This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/82H1zOCTQDypvCqoPuf64HIGCNs.roa
File:                     82H1zOCTQDypvCqoPuf64HIGCNs.roa (raw, json)
Hash identifier:          OjMqE4nBwVgcGVmO5TIDFN6XpFP5Ht4TkG9+jF5A/Lc=
Subject key identifier:   F3:61:F5:CC:E0:93:40:3C:A9:BC:2A:A8:3E:E7:FA:E0:72:06:08:DB
Certificate issuer:       /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial:       019B7F83A75C0FC877DA1FD7A28B8DAEF55B
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/82H1zOCTQDypvCqoPuf64HIGCNs.roa
Signing time:             Fri 02 Jan 2026 16:21:33 +0000
ROA not before:           Fri 02 Jan 2026 16:21:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     6830
IP address blocks:        83.229.113.0/24 maxlen: 24
                          185.90.220.0/24 maxlen: 24
                          185.90.221.0/24 maxlen: 24
                          185.90.222.0/24 maxlen: 24
                          185.90.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:a7:5c:0f:c8:77:da:1f:d7:a2:8b:8d:ae:f5:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
        Validity
            Not Before: Jan  2 16:21:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f361f5cce093403ca9bc2aa83ee7fae0720608db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:b9:02:65:fe:e4:19:dc:ac:00:5d:bd:9b:
                    fe:f1:41:89:19:66:de:0a:d4:30:6f:f8:32:2a:00:
                    80:28:66:54:19:f6:97:c6:cc:aa:73:35:cb:ac:7b:
                    c3:94:50:e0:ec:ae:c5:8b:39:1f:3e:49:88:f0:20:
                    b5:40:fd:06:4a:c6:e3:a3:f4:f2:9a:51:ca:61:c7:
                    e7:46:31:b3:f1:b2:bc:61:64:45:d6:5e:9c:ab:73:
                    86:22:6f:46:a1:fd:5f:57:33:b2:97:6d:66:33:2b:
                    c4:a6:e8:e4:f0:32:23:2a:de:7c:4a:07:ca:71:1b:
                    45:db:be:89:9d:dd:f4:d4:6c:39:3f:b3:b8:9e:e0:
                    b7:8d:9c:a3:14:ec:c8:1b:7b:68:b4:67:2d:db:2d:
                    fc:42:4a:05:90:55:8f:54:61:06:e2:02:e4:c2:5d:
                    f4:28:39:30:20:a3:c2:ac:98:3c:a0:63:a5:dd:02:
                    8d:19:fa:c2:cf:26:70:1b:55:a8:7a:19:96:fa:e3:
                    fa:44:01:cd:b8:14:c4:aa:61:27:12:26:8a:0e:a9:
                    80:a3:96:9e:b0:9e:be:9d:9c:e4:1e:f3:09:1d:4a:
                    34:8c:93:59:3a:fd:77:5c:9a:a0:a9:ae:29:5a:9a:
                    ef:cf:d2:c9:62:66:17:ea:96:cd:88:72:62:1d:b8:
                    4b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:61:F5:CC:E0:93:40:3C:A9:BC:2A:A8:3E:E7:FA:E0:72:06:08:DB
            X509v3 Authority Key Identifier:
                keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/82H1zOCTQDypvCqoPuf64HIGCNs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.229.113.0/24
                  185.90.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:bd:82:9f:8f:c3:72:0e:eb:3a:0c:9c:15:97:df:95:c1:44:
         60:58:5f:75:9c:08:57:ae:7f:0c:fc:b1:08:9f:f3:99:0c:74:
         96:98:16:f5:2b:21:6d:9d:5b:ef:56:85:8f:ed:09:f0:92:d3:
         79:83:ec:c0:0c:dd:be:d2:81:88:15:e1:33:c9:7e:b3:5d:48:
         fe:d5:e3:dc:bd:13:3c:32:9c:a2:e7:9e:73:3c:e2:95:36:a6:
         d2:fb:b8:3d:d3:5f:6f:6f:aa:76:a2:a9:b7:21:12:31:c9:02:
         a1:04:bd:41:cc:d3:b4:62:ec:8d:9e:6a:fa:0f:e8:ba:c0:9a:
         47:1f:bd:66:56:05:71:96:d3:ff:2c:7f:1c:ed:81:d3:e8:94:
         87:eb:b6:0e:63:02:25:8d:11:22:d3:78:ad:21:10:2b:de:de:
         92:96:08:46:b6:0f:96:e1:8e:28:c8:cd:ef:1a:c0:4d:aa:6f:
         58:cb:91:fb:3f:57:96:d8:84:65:ce:e7:ea:f5:0c:c2:2c:0c:
         82:ff:ae:10:03:d7:8c:ae:d8:b2:c8:09:2e:a4:72:f6:5f:37:
         12:fc:f2:aa:8a:e9:4f:32:61:ec:bc:56:7d:5a:ce:23:ba:8f:
         24:0f:5a:e0:4e:2f:6c:7c:78:f7:01:22:ce:07:1e:06:84:8e:
         47:95:35:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 04:59:25 2026 by rpki-client