This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/JYSE_79beIVH7AyGREwVYhRCyTY.roa
File:                     JYSE_79beIVH7AyGREwVYhRCyTY.roa (raw, json)
Hash identifier:          l3baob39qaOOP1HD2nUjVfG8gYEyw7b1MgZubnhYeyE=
Subject key identifier:   25:84:84:FF:BF:5B:78:85:47:EC:0C:86:44:4C:15:62:14:42:C9:36
Certificate issuer:       /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial:       019B7C80519B31CEFF2D2795DF25E85D2A8D
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/JYSE_79beIVH7AyGREwVYhRCyTY.roa
Signing time:             Fri 02 Jan 2026 02:19:02 +0000
ROA not before:           Fri 02 Jan 2026 02:19:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212126
IP address blocks:        91.231.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:51:9b:31:ce:ff:2d:27:95:df:25:e8:5d:2a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
        Validity
            Not Before: Jan  2 02:19:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=258484ffbf5b788547ec0c86444c15621442c936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1f:2d:d8:07:26:d1:ab:54:54:84:b1:37:63:
                    27:94:5f:0e:6e:ce:87:bf:f0:42:e0:a3:ee:67:10:
                    bb:51:2a:84:52:49:ff:6f:cd:58:e9:7d:99:f1:2c:
                    18:41:6d:0c:37:9a:7c:9b:ae:bb:09:3f:08:c6:65:
                    62:50:84:5d:74:eb:4a:29:69:fa:ae:c4:36:57:d2:
                    12:c6:91:6c:f8:29:b5:c5:73:cf:11:c2:ed:50:aa:
                    bb:60:bc:ba:4a:9a:da:5d:90:31:99:d8:56:a9:6c:
                    35:ee:18:4e:d9:b8:1f:f5:18:1b:69:31:e0:6b:eb:
                    b2:6f:2b:e5:1b:aa:d8:5e:6d:88:7d:d4:7f:15:85:
                    b8:c3:51:3a:0a:6a:cc:4f:90:e5:d1:e6:d3:7e:d5:
                    a7:b5:64:40:f0:6f:6f:fb:2a:60:87:a9:a1:a2:57:
                    09:d1:58:71:6d:c4:ec:97:9b:ad:a6:09:26:4d:ac:
                    7d:d2:28:73:75:60:b6:34:cc:f4:9e:98:3d:9f:5c:
                    d4:9a:a1:a2:22:bc:58:8c:8b:c1:5d:7a:73:fe:df:
                    dc:f7:f2:be:e7:c5:8d:55:0c:46:7d:9c:84:36:3f:
                    e4:70:76:d8:49:23:21:97:15:4c:d3:5a:31:1a:87:
                    35:7b:a9:76:28:59:aa:7b:92:f3:56:d9:b8:77:13:
                    09:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:84:84:FF:BF:5B:78:85:47:EC:0C:86:44:4C:15:62:14:42:C9:36
            X509v3 Authority Key Identifier:
                keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/JYSE_79beIVH7AyGREwVYhRCyTY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.231.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:86:5a:3d:6a:8e:90:07:0a:fc:e0:4e:1f:97:4d:2f:fb:9b:
         bf:7c:2e:da:4d:b5:a6:10:9d:9f:8a:f5:ae:5d:93:5c:01:e0:
         5a:3c:e1:5b:40:a2:a3:91:dc:48:d2:5d:2e:24:0d:fc:42:95:
         40:95:c1:8f:ad:0e:2b:4a:5b:4e:bb:1d:ea:d2:73:99:05:fd:
         be:d6:37:e1:a5:d1:fe:41:cf:eb:8f:83:58:d4:7f:60:72:bf:
         b8:a6:e3:78:b8:c9:78:ac:0c:0a:fa:5e:09:12:98:26:10:d1:
         ec:bf:b2:85:9b:4d:48:7b:fe:f2:a8:79:a2:94:26:94:17:24:
         e0:f7:0d:df:77:40:e6:ab:8e:f3:fa:ef:4f:19:2e:6a:60:e6:
         03:10:7c:6a:58:41:ec:63:c7:8a:5e:86:68:07:21:a9:b2:58:
         32:da:db:90:58:dc:06:40:24:b4:46:4a:94:83:84:ca:f1:c2:
         78:ae:f5:31:26:2a:7d:db:d8:e0:68:af:96:27:48:3a:2e:2b:
         eb:b4:3f:0a:73:e6:8f:4c:05:eb:44:35:a4:4d:2d:07:00:e8:
         27:0e:aa:1f:8e:bc:98:0a:50:3a:50:f2:41:18:ce:9e:03:fa:
         ea:73:37:ad:3c:b1:3f:dc:c4:38:03:e7:06:b3:39:80:6b:18:
         f5:7e:4e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:44:45 2026 by rpki-client