This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GPHedMF_UkIgYPu-e1benQH753w.roa
File:                     GPHedMF_UkIgYPu-e1benQH753w.roa (raw, json)
Hash identifier:          LYgI4ns0awXuEIWRpBxR4vlHwym1n6O1mP6AWjGmlR8=
Subject key identifier:   18:F1:DE:74:C1:7F:52:42:20:60:FB:BE:7B:56:DE:9D:01:FB:E7:7C
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019B12432DAA593375683EAD4286FA11123E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GPHedMF_UkIgYPu-e1benQH753w.roa
Signing time:             Fri 12 Dec 2025 11:12:31 +0000
ROA not before:           Fri 12 Dec 2025 11:12:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     5065
IP address blocks:        31.56.114.0/24 maxlen: 24
                          31.56.157.0/24 maxlen: 24
                          31.56.200.0/24 maxlen: 24
                          31.56.201.0/24 maxlen: 24
                          31.56.202.0/24 maxlen: 24
                          31.56.226.0/24 maxlen: 24
                          31.57.133.0/24 maxlen: 24
                          31.57.136.0/24 maxlen: 24
                          31.58.129.0/24 maxlen: 24
                          31.58.150.0/24 maxlen: 24
                          31.58.154.0/24 maxlen: 24
                          31.58.165.0/24 maxlen: 24
                          31.59.43.0/24 maxlen: 24
                          31.59.56.0/24 maxlen: 24
                          31.59.97.0/24 maxlen: 24
                          31.59.112.0/24 maxlen: 24
                          31.59.113.0/24 maxlen: 24
                          31.59.115.0/24 maxlen: 24
                          31.59.130.0/24 maxlen: 24
                          31.59.144.0/22 maxlen: 24
                          31.59.187.0/24 maxlen: 24
                          31.59.229.0/24 maxlen: 24
                          31.59.231.0/24 maxlen: 24
                          31.59.233.0/24 maxlen: 24
                          31.59.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 09:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:12:43:2d:aa:59:33:75:68:3e:ad:42:86:fa:11:12:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Dec 12 11:12:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=18f1de74c17f52422060fbbe7b56de9d01fbe77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:4b:54:e7:4c:02:f0:4f:03:2b:c0:9c:39:
                    2a:92:60:09:7e:50:27:5e:c6:29:37:3e:85:8e:c8:
                    cb:e1:40:12:9a:a5:fd:8b:3f:f1:5a:9b:45:d0:23:
                    6c:96:61:91:38:25:52:19:83:92:1f:95:1a:78:05:
                    31:c4:e1:6c:23:54:fb:8a:2f:76:ad:f6:79:f7:ee:
                    fc:12:ba:55:f3:0b:4e:74:b0:93:35:c1:b7:8b:c9:
                    38:04:5f:25:e8:e1:dd:cf:67:46:12:29:8c:25:46:
                    c4:9f:62:6b:f8:ed:3a:a0:39:9d:63:63:d9:8e:e8:
                    d4:4e:de:2c:87:9f:ee:cd:c9:9e:7a:0b:b8:95:21:
                    c2:4e:75:7b:1b:54:37:b0:39:da:11:84:d8:f3:68:
                    93:3f:fd:d5:34:dd:46:64:6b:ec:a0:9e:f4:93:3f:
                    67:28:66:83:88:be:ec:7e:b7:3e:2c:6e:37:0a:8e:
                    63:f3:cd:80:de:be:ff:92:e6:01:5f:39:5e:c3:64:
                    d5:c5:d7:09:59:ce:0e:db:e4:5d:79:01:5e:66:a7:
                    fd:d3:e1:57:61:79:35:25:6d:95:4d:ef:d8:cf:49:
                    80:2a:cf:08:42:bf:96:6b:32:ba:9c:15:d2:66:c8:
                    e5:0e:9a:62:26:8d:b3:f2:cb:ef:50:6e:ea:35:6e:
                    d4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F1:DE:74:C1:7F:52:42:20:60:FB:BE:7B:56:DE:9D:01:FB:E7:7C
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GPHedMF_UkIgYPu-e1benQH753w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.114.0/24
                  31.56.157.0/24
                  31.56.200.0-31.56.202.255
                  31.56.226.0/24
                  31.57.133.0/24
                  31.57.136.0/24
                  31.58.129.0/24
                  31.58.150.0/24
                  31.58.154.0/24
                  31.58.165.0/24
                  31.59.43.0/24
                  31.59.56.0/24
                  31.59.97.0/24
                  31.59.112.0/23
                  31.59.115.0/24
                  31.59.130.0/24
                  31.59.144.0/22
                  31.59.187.0/24
                  31.59.229.0/24
                  31.59.231.0/24
                  31.59.233.0/24
                  31.59.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:ba:d2:26:b3:c4:a2:06:81:8a:6a:5a:96:7d:c6:bd:58:bc:
         39:3d:d0:71:1d:52:3e:4c:70:7b:a1:43:87:f1:46:63:52:4c:
         91:7a:66:d5:61:e9:d5:29:01:bc:a6:14:fc:7a:c8:72:06:6e:
         da:99:ae:49:30:45:bc:80:ff:b7:cc:50:fb:4b:d8:4b:ce:86:
         9f:96:f0:3a:d8:0c:4b:ad:68:a1:e8:4b:a7:8a:e5:5e:f1:39:
         d4:0d:09:a5:56:d8:ab:14:54:37:27:22:a7:83:e0:33:9b:7d:
         86:10:6b:62:2c:ae:f3:7d:c0:df:11:aa:33:26:69:9c:fb:03:
         c2:97:b4:f1:c7:b2:af:aa:ed:a1:20:e1:41:03:9b:ff:45:da:
         61:5c:66:0d:b1:98:ad:d2:4f:c2:47:3a:2e:b3:e6:f4:6c:a0:
         e1:6d:6a:2e:17:9d:e8:97:57:1c:c0:09:31:61:39:c5:f4:25:
         ac:5b:27:0e:a9:ad:57:e2:b1:43:94:04:c8:83:34:07:3d:dc:
         a2:2e:03:e6:0f:bd:00:7b:6b:c4:e3:c8:73:34:b2:ae:c2:b6:
         e0:0d:62:bb:dd:2c:41:9f:10:1d:96:0f:f2:dc:22:29:da:39:
         6b:27:3f:b6:fa:38:db:29:c8:04:64:93:69:30:d1:80:1a:05:
         33:b5:36:30
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgISAZsSQy2qWTN1aD6tQob6ERI+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUxMjEyMTExMjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGYxZGU3NGMxN2Y1MjQyMjA2MGZiYmU3YjU2ZGU5ZDAxZmJlNzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4dLVOdMAvBPAyvAnDkqkmAJflAn
XsYpNz6FjsjL4UASmqX9iz/xWptF0CNslmGROCVSGYOSH5UaeAUxxOFsI1T7ii92
rfZ59+78ErpV8wtOdLCTNcG3i8k4BF8l6OHdz2dGEimMJUbEn2Jr+O06oDmdY2PZ
jujUTt4sh5/uzcmeegu4lSHCTnV7G1Q3sDnaEYTY82iTP/3VNN1GZGvsoJ70kz9n
KGaDiL7sfrc+LG43Co5j882A3r7/kuYBXzlew2TVxdcJWc4O2+RdeQFeZqf90+FX
YXk1JW2VTe/Yz0mAKs8IQr+WazK6nBXSZsjlDppiJo2z8svvUG7qNW7UaQIDAQAB
o4IClDCCApAwHQYDVR0OBBYEFBjx3nTBf1JCIGD7vntW3p0B++d8MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvR1BIZWRNRl9Va0lnWVB1LWUxYmVuUUg3NTN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljCBkwQCAAEwgYwDBAAf
OHIDBAAfOJ0wDAMEAx84yAMEAB84ygMEAB844gMEAB85hQMEAB85iAMEAB86gQME
AB86lgMEAB86mgMEAB86pQMEAB87KwMEAB87OAMEAB87YQMEAR87cAMEAB87cwME
AB87ggMEAh87kAMEAB87uwMEAB875QMEAB875wMEAB876QMEAB879TANBgkqhkiG
9w0BAQsFAAOCAQEAYbrSJrPEogaBimpaln3GvVi8OT3QcR1SPkxwe6FDh/FGY1JM
kXpm1WHp1SkBvKYU/HrIcgZu2pmuSTBFvID/t8xQ+0vYS86Gn5bwOtgMS61ooehL
p4rlXvE51A0JpVbYqxRUNycip4PgM5t9hhBrYiyu833A3xGqMyZpnPsDwpe08cey
r6rtoSDhQQOb/0XaYVxmDbGYrdJPwkc6LrPm9Gyg4W1qLhed6JdXHMAJMWE5xfQl
rFsnDqmtV+KxQ5QEyIM0Bz3coi4D5g+9AHtrxOPIczSyrsK24A1iu90sQZ8QHZYP
8twiKdo5ayc/tvo42ynIBGSTaTDRgBoFM7U2MA==
-----END CERTIFICATE-----
Generated at Fri Dec 19 18:43:43 2025 by rpki-client