This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/Oya_7CTNloqoLGAwE4lej4v0gVU.roa
File:                     Oya_7CTNloqoLGAwE4lej4v0gVU.roa (raw, json)
Hash identifier:          pi6Tio3aUQA0JE16nMLeotjfbha9a+YODpOnjWqpmKM=
Subject key identifier:   3B:26:BF:EC:24:CD:96:8A:A8:2C:60:30:13:89:5E:8F:8B:F4:81:55
Certificate issuer:       /CN=485f76274c805d25b115a3adba1d2ea154deead7
Certificate serial:       019B783469589096FB32AC945C8A4A586596
Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/Oya_7CTNloqoLGAwE4lej4v0gVU.roa
Signing time:             Thu 01 Jan 2026 06:17:39 +0000
ROA not before:           Thu 01 Jan 2026 06:17:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206728
IP address blocks:        45.141.84.0/24 maxlen: 24
                          45.141.85.0/24 maxlen: 24
                          45.141.86.0/24 maxlen: 24
                          45.141.87.0/24 maxlen: 24
                          91.220.163.0/24 maxlen: 24
                          194.26.25.0/24 maxlen: 24
                          194.26.29.0/24 maxlen: 24
                          194.26.69.0/24 maxlen: 24
                          2a0b:7ec0::/29 maxlen: 48
                          2a0b:7ec0:1320::/48 maxlen: 48
                          2a0b:7ec0:1321::/48 maxlen: 48
                          2a0b:7ec0:7701::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:69:58:90:96:fb:32:ac:94:5c:8a:4a:58:65:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7
        Validity
            Not Before: Jan  1 06:17:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3b26bfec24cd968aa82c603013895e8f8bf48155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:52:af:8d:b6:17:64:63:0a:1f:9e:e2:cb:51:
                    a7:60:a7:c2:a9:57:88:cc:23:90:c8:93:5e:6e:c0:
                    02:93:f8:a9:d7:ca:6b:43:31:23:87:35:2b:01:3a:
                    11:78:3b:dd:a4:71:fe:ea:b9:c0:c0:b9:5b:e0:3b:
                    48:a8:de:9b:70:25:09:70:df:ca:df:4c:79:87:e9:
                    4c:1c:7d:bd:69:8e:49:11:f7:41:8d:49:30:92:99:
                    a2:b9:1d:05:a8:91:69:da:ee:82:e0:20:47:1c:2b:
                    70:57:8d:03:b3:48:a3:de:0f:e2:24:fe:92:cb:1a:
                    9c:7a:f6:28:9d:b2:a0:42:67:f3:c7:2e:5b:b5:0f:
                    ad:df:75:86:e7:27:cc:3e:fb:cd:09:77:aa:97:5f:
                    7e:6d:30:2b:47:ed:a1:73:ad:5c:08:a1:7a:c6:ca:
                    95:3e:f6:44:29:2f:9d:a0:58:bd:c1:bb:58:f3:84:
                    06:e5:86:37:46:b5:e9:74:5f:a4:12:58:ca:99:ef:
                    78:b3:84:f1:55:0e:69:d6:37:43:b0:73:dc:41:ba:
                    4f:8a:98:81:38:56:05:37:02:2a:1e:f3:e8:94:52:
                    b7:0c:5a:d6:8b:3f:20:e8:66:d1:76:7b:4d:7d:5d:
                    9d:c5:9c:0e:19:ca:a2:5b:37:49:a7:ab:f8:7b:8c:
                    2c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:26:BF:EC:24:CD:96:8A:A8:2C:60:30:13:89:5E:8F:8B:F4:81:55
            X509v3 Authority Key Identifier:
                keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/Oya_7CTNloqoLGAwE4lej4v0gVU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.84.0/22
                  91.220.163.0/24
                  194.26.25.0/24
                  194.26.29.0/24
                  194.26.69.0/24
                IPv6:
                  2a0b:7ec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         ce:64:2b:f9:4c:e8:20:6e:41:7e:ad:de:ba:59:e7:67:48:fa:
         0d:e4:8f:d0:87:fa:e1:f0:9c:21:36:e4:50:ae:d7:e2:99:72:
         e7:06:7e:0d:46:11:37:33:57:c6:45:9a:69:c0:23:9f:90:46:
         c0:d7:64:8d:2b:16:53:69:66:d1:69:05:86:94:bd:e2:7f:f8:
         ac:6c:1d:11:a6:01:1d:8f:be:a3:8f:2f:67:23:f5:11:6a:8a:
         a7:fa:ab:94:24:0f:58:65:b5:59:b6:b2:8e:19:61:b1:3d:55:
         af:96:89:80:f8:42:20:f3:19:43:48:5f:4c:0c:94:9c:30:95:
         d8:cf:c2:9c:73:f6:8d:cd:5c:f8:c1:79:97:b2:a5:2a:42:78:
         c6:05:b0:7d:f2:c9:eb:76:7b:a4:90:82:83:31:1a:e3:04:7e:
         9d:12:99:aa:16:5d:41:98:c1:2e:8a:4f:19:dd:dc:47:7c:e6:
         ce:85:3f:d8:a6:57:a2:b2:cb:45:43:fd:08:3d:d0:e6:2f:6b:
         19:ce:69:1c:09:7a:af:c8:ef:d0:e6:72:e3:57:1c:e0:ca:71:
         f6:56:ad:46:ae:33:54:97:d6:86:34:5b:39:74:ed:9a:68:8f:
         ac:3c:6b:cd:31:e6:d9:fa:d5:01:12:e4:39:52:fc:f7:d4:be:
         ca:e1:c1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:37:11 2026 by rpki-client