This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/jp-YYsbIVwlBZFGLqCtmvxhcq8Q.roa
File:                     jp-YYsbIVwlBZFGLqCtmvxhcq8Q.roa (raw, json)
Hash identifier:          ASLwprhv9CqnRanTW6K8l0OBhjWckJJYB7wKNCuJgis=
Subject key identifier:   8E:9F:98:62:C6:C8:57:09:41:64:51:8B:A8:2B:66:BF:18:5C:AB:C4
Certificate issuer:       /CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50
Certificate serial:       019B7CEDD38FAE851FE66661EBB86DA35764
Authority key identifier: 67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/jp-YYsbIVwlBZFGLqCtmvxhcq8Q.roa
Signing time:             Fri 02 Jan 2026 04:18:39 +0000
ROA not before:           Fri 02 Jan 2026 04:18:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35442
IP address blocks:        91.195.96.0/23 maxlen: 23
                          193.239.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:d3:8f:ae:85:1f:e6:66:61:eb:b8:6d:a3:57:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50
        Validity
            Not Before: Jan  2 04:18:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8e9f9862c6c857094164518ba82b66bf185cabc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e0:76:8f:ea:97:b9:5f:3d:dc:0c:87:14:c6:
                    ca:58:86:7d:2b:65:62:f4:31:1a:ca:bc:e7:71:8a:
                    ec:29:69:aa:27:22:dd:e5:d3:0a:4b:3f:4c:c2:cc:
                    1c:fe:13:a7:6f:e5:53:8c:d7:ce:9a:eb:17:eb:93:
                    08:32:68:5d:7b:1d:2b:e5:6a:63:67:81:78:d9:20:
                    eb:3d:07:9f:6c:8d:a0:55:50:be:51:c5:45:ec:00:
                    71:9e:9f:50:a1:a3:53:a2:5b:48:c5:18:64:1d:ab:
                    b9:43:71:30:c8:75:9c:7f:5f:a3:ea:d2:6b:17:68:
                    e0:80:14:fe:44:c6:44:6d:51:fa:8a:6a:c9:e2:39:
                    eb:e7:16:4a:0c:b6:af:41:eb:87:44:59:d7:4f:c3:
                    d2:7d:69:0f:de:69:1b:bd:26:ba:61:8e:6d:ad:13:
                    65:ad:b5:1b:d4:99:9f:b7:d2:62:4f:a6:81:da:57:
                    8b:26:fd:e5:a1:58:67:b2:a2:86:e0:ac:07:ef:8e:
                    cf:c9:a1:ec:e5:60:91:a0:25:85:34:d5:79:03:e6:
                    3e:52:b0:ce:e6:18:60:7b:e3:bf:84:c0:c3:fc:f2:
                    be:3a:1b:c4:82:0d:e5:0a:2a:a0:79:18:55:e0:f9:
                    7f:e1:f1:d4:43:56:0e:da:08:1d:ac:fa:b4:50:13:
                    22:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9F:98:62:C6:C8:57:09:41:64:51:8B:A8:2B:66:BF:18:5C:AB:C4
            X509v3 Authority Key Identifier:
                keyid:67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/jp-YYsbIVwlBZFGLqCtmvxhcq8Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.195.96.0/23
                  193.239.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:fb:69:0b:54:22:8d:8b:2a:e1:80:3b:22:cd:f1:91:c6:26:
         48:9b:ca:01:16:61:a6:24:f0:1c:ce:fb:57:fa:c6:43:9b:3a:
         88:38:fb:88:5c:f2:c1:7b:00:59:de:2d:5b:e7:ae:32:29:63:
         ce:cd:68:4e:ea:be:2a:ae:1e:26:35:5a:81:0e:9a:f3:01:c8:
         38:f3:d9:bc:25:bb:ad:43:8b:4f:2e:90:fd:9b:49:09:3b:d1:
         0c:eb:3b:8f:e0:01:40:57:72:88:db:41:4d:ff:03:aa:bf:9c:
         78:21:81:e9:76:5c:96:fa:11:da:90:79:a8:eb:7d:9d:15:3f:
         73:82:53:36:73:bf:a6:70:37:c7:92:49:8f:bf:e4:70:ea:b1:
         5b:9d:43:c5:bd:15:96:73:0f:d9:0f:39:e3:6b:39:cb:26:c0:
         30:8a:a9:8c:da:10:d0:97:b9:4e:bc:71:88:02:c0:d8:58:d9:
         33:d2:3a:db:ec:3a:72:9e:68:55:d2:b4:fb:13:f0:ff:c6:f2:
         8c:6a:21:30:65:0b:e5:9e:b8:ef:31:9d:d9:ff:c9:f3:fa:80:
         ec:a0:a7:6b:75:1b:15:d5:f1:18:36:6b:e8:c1:30:8f:2b:65:
         d5:b2:22:fa:d2:dc:6b:51:b7:7f:76:df:53:41:2c:9e:69:05:
         95:d2:3f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:38:52 2026 by rpki-client