This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SKquyt0mSLTBy_j8gzysoVVQBAg.roa
File:                     SKquyt0mSLTBy_j8gzysoVVQBAg.roa (raw, json)
Hash identifier:          GcEOV1T8j/YeMN0yY98WxJ433JIylsIpCcvZ2xi+Rtc=
Subject key identifier:   48:AA:AE:CA:DD:26:48:B4:C1:CB:F8:FC:83:3C:AC:A1:55:50:04:08
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019B0896AF1E41A76E593A87F4A333EE6D76
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SKquyt0mSLTBy_j8gzysoVVQBAg.roa
Signing time:             Wed 10 Dec 2025 14:07:31 +0000
ROA not before:           Wed 10 Dec 2025 14:07:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135682
IP address blocks:        31.56.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:08:96:af:1e:41:a7:6e:59:3a:87:f4:a3:33:ee:6d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Dec 10 14:07:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=48aaaecadd2648b4c1cbf8fc833caca155500408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:5c:59:05:3c:c1:71:a1:3d:f0:f5:df:e7:
                    7f:00:22:66:d2:01:bc:02:b1:c7:f1:38:ba:22:42:
                    95:85:59:87:4d:e8:6b:18:05:76:0c:4b:72:d0:a4:
                    de:03:a9:61:90:f3:4e:88:7d:2e:23:20:58:6f:df:
                    b9:16:e9:87:57:b1:e5:8e:07:12:83:0e:1a:5a:76:
                    91:7a:5b:2f:f4:79:c0:7a:a7:5f:35:e8:9a:36:de:
                    4c:4d:4a:77:46:37:13:fc:e9:93:d9:86:0b:2f:ec:
                    8c:8e:a7:7e:98:9b:1c:83:ff:c6:80:1f:02:ca:12:
                    6d:50:fc:d2:4b:29:5f:f8:d5:cf:3c:e5:be:53:98:
                    08:56:72:4f:91:7b:37:a6:03:6d:c5:c5:d9:4e:e6:
                    7f:ba:07:ae:bb:1a:f5:51:c1:21:e8:56:31:a1:2b:
                    e9:2e:55:93:ec:7b:ef:b5:80:0e:24:1e:ad:9f:76:
                    f8:fa:d2:52:ec:b1:0b:0c:43:7a:4d:d7:4c:99:93:
                    6c:72:9d:0b:c6:0e:73:a4:3d:d9:7f:3f:d5:e6:44:
                    40:e4:d6:d4:fd:84:78:41:dd:8c:1b:98:71:f0:ed:
                    b5:e3:e5:40:53:88:73:bd:63:5e:25:92:e6:bf:60:
                    87:90:91:9c:76:a9:1b:a8:a6:b3:2f:7f:29:2e:22:
                    65:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AA:AE:CA:DD:26:48:B4:C1:CB:F8:FC:83:3C:AC:A1:55:50:04:08
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SKquyt0mSLTBy_j8gzysoVVQBAg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:2b:51:e6:94:b7:c1:e4:b0:fb:d9:10:88:be:4d:b9:7e:11:
         4e:10:50:5f:2d:6e:17:72:51:ed:8f:e5:65:08:42:1c:ef:1f:
         00:9a:e7:12:78:4c:89:09:08:94:0f:b9:f7:1d:c0:53:4d:2b:
         9d:15:4c:10:32:53:b7:8c:11:d8:59:d4:63:b2:7b:b5:00:7e:
         7a:0b:40:e3:da:72:e9:e8:c1:7c:f5:74:05:4b:48:86:98:45:
         cf:9c:1c:b0:b1:15:01:26:e0:f0:ef:3a:a5:c9:25:21:f9:8d:
         42:72:0f:38:75:0d:ca:28:79:95:b2:fc:96:83:b4:d5:57:4a:
         e5:20:f5:14:2e:59:05:b6:47:d4:75:26:ff:a3:44:a7:7e:0d:
         3f:f6:dc:e7:ec:f4:2b:86:86:fb:ef:4f:cb:e3:96:36:7b:b5:
         7d:5f:79:e0:2e:56:29:2c:40:8f:1f:9b:ce:57:fc:33:5e:91:
         fb:17:0e:8d:42:5c:a8:17:7d:37:0d:a2:33:38:70:9e:71:c7:
         10:40:60:4a:73:72:50:61:80:05:4c:72:1b:1e:3e:d9:34:87:
         59:0a:f2:69:03:5f:2e:75:09:bb:11:5f:d2:2b:07:92:00:b6:
         47:cc:de:08:34:ce:75:d6:66:39:b1:91:08:20:23:05:bf:27:
         15:30:d3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:23:00 2025 by rpki-client