This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/jy_rHIWFlMLbpAkC5nP9S9D9Dco.roa
File:                     jy_rHIWFlMLbpAkC5nP9S9D9Dco.roa (raw, json)
Hash identifier:          Irf19krmpCe/DxVOK4ehxOuwwYTqv78nSt7EKoSbfvM=
Subject key identifier:   8F:2F:EB:1C:85:85:94:C2:DB:A4:09:02:E6:73:FD:4B:D0:FD:0D:CA
Certificate issuer:       /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial:       019B79112597B3989ECFBAD672E262B47902
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/jy_rHIWFlMLbpAkC5nP9S9D9Dco.roa
Signing time:             Thu 01 Jan 2026 10:18:45 +0000
ROA not before:           Thu 01 Jan 2026 10:18:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     40092
IP address blocks:        194.146.104.0/24 maxlen: 24
                          194.146.116.0/24 maxlen: 24
                          194.146.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:11:25:97:b3:98:9e:cf:ba:d6:72:e2:62:b4:79:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
        Validity
            Not Before: Jan  1 10:18:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8f2feb1c858594c2dba40902e673fd4bd0fd0dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:43:b4:7c:c4:00:a4:d1:b3:ee:53:4c:15:f2:
                    2c:46:c4:4c:58:91:4e:6c:b5:a6:56:b4:86:18:af:
                    39:3e:87:05:65:db:15:89:3a:6e:b6:18:f1:3c:f6:
                    bd:24:42:55:e0:7f:61:91:05:0e:cb:65:9d:36:2f:
                    13:bc:75:0a:15:21:ed:f5:76:c2:29:3a:ad:3a:9b:
                    1c:b8:85:27:09:49:c9:62:cf:43:66:65:fa:53:13:
                    76:8b:a3:12:29:a7:08:4b:bd:54:06:67:a3:9d:be:
                    ce:5f:3d:ad:3e:85:fa:bd:31:4c:59:39:4c:66:33:
                    97:c5:15:02:91:37:59:3c:1c:1c:9a:cd:50:e9:0b:
                    c6:52:81:3f:d8:9c:d7:cb:b1:0b:1e:17:58:ed:8a:
                    99:d8:63:b1:57:9d:94:84:51:8e:59:4c:ed:61:33:
                    08:38:0d:56:e4:b9:93:9c:1b:ec:9c:0e:a1:1d:51:
                    d5:10:28:12:59:7a:d9:52:7f:1b:b7:69:bb:f1:fc:
                    0f:9b:3b:a3:ef:e3:5b:62:8f:04:a4:80:91:96:d2:
                    9c:22:f2:5a:27:ab:38:1b:43:2d:cb:82:78:ff:37:
                    06:a6:52:19:9c:62:8e:11:c2:27:dc:32:5f:be:52:
                    5b:74:52:d6:e9:bf:6f:f4:f3:b6:42:20:7a:6e:e0:
                    c9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2F:EB:1C:85:85:94:C2:DB:A4:09:02:E6:73:FD:4B:D0:FD:0D:CA
            X509v3 Authority Key Identifier:
                keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/jy_rHIWFlMLbpAkC5nP9S9D9Dco.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.146.104.0/24
                  194.146.116.0/24
                  194.146.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:78:c2:59:db:e0:b0:6a:18:a9:e4:ef:11:ce:6c:32:6d:f3:
         65:62:2c:01:a3:0b:27:4d:91:c1:2c:d6:df:25:49:0d:6f:19:
         6a:96:94:87:1a:3f:e9:1d:3d:c9:f4:8f:54:03:82:4e:36:30:
         69:66:c9:cc:d6:e6:8d:fa:e1:59:dd:30:52:dc:9c:24:1f:c0:
         df:20:a2:81:af:92:8b:b3:ed:ad:86:17:cf:27:42:b7:c4:61:
         54:07:d0:67:3c:27:b8:dd:24:95:13:04:06:79:d1:9c:2f:27:
         b5:ed:86:a7:c4:a8:28:11:07:a5:c5:95:92:82:64:ed:9b:50:
         8d:39:b6:c6:c3:d6:ca:b7:7f:c2:d9:d9:16:0e:b0:25:b8:25:
         60:8a:8d:19:8e:23:8f:61:c5:2e:ad:4e:98:c2:60:27:2e:62:
         a7:6e:ac:72:d8:a0:1f:56:5b:7f:18:94:97:bf:d2:78:19:0e:
         c9:3d:0d:07:0f:34:2b:f6:66:61:b5:08:57:ef:77:16:27:de:
         ce:1f:17:45:91:ef:40:7e:21:cc:bb:39:2c:47:e7:35:68:2f:
         74:8a:c1:c2:a9:9e:f9:36:05:96:2d:8f:14:23:df:f2:1a:37:
         1f:9f:e7:a6:71:fa:1f:be:50:32:8b:78:4b:17:96:41:10:0f:
         36:43:f0:3b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZt5ESWXs5iez7rWcuJitHkCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMTM5NDc2OGM5YTM5YTYxMTI2NzRkNzM3NTk3MmE2Njk2
YjQ2ODAwHhcNMjYwMTAxMTAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjJmZWIxYzg1ODU5NGMyZGJhNDA5MDJlNjczZmQ0YmQwZmQwZGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkO0fMQApNGz7lNMFfIsRsRMWJFO
bLWmVrSGGK85PocFZdsViTputhjxPPa9JEJV4H9hkQUOy2WdNi8TvHUKFSHt9XbC
KTqtOpscuIUnCUnJYs9DZmX6UxN2i6MSKacIS71UBmejnb7OXz2tPoX6vTFMWTlM
ZjOXxRUCkTdZPBwcms1Q6QvGUoE/2JzXy7ELHhdY7YqZ2GOxV52UhFGOWUztYTMI
OA1W5LmTnBvsnA6hHVHVECgSWXrZUn8bt2m78fwPmzuj7+NbYo8EpICRltKcIvJa
J6s4G0Mty4J4/zcGplIZnGKOEcIn3DJfvlJbdFLW6b9v9PO2QiB6buDJCQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFI8v6xyFhZTC26QJAuZz/UvQ/Q3KMB8GA1UdIwQY
MBaAFJwTlHaMmjmmESZ01zdZcqZpa0aAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zZTcyMTAtMDUyOC00NDU2LWI2OGUt
YTcxM2ExOTE1YzkwLzEvanlfckhJV0ZsTUxicEFrQzVuUDlTOUQ5RGNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zZTcyMTAtMDUyOC00NDU2LWI2OGUtYTcxM2ExOTE1Yzkw
LzEvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwpJoAwQA
wpJ0AwQAwpJ8MA0GCSqGSIb3DQEBCwUAA4IBAQAseMJZ2+Cwahip5O8RzmwybfNl
YiwBowsnTZHBLNbfJUkNbxlqlpSHGj/pHT3J9I9UA4JONjBpZsnM1uaN+uFZ3TBS
3JwkH8DfIKKBr5KLs+2thhfPJ0K3xGFUB9BnPCe43SSVEwQGedGcLye17YanxKgo
EQelxZWSgmTtm1CNObbGw9bKt3/C2dkWDrAluCVgio0ZjiOPYcUurU6YwmAnLmKn
bqxy2KAfVlt/GJSXv9J4GQ7JPQ0HDzQr9mZhtQhX73cWJ97OHxdFke9AfiHMuzks
R+c1aC90isHCqZ75NgWWLY8UI9/yGjcfn+emcfofvlAyi3hLF5ZBEA82Q/A7
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:14:18 2026 by rpki-client