pugY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.169.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:2c:00:c1:2f:2e:af:e9:fa:bb:81:b1:d2:07:ab:27:68:8d:
         51:4a:df:93:85:b1:2a:c6:c5:de:1c:2b:dc:d6:04:36:ec:c5:
         34:87:d6:2f:0e:e5:69:33:57:68:c1:43:6b:f9:3b:b8:8d:12:
         72:32:72:c7:94:6c:ba:ba:83:35:98:2f:92:97:b6:2f:1b:2c:
         c4:4e:c5:0f:56:9e:26:9a:4d:b3:70:02:c7:e7:8e:9a:b3:80:
         d9:09:2d:a0:2d:30:c6:b9:c3:7a:35:42:78:3e:12:7a:08:f5:
         4a:9b:59:f1:4a:2d:47:f2:71:66:ef:a7:35:29:23:62:ba:60:
         72:4f:62:3d:c5:69:39:ab:f4:fa:e3:ff:1b:52:85:75:f9:e0:
         01:c6:42:ba:19:23:e8:43:c1:39:54:3e:36:4d:0b:a1:e8:18:
         1b:fb:4a:25:1a:1c:61:19:e7:3f:bb:85:24:25:f4:3c:9f:3f:
         90:40:30:e3:fc:d0:3a:f1:a1:ff:ea:f7:2e:b0:ca:f1:75:f2:
         f1:a9:58:6e:cc:54:c2:f7:3e:65:78:c4:61:42:05:d9:a7:c4:
         c4:c2:fd:08:a7:dd:38:0d:14:22:55:2f:17:f9:57:a0:9a:bf:
         77:66:53:a6:32:39:02:e7:fd:33:79:73:b7:73:3a:79:16:b9:
         8d:d2:bd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:11:58 2026 by rpki-client