This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/0Abp-bYUiWE_QxdZ2fNs8j59Nf4.roa
File:                     0Abp-bYUiWE_QxdZ2fNs8j59Nf4.roa (raw, json)
Hash identifier:          SrWvblZEWYAuXRKCnqyBmsmlPWM8xw8kb2qoOLFHdLM=
Subject key identifier:   D0:06:E9:F9:B6:14:89:61:3F:43:17:59:D9:F3:6C:F2:3E:7D:35:FE
Certificate issuer:       /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial:       019B78A260D88BAE79FE04C4B772E6F99F25
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/0Abp-bYUiWE_QxdZ2fNs8j59Nf4.roa
Signing time:             Thu 01 Jan 2026 08:17:45 +0000
ROA not before:           Thu 01 Jan 2026 08:17:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        5.144.155.0/24 maxlen: 24
                          78.143.252.0/24 maxlen: 24
                          78.143.253.0/24 maxlen: 24
                          79.135.102.0/23 maxlen: 24
                          194.33.150.0/24 maxlen: 24
                          194.33.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:60:d8:8b:ae:79:fe:04:c4:b7:72:e6:f9:9f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
        Validity
            Not Before: Jan  1 08:17:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d006e9f9b61489613f431759d9f36cf23e7d35fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d2:2a:93:6c:52:a8:30:c1:8c:a8:7d:85:a5:
                    bf:d4:ee:73:94:48:75:2f:e2:4f:a8:b3:fb:bb:43:
                    15:72:97:78:98:52:ff:ed:d9:47:58:76:c5:b7:00:
                    73:9b:9e:aa:1b:08:dc:6f:7b:95:e1:cc:2c:9e:50:
                    f7:26:94:9d:8a:39:31:b3:70:fc:3c:e2:c5:48:3a:
                    71:4a:54:0a:d7:a0:39:7f:9b:a7:88:9f:6f:be:73:
                    a5:ec:9a:7c:11:e4:0e:ad:3b:d5:5a:35:e8:0e:43:
                    ee:27:25:59:aa:57:fd:2f:4f:cd:ff:3d:07:23:95:
                    81:9a:11:ac:f2:e4:2d:08:bd:61:5f:5c:a8:f9:f4:
                    e5:94:98:e7:67:b9:d6:2a:65:c4:57:b2:fe:b1:69:
                    ac:a2:de:cb:37:cd:45:0f:9e:97:94:d1:57:fc:fa:
                    7c:47:d0:66:21:4e:f8:84:58:ba:12:ca:9e:59:d6:
                    74:c9:11:3f:5d:4a:71:f4:24:64:65:f8:57:7a:40:
                    f9:eb:a5:76:d8:ad:dd:e9:94:4e:99:68:a7:3a:8b:
                    f4:8d:74:1c:db:81:68:85:f7:6f:27:76:96:aa:7f:
                    ba:9b:a4:ff:0c:19:14:2b:9e:ed:b9:25:a4:57:72:
                    ce:97:22:87:48:ac:bd:fd:d1:f7:7c:2f:d3:bc:e5:
                    e6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:06:E9:F9:B6:14:89:61:3F:43:17:59:D9:F3:6C:F2:3E:7D:35:FE
            X509v3 Authority Key Identifier:
                keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/0Abp-bYUiWE_QxdZ2fNs8j59Nf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.144.155.0/24
                  78.143.252.0/23
                  79.135.102.0/23
                  194.33.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:1f:56:80:7f:ec:30:0a:29:eb:50:29:e9:1a:78:c4:f3:da:
         3d:d2:c4:00:37:3b:d5:35:a1:d3:00:e2:f5:c7:2c:e4:a4:1a:
         56:46:33:02:bd:f5:ad:e0:14:8e:ce:2d:5f:60:1b:05:66:48:
         1f:d5:ec:7a:d2:11:3d:a0:b5:9a:b0:d6:88:ef:a1:41:8d:e5:
         86:e6:c8:61:69:b5:97:af:fb:5f:f4:67:bc:09:a1:9e:13:08:
         80:0e:45:f4:f5:5a:7a:44:27:d6:a7:6a:dc:30:6f:4a:d3:91:
         6c:0a:a0:a9:f8:ad:cd:11:d7:9a:83:04:a5:1f:78:53:5d:ed:
         49:fe:ac:b1:f1:5b:8e:a4:0d:3f:2b:1b:40:61:52:5f:88:cd:
         0d:31:37:60:7f:7e:10:0e:1e:9a:32:60:67:93:aa:af:91:90:
         36:a0:47:84:b2:fc:20:52:6c:7e:41:a1:b4:bf:35:b9:19:1b:
         3f:d8:b9:9b:a0:02:f4:87:d4:4a:f6:a7:45:42:88:0a:5f:a7:
         96:e4:11:8e:a7:47:93:d9:3c:1e:95:81:a0:31:2a:2b:fe:4e:
         1b:f8:07:97:59:8e:77:df:a1:3c:c7:37:be:86:f9:09:7b:a0:
         92:65:27:68:41:11:fa:c9:c8:c5:97:db:a9:55:ea:47:f8:26:
         d7:fb:bb:c8
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZt4omDYi655/gTEt3Lm+Z8lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMmEwZmEyMDM4MzMzMmEzZjQxNGYwNTQ3NTNhMGI2MGIy
NWJhMTAwHhcNMjYwMTAxMDgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDA2ZTlmOWI2MTQ4OTYxM2Y0MzE3NTlkOWYzNmNmMjNlN2QzNWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdIqk2xSqDDBjKh9haW/1O5zlEh1
L+JPqLP7u0MVcpd4mFL/7dlHWHbFtwBzm56qGwjcb3uV4cwsnlD3JpSdijkxs3D8
POLFSDpxSlQK16A5f5uniJ9vvnOl7Jp8EeQOrTvVWjXoDkPuJyVZqlf9L0/N/z0H
I5WBmhGs8uQtCL1hX1yo+fTllJjnZ7nWKmXEV7L+sWmsot7LN81FD56XlNFX/Pp8
R9BmIU74hFi6EsqeWdZ0yRE/XUpx9CRkZfhXekD566V22K3d6ZROmWinOov0jXQc
24FohfdvJ3aWqn+6m6T/DBkUK57tuSWkV3LOlyKHSKy9/dH3fC/TvOXmfQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNAG6fm2FIlhP0MXWdnzbPI+fTX+MB8GA1UdIwQY
MBaAFC8qD6IDgzMqP0FPBUdToLYLJboQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMt
NTVhOTMwZmMwYzcxLzEvMEFicC1iWVVpV0VfUXhkWjJmTnM4ajU5TmY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMtNTVhOTMwZmMwYzcx
LzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABZCbAwQB
To/8AwQBT4dmAwQBwiGWMA0GCSqGSIb3DQEBCwUAA4IBAQA9H1aAf+wwCinrUCnp
GnjE89o90sQANzvVNaHTAOL1xyzkpBpWRjMCvfWt4BSOzi1fYBsFZkgf1ex60hE9
oLWasNaI76FBjeWG5shhabWXr/tf9Ge8CaGeEwiADkX09Vp6RCfWp2rcMG9K05Fs
CqCp+K3NEdeagwSlH3hTXe1J/qyx8VuOpA0/KxtAYVJfiM0NMTdgf34QDh6aMmBn
k6qvkZA2oEeEsvwgUmx+QaG0vzW5GRs/2LmboAL0h9RK9qdFQogKX6eW5BGOp0eT
2TwelYGgMSor/k4b+AeXWY5336E8xze+hvkJe6CSZSdoQRH6ycjFl9upVepH+CbX
+7vI
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:01:24 2026 by rpki-client