This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/OLmArH5IwWhE4X1-1oyWlt70SoU.roa
File:                     OLmArH5IwWhE4X1-1oyWlt70SoU.roa (raw, json)
Hash identifier:          qoAN1qHyDfHOZo1EmYKxtK2xB81mzjXDuLB7f175zdw=
Subject key identifier:   38:B9:80:AC:7E:48:C1:68:44:E1:7D:7E:D6:8C:96:96:DE:F4:4A:85
Certificate issuer:       /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial:       019B78A2634AC3FFDC2DAC440454C92C8776
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/OLmArH5IwWhE4X1-1oyWlt70SoU.roa
Signing time:             Thu 01 Jan 2026 08:17:46 +0000
ROA not before:           Thu 01 Jan 2026 08:17:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31742
IP address blocks:        91.208.114.0/24 maxlen: 24
                          91.241.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:63:4a:c3:ff:dc:2d:ac:44:04:54:c9:2c:87:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
        Validity
            Not Before: Jan  1 08:17:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=38b980ac7e48c16844e17d7ed68c9696def44a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bf:2f:e3:bb:40:be:dd:96:60:cf:8f:e0:df:
                    6a:e1:04:16:f6:69:c9:f5:8f:57:23:27:05:45:13:
                    12:7e:ba:bc:48:83:e1:4e:e9:31:f1:b9:9b:15:9d:
                    86:c0:1d:a3:21:74:a4:be:03:ab:ba:1b:30:4f:59:
                    03:3e:04:c8:7a:8d:fa:99:89:32:74:44:6f:bb:31:
                    d7:7f:95:6b:8e:00:7a:17:7d:ce:b8:b5:bb:83:6a:
                    02:48:1e:46:80:fb:c1:f1:31:65:c2:1c:34:8a:56:
                    d8:4b:9c:2d:e5:cf:93:de:da:ac:d1:ad:62:88:de:
                    70:7a:af:96:dc:cb:c6:54:d0:2a:96:18:cf:2b:69:
                    3f:b2:c2:8a:b9:cd:3a:c5:d5:32:2d:91:e4:03:02:
                    bd:dd:b8:43:aa:8b:c6:ce:b8:5f:9f:fe:a3:43:f7:
                    77:17:0e:c1:12:d7:a2:55:16:9d:51:8e:e4:e4:6a:
                    52:5f:5d:81:33:be:36:a9:0e:b8:f0:b0:76:75:0c:
                    ce:2e:30:0d:36:65:e9:db:7b:98:7f:f9:fe:d4:12:
                    bf:59:ea:68:cb:8d:bd:36:c8:f4:56:41:2b:df:67:
                    9e:53:11:2e:35:54:29:32:97:9b:87:f1:29:f7:c3:
                    02:68:28:22:b8:68:7d:e2:09:c6:04:c7:38:13:e2:
                    0a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B9:80:AC:7E:48:C1:68:44:E1:7D:7E:D6:8C:96:96:DE:F4:4A:85
            X509v3 Authority Key Identifier:
                keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/OLmArH5IwWhE4X1-1oyWlt70SoU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.208.114.0/24
                  91.241.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:fb:df:1c:aa:3c:ff:f3:89:eb:76:7a:e9:57:08:ae:fb:05:
         02:62:82:0c:6e:37:02:50:b5:bc:61:00:ad:98:be:fa:09:d3:
         d2:ea:3e:f3:3f:dd:b1:cb:7e:0b:7c:13:37:75:aa:5c:6d:29:
         4a:5c:f5:84:d3:2c:b7:69:2a:25:cb:48:7b:ce:c0:75:b7:8b:
         35:73:f9:0d:48:58:d7:cf:88:48:23:c2:58:b3:54:ef:49:11:
         a7:fb:7b:c9:35:c5:8f:8b:d9:f0:45:88:40:ca:ba:e2:87:5f:
         ce:92:aa:0d:c1:23:e5:10:d0:5d:c1:f7:bd:b4:45:4d:f5:13:
         7c:04:37:46:e1:87:c1:f5:2c:55:02:33:78:98:d5:3f:79:d3:
         c9:12:fa:c6:da:20:fc:fa:45:1c:11:5e:f7:b6:5b:16:30:a8:
         d5:57:d8:13:ff:bb:7d:f2:f1:86:87:9c:e7:81:ad:95:8b:9d:
         cb:29:a5:26:15:f9:c8:ce:fa:04:31:84:1d:09:91:e8:56:ea:
         59:92:25:a7:50:48:1c:d6:25:05:51:f4:02:51:13:8c:e6:d7:
         d6:f5:fe:e8:f1:4d:ac:6e:3f:e2:3b:cc:73:52:8d:86:97:b5:
         59:2d:ab:6a:a3:8b:eb:0f:d6:d5:97:04:ca:8a:05:a8:a5:2c:
         82:fc:be:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:07:49 2026 by rpki-client