This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/arUx83U6Rs8RCtwXktznkMkqaeo.roa
File:                     arUx83U6Rs8RCtwXktznkMkqaeo.roa (raw, json)
Hash identifier:          /Mq8aZt5VBCKdcfiOWBzO8I3YwDfcvujikTvBE5ca1M=
Subject key identifier:   6A:B5:31:F3:75:3A:46:CF:11:0A:DC:17:92:DC:E7:90:C9:2A:69:EA
Certificate issuer:       /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial:       019B0CBAD580295A9ADF053535F3571A3193
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/arUx83U6Rs8RCtwXktznkMkqaeo.roa
Signing time:             Thu 11 Dec 2025 09:25:29 +0000
ROA not before:           Thu 11 Dec 2025 09:25:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8508
IP address blocks:        83.230.64.0/20 maxlen: 20
                          83.230.64.0/21 maxlen: 21
                          83.230.96.0/19 maxlen: 19
                          83.230.99.0/24 maxlen: 24
                          83.230.110.0/24 maxlen: 24
                          83.230.118.0/23 maxlen: 23
                          83.230.123.0/24 maxlen: 24
                          157.158.0.0/16 maxlen: 16
                          185.126.188.0/22 maxlen: 22
                          212.106.176.0/20 maxlen: 20
                          212.106.176.0/24 maxlen: 24
                          212.106.177.0/24 maxlen: 24
                          212.106.183.0/24 maxlen: 24
                          212.106.184.0/22 maxlen: 22
                          213.227.80.0/20 maxlen: 20
                          213.227.88.0/21 maxlen: 21
                          213.227.96.0/19 maxlen: 19
                          2a01:1d8::/30 maxlen: 30
                          2a01:1dc::/32 maxlen: 32
                          2a01:1dd::/32 maxlen: 32
                          2a01:1de::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 11:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0c:ba:d5:80:29:5a:9a:df:05:35:35:f3:57:1a:31:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
        Validity
            Not Before: Dec 11 09:25:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6ab531f3753a46cf110adc1792dce790c92a69ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ea:72:71:fb:4b:fd:68:a7:d2:31:57:15:6c:
                    8a:e1:b4:27:ce:68:cf:7f:89:ff:6e:27:31:99:9f:
                    9e:ee:08:7e:f6:51:39:0c:a0:83:e7:24:64:1c:63:
                    e6:91:9b:fe:74:1e:d3:de:91:73:fa:af:02:2a:61:
                    66:ba:ed:6a:6e:ee:85:f0:5c:7a:65:0e:f5:6f:2e:
                    68:dc:6d:33:73:2f:df:36:1a:61:5e:b0:a9:83:b5:
                    e5:e7:e3:31:4d:75:c2:34:0d:de:d4:83:a8:bd:dd:
                    3e:fc:46:26:54:c0:a8:ec:6a:0c:2d:30:46:2a:f1:
                    f6:43:86:e4:8d:b6:65:0e:ae:24:6a:46:ef:e1:04:
                    0d:ad:ef:f8:a7:f6:2a:82:8c:26:1d:38:5e:ab:2b:
                    09:2f:cb:7d:f8:5b:6d:ba:b3:7c:ae:1b:55:90:f5:
                    c8:4d:0a:de:02:52:ea:40:59:15:3b:65:7c:44:ce:
                    76:60:77:98:e0:11:40:8b:42:ab:14:82:5d:fb:17:
                    1b:35:69:58:43:28:34:e0:5e:a5:47:2f:cf:9a:e7:
                    3f:95:21:9e:9b:95:14:6d:76:fa:8c:ce:3d:85:a2:
                    91:e1:a0:14:a4:a8:ab:42:f5:78:9e:ff:e3:17:4c:
                    88:27:e3:ea:d4:13:5f:ad:e7:2d:83:76:ce:3a:1e:
                    6d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B5:31:F3:75:3A:46:CF:11:0A:DC:17:92:DC:E7:90:C9:2A:69:EA
            X509v3 Authority Key Identifier:
                keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/arUx83U6Rs8RCtwXktznkMkqaeo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.230.64.0/20
                  83.230.96.0/19
                  157.158.0.0/16
                  185.126.188.0/22
                  212.106.176.0/20
                  213.227.80.0-213.227.127.255
                IPv6:
                  2a01:1d8::-2a01:1de:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         34:82:4a:af:4e:43:67:e9:6a:9a:38:8c:b8:7c:4f:a5:5e:15:
         99:cc:a7:1b:0a:48:bf:fb:98:63:9f:8a:d6:6d:d4:c0:b1:f0:
         12:64:15:42:f9:f1:14:83:6d:9a:23:28:63:24:d5:f4:2c:6f:
         f4:93:2a:8b:ed:2b:10:ea:5e:cb:6b:75:ff:e8:0f:34:c2:d4:
         41:fe:c6:c2:f5:f8:3e:12:40:ea:14:0b:cc:5a:f0:90:9d:d1:
         95:57:2c:fe:bb:6c:91:b3:53:9c:8f:79:db:e1:70:9e:e7:9c:
         8e:65:8f:15:93:fd:27:d6:4e:32:d8:1b:df:c8:e0:11:cd:05:
         eb:04:a0:13:f0:5a:fd:86:fb:fa:93:44:3f:2a:e7:02:e9:4f:
         ab:f2:4f:4b:6d:74:97:83:b2:e7:b0:8f:da:e0:93:6c:55:1f:
         0a:e8:12:61:a8:0b:9f:93:06:dc:45:26:b1:56:32:8e:fa:87:
         cb:b1:c8:0c:44:f0:89:9b:cc:c9:e3:8a:41:51:34:df:7c:c8:
         32:04:89:a5:d0:70:d2:26:e2:4c:15:65:77:11:10:16:af:fb:
         4d:b1:6a:e6:4b:4a:07:31:ae:30:70:c9:69:e9:de:02:be:47:
         49:3b:12:58:a0:89:80:80:bf:2c:f0:ab:ea:b6:46:b1:bb:01:
         9a:f0:c0:10
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 14 21:34:25 2025 by rpki-client