This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/7R8eUpLuc4GI_6jvfLvTlC-fEYI.roa
File:                     7R8eUpLuc4GI_6jvfLvTlC-fEYI.roa (raw, json)
Hash identifier:          BhE+rFh0WYEXDD4+knzbV0oEdKwG4sDBDOU5ToHcGOA=
Subject key identifier:   ED:1F:1E:52:92:EE:73:81:88:FF:A8:EF:7C:BB:D3:94:2F:9F:11:82
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       019BA29ECB45F467CA40C5BCF66DA35829B0
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/7R8eUpLuc4GI_6jvfLvTlC-fEYI.roa
Signing time:             Fri 09 Jan 2026 11:57:54 +0000
ROA not before:           Fri 09 Jan 2026 11:57:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9304
IP address blocks:        83.147.0.0/22 maxlen: 24
                          83.147.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 02:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a2:9e:cb:45:f4:67:ca:40:c5:bc:f6:6d:a3:58:29:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Jan  9 11:57:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ed1f1e5292ee738188ffa8ef7cbbd3942f9f1182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8a:95:b3:f2:22:51:89:93:3e:bd:98:92:db:
                    8e:4e:29:fe:a8:c4:71:f1:ad:80:6e:fa:57:bb:71:
                    ae:37:60:cc:17:79:cd:2c:f8:1a:77:57:2a:86:8a:
                    27:e3:df:8f:4c:f2:1a:75:5c:f1:22:05:ab:ac:b5:
                    5a:6f:17:51:64:dc:d3:d1:86:f6:df:e0:25:41:63:
                    0c:ad:17:47:14:6e:85:ed:5c:3d:f8:ad:6c:14:e1:
                    2e:65:76:23:73:23:06:5f:c5:58:fa:93:0d:09:1e:
                    a0:78:ae:e4:2d:06:31:b8:fd:7b:30:d7:cc:b3:73:
                    0c:4d:5a:66:8b:3d:1d:2a:05:27:3a:93:0a:92:dd:
                    89:25:93:bc:7c:57:cb:6c:58:91:33:3b:7d:f6:58:
                    1f:58:da:01:01:59:c0:c5:69:04:a4:3b:b3:38:f1:
                    6d:9e:f7:4c:0f:3f:59:2f:85:7b:5b:c3:5c:84:05:
                    8d:44:e0:75:ed:f1:72:49:a7:0f:59:ac:3b:e0:ff:
                    a6:fd:18:79:25:ec:fb:de:54:d5:76:b6:54:4f:52:
                    a0:94:f8:b8:3f:c1:0e:fa:45:90:bd:e8:f8:ea:f3:
                    5f:1c:a4:6e:80:5d:9d:d9:41:35:0a:f0:03:dc:55:
                    c7:f1:ce:a8:72:9d:40:0a:33:b7:c9:2e:e7:d4:90:
                    bf:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1F:1E:52:92:EE:73:81:88:FF:A8:EF:7C:BB:D3:94:2F:9F:11:82
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/7R8eUpLuc4GI_6jvfLvTlC-fEYI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         09:36:7b:d6:43:f0:11:25:19:12:20:0a:d6:3a:cd:88:b0:13:
         7d:9b:ad:c4:6b:10:30:81:ac:36:e3:6a:08:9d:5b:60:67:6f:
         97:38:99:50:3f:71:28:0f:6f:b6:ee:98:ff:21:50:cc:9c:d5:
         d6:5c:34:e8:9f:0d:b1:4e:15:a2:c1:59:26:a0:d5:7a:79:b3:
         31:aa:b9:90:70:e9:d3:d7:3f:ce:c7:d8:46:ce:61:b0:6f:59:
         aa:dc:11:6b:98:1d:d9:44:19:06:7f:08:f9:25:f5:b4:91:c9:
         7d:37:d2:0c:02:67:ec:c5:e6:ed:ae:95:90:2c:60:16:57:48:
         60:d1:23:4d:03:d6:d3:26:3a:e2:7f:c3:8b:7e:5b:1b:64:12:
         0a:60:22:4f:6e:36:c8:91:9b:91:80:ae:3d:d6:60:da:2a:da:
         bb:cd:76:5b:65:5b:02:ac:18:ea:7e:e9:3f:da:78:1d:83:67:
         8a:92:6c:18:68:90:75:b3:d1:13:77:2e:13:d7:18:62:92:3c:
         3c:55:2c:76:ee:3c:42:a4:2b:e0:b6:c1:1a:1f:93:15:42:34:
         36:53:f0:ce:d8:bf:90:4d:af:90:2b:25:9c:9b:9a:82:58:9a:
         8c:f9:7a:ed:d7:e8:79:42:8c:58:5b:34:78:d2:98:79:0d:a0:
         e4:75:c8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:53:43 2026 by rpki-client