This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/j24Xn1OVDzmRc0YHejjOlzAmgRk.roa
File:                     j24Xn1OVDzmRc0YHejjOlzAmgRk.roa (raw, json)
Hash identifier:          /5EdM1LEZ2tK4zjsCtxS9n3mfLKzazy5AKKxuUfX/Lk=
Subject key identifier:   8F:6E:17:9F:53:95:0F:39:91:73:46:07:7A:38:CE:97:30:26:81:19
Certificate issuer:       /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial:       019B78A2643A5205AA1DC5DA86659E8A5887
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/j24Xn1OVDzmRc0YHejjOlzAmgRk.roa
Signing time:             Thu 01 Jan 2026 08:17:46 +0000
ROA not before:           Thu 01 Jan 2026 08:17:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42831
IP address blocks:        91.224.108.0/24 maxlen: 24
                          194.33.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 17:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:64:3a:52:05:aa:1d:c5:da:86:65:9e:8a:58:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
        Validity
            Not Before: Jan  1 08:17:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8f6e179f53950f39917346077a38ce9730268119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:50:89:90:24:95:01:be:0a:53:25:1f:86:b0:
                    e0:9e:99:14:a6:10:72:e4:1c:ce:2a:06:d4:61:bd:
                    06:c2:f6:87:d6:4c:0c:88:33:2f:43:1d:e9:ab:76:
                    64:0d:24:29:52:05:b1:22:dd:e3:e4:e4:b7:da:e7:
                    d0:fa:5a:dc:1d:17:e6:05:92:16:a0:90:f0:d0:aa:
                    09:ec:c8:66:22:81:5f:bc:38:83:e9:b0:42:cd:70:
                    86:f0:31:12:8a:73:66:71:95:1b:eb:5e:62:83:1a:
                    64:a8:dd:34:21:8b:1b:32:df:9e:00:c8:c4:bd:92:
                    69:a7:66:ba:04:07:b2:45:0b:9b:e7:88:d5:97:18:
                    f6:f7:b5:6f:3e:d0:91:f8:56:bf:c5:4e:ee:14:e2:
                    0c:43:d5:05:d4:d6:80:7f:75:fa:7a:f7:56:26:7e:
                    d1:67:54:1e:2a:2a:63:0f:62:0b:8e:56:fa:39:3f:
                    f3:19:a4:02:2c:f4:2c:4d:d3:7a:9a:3c:f9:9c:c8:
                    82:d7:ec:69:60:a9:32:94:14:fa:7c:eb:41:f9:27:
                    be:1e:c3:b3:bf:fc:60:1c:87:e5:d3:97:48:dc:56:
                    55:0a:ce:dd:6b:f7:71:8b:c7:2e:00:41:af:03:ba:
                    48:3d:7a:83:95:89:ed:d7:f4:75:f5:a3:93:01:11:
                    5e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6E:17:9F:53:95:0F:39:91:73:46:07:7A:38:CE:97:30:26:81:19
            X509v3 Authority Key Identifier:
                keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/j24Xn1OVDzmRc0YHejjOlzAmgRk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.224.108.0/24
                  194.33.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:ea:72:89:9b:b6:09:8f:5a:8f:c5:b6:f5:8b:ad:f8:ec:9f:
         1f:ed:dc:13:b2:0c:da:84:3e:3c:56:81:a2:99:da:7a:82:e6:
         d4:22:50:b4:74:3b:ab:b3:22:60:dd:a0:38:7e:bf:98:6e:03:
         86:43:4c:80:32:f2:38:e1:47:25:a2:72:ce:cf:eb:c5:ea:f5:
         35:6e:9c:d5:bc:87:27:14:13:94:82:df:39:9c:1b:dd:4a:9f:
         95:55:37:56:68:8e:ec:de:dd:70:69:0f:41:96:1f:9c:4b:1f:
         09:92:ad:06:3b:dc:a9:f4:c5:e9:c6:c2:7a:71:10:f5:87:eb:
         97:5e:f9:0b:a9:6c:a2:9a:f4:5f:8f:9f:61:22:e8:fd:43:b7:
         42:9f:60:b2:90:bc:63:07:7f:09:70:e1:8a:9f:69:0c:57:36:
         b9:ee:00:9a:e2:b8:a1:70:12:15:54:49:ae:12:c8:dc:0c:3a:
         fa:d9:f8:6d:00:33:73:b4:ce:38:ef:0a:28:a1:26:aa:1f:49:
         7d:93:d4:8a:c5:bf:1e:ea:27:68:31:c9:02:03:b4:5c:ce:c2:
         5c:7c:9a:5d:7f:fe:03:49:fb:a4:26:d7:7d:b6:fc:33:d6:1a:
         8e:ce:8e:ae:db:a6:83:ed:9a:fa:fe:c9:bf:04:b2:a0:dc:72:
         14:c5:e4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:23:29 2026 by rpki-client