This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/1-0sI4MfiFkfQTOcehw-qbt3pgyg.roa
File:                     1-0sI4MfiFkfQTOcehw-qbt3pgyg.roa (raw, json)
Hash identifier:          jXTt12vVbskJpCEhKJ6BwR3gNEqgdYkVVmOuQ+oheyM=
Subject key identifier:   FB:4B:08:E0:C7:E2:16:47:D0:4C:E7:1E:87:0F:AA:6E:DD:E9:83:28
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       019B5B38D45B3E507E470978BF9EE14A40A2
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/1-0sI4MfiFkfQTOcehw-qbt3pgyg.roa
Signing time:             Fri 26 Dec 2025 15:13:29 +0000
ROA not before:           Fri 26 Dec 2025 15:13:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        83.147.0.0/22 maxlen: 24
                          83.147.16.0/22 maxlen: 24
                          83.147.20.0/24 maxlen: 24
                          83.147.21.0/24 maxlen: 24
                          83.147.22.0/24 maxlen: 24
                          83.147.23.0/24 maxlen: 24
                          83.147.26.0/23 maxlen: 24
                          83.147.26.0/24 maxlen: 24
                          83.147.27.0/24 maxlen: 24
                          83.147.28.0/24 maxlen: 24
                          83.147.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 31 Dec 2025 15:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5b:38:d4:5b:3e:50:7e:47:09:78:bf:9e:e1:4a:40:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Dec 26 15:13:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fb4b08e0c7e21647d04ce71e870faa6edde98328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:37:93:68:af:ea:4e:c7:e0:5d:3e:37:85:1e:
                    b9:0f:b2:4e:0b:dd:3e:11:b2:5f:f6:ef:e0:e5:46:
                    db:c7:42:b9:b2:8d:5c:bc:29:1a:97:45:a5:a2:12:
                    7d:c5:57:19:c9:03:e9:31:e4:aa:48:fd:8c:93:5b:
                    9f:b7:ca:f3:56:83:10:8c:f5:62:08:9c:20:dd:72:
                    e0:33:c9:33:40:a7:b9:f7:de:b5:8f:5b:01:ff:d6:
                    c1:8a:37:65:e8:d6:79:fa:9d:3c:1d:25:80:ee:b6:
                    03:e4:51:f9:26:5d:5b:ad:6a:9e:44:39:48:41:b8:
                    b5:49:3a:d0:ce:ce:91:42:20:2d:4f:b1:ee:29:b0:
                    b3:70:85:13:dc:59:42:4b:9c:60:84:33:46:81:cd:
                    6c:68:97:8e:89:94:e3:50:c8:1c:b0:91:92:8c:47:
                    8f:a9:39:f3:3b:9b:4c:8c:90:8a:a4:8f:de:44:92:
                    c1:54:a5:b6:0d:9f:5e:2e:72:75:2a:91:23:5c:84:
                    fa:83:b1:51:61:59:21:30:52:53:61:6c:1c:f5:f2:
                    92:da:d1:18:53:d7:9b:3f:ef:ee:00:3a:01:b2:8f:
                    42:3e:dc:bd:50:13:28:94:31:17:e4:9c:02:b2:de:
                    cb:90:7d:87:1b:2d:c3:4b:00:f6:5e:ba:c4:92:d6:
                    0b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4B:08:E0:C7:E2:16:47:D0:4C:E7:1E:87:0F:AA:6E:DD:E9:83:28
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/1-0sI4MfiFkfQTOcehw-qbt3pgyg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.0.0/22
                  83.147.16.0/21
                  83.147.26.0-83.147.28.255
                  83.147.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:ed:ee:78:7e:87:d5:55:e2:47:02:e0:02:1a:24:33:1a:98:
         a9:24:46:54:42:7f:ad:6e:84:e6:0a:48:63:f5:56:e0:0f:49:
         84:32:12:e6:40:73:bf:fd:bb:c2:e8:95:4a:56:1a:52:37:ac:
         11:9d:a7:e4:db:7b:9d:7e:77:a5:5b:6e:be:1e:cb:50:97:15:
         0d:eb:1b:65:60:e1:f3:12:41:54:f7:95:9a:31:4a:22:d3:3b:
         dc:4e:50:16:8d:c3:00:52:06:fe:34:41:a4:92:6c:26:11:33:
         41:33:39:45:54:04:6d:a8:29:af:bf:7a:11:ac:1f:05:02:18:
         10:6a:d4:f3:f6:a5:98:af:21:a2:37:42:d1:d7:43:3d:2f:42:
         78:10:88:fd:cf:6c:dd:0f:cd:36:e7:6d:0e:13:4c:f4:71:73:
         24:8b:71:8c:e7:11:8d:26:39:cf:70:9f:0d:6e:ec:0b:bf:9b:
         83:59:ce:98:be:86:62:64:03:b7:68:06:c6:d0:23:14:53:3f:
         4a:a8:7a:99:81:e8:de:82:25:28:f9:a4:cb:3e:9a:4f:9b:a7:
         27:b6:77:47:40:f7:82:36:9c:bd:39:e4:4d:0f:9e:2e:94:e9:
         f8:5e:c6:93:12:7b:21:b4:2c:64:2d:40:ed:81:ea:bb:31:18:
         8e:31:a6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 21:06:00 2025 by rpki-client