This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/O55YIh8R7ULjNm2Fwfnizhwhd3g.roa
File:                     O55YIh8R7ULjNm2Fwfnizhwhd3g.roa (raw, json)
Hash identifier:          2XNk4omQ98yrQJxaMFR4Mbvs0hTFTlYvhNS3WNx4DdA=
Subject key identifier:   3B:9E:58:22:1F:11:ED:42:E3:36:6D:85:C1:F9:E2:CE:1C:21:77:78
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       019BA29DE0CF3FF864E27613057ACF2742E3
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/O55YIh8R7ULjNm2Fwfnizhwhd3g.roa
Signing time:             Fri 09 Jan 2026 11:56:54 +0000
ROA not before:           Fri 09 Jan 2026 11:56:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        83.147.16.0/22 maxlen: 24
                          83.147.20.0/24 maxlen: 24
                          83.147.21.0/24 maxlen: 24
                          83.147.22.0/24 maxlen: 24
                          83.147.23.0/24 maxlen: 24
                          83.147.26.0/23 maxlen: 24
                          83.147.26.0/24 maxlen: 24
                          83.147.27.0/24 maxlen: 24
                          83.147.28.0/24 maxlen: 24
                          83.147.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 11:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a2:9d:e0:cf:3f:f8:64:e2:76:13:05:7a:cf:27:42:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Jan  9 11:56:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3b9e58221f11ed42e3366d85c1f9e2ce1c217778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fb:16:14:e6:c9:43:a0:0f:39:c7:b8:45:b2:
                    27:4a:54:e9:76:4b:4a:0c:b6:9f:41:34:e6:7b:de:
                    8f:68:25:81:21:20:b0:ad:06:11:7c:73:b1:4b:91:
                    de:77:00:8c:35:87:15:43:35:d2:a4:f6:82:93:07:
                    d2:7c:b3:85:77:87:3b:f6:6b:17:71:6d:a9:a7:60:
                    bc:b2:c2:3d:ae:c7:ed:57:bb:06:0a:1e:74:f5:1c:
                    4e:6c:d0:f7:4b:c4:4b:3b:06:69:0b:1f:9c:27:16:
                    df:a8:0a:0e:69:bb:f2:c6:35:9f:2b:da:55:53:c3:
                    23:9d:3a:a1:12:f7:06:da:52:ca:5f:f7:89:bc:14:
                    7d:e7:66:e0:b4:a2:2c:6f:eb:66:97:ba:07:dc:a8:
                    61:91:38:10:c0:ec:b6:1c:77:74:94:55:ce:6c:9d:
                    93:7d:12:b7:2e:6f:99:5a:22:d5:5b:41:3c:09:fd:
                    8c:36:37:c6:b0:05:fd:4a:20:b3:cc:7a:79:d1:07:
                    f6:cc:c3:52:7d:66:c3:ba:3e:0d:84:74:23:38:a9:
                    aa:0b:d9:23:3a:47:99:56:b5:15:c9:0f:05:ef:af:
                    b3:8f:90:b0:86:76:8e:fe:4d:98:fb:7c:52:88:e7:
                    58:35:92:3f:a0:91:14:a3:91:66:97:49:66:96:63:
                    66:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9E:58:22:1F:11:ED:42:E3:36:6D:85:C1:F9:E2:CE:1C:21:77:78
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/O55YIh8R7ULjNm2Fwfnizhwhd3g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.16.0/21
                  83.147.26.0-83.147.28.255
                  83.147.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:53:ac:e9:de:e7:91:0b:72:9e:63:4f:6e:f4:c2:a0:76:66:
         a6:4b:5a:69:2c:62:69:bc:1f:25:9a:81:ec:f8:74:2d:c0:16:
         57:7a:83:34:22:b1:fa:dd:8f:dd:0b:16:43:69:f1:80:e0:ab:
         68:c2:df:53:ff:7e:32:e6:96:c4:e4:71:23:9b:fd:d5:41:cd:
         6c:17:64:7c:4c:25:32:46:87:68:12:17:76:98:67:e6:e8:e2:
         f2:5d:e3:18:a7:99:52:0d:f5:a8:87:12:d2:7b:2a:b3:f0:9e:
         7e:5e:b4:9f:db:34:6a:4d:25:d6:1a:c1:17:8f:a8:af:50:2a:
         2b:fe:e3:60:11:f2:b4:6c:93:82:ff:5e:e0:a2:b9:19:bb:34:
         21:c1:ef:c9:82:1a:3a:1b:95:e4:ad:66:a5:ad:05:89:49:b4:
         2f:03:25:03:cc:c2:dd:e7:d7:75:c1:2c:ee:97:85:3b:99:c5:
         ae:11:9a:14:fc:83:4c:9c:3f:00:e4:b4:ad:1b:28:74:6f:a5:
         8c:ee:44:76:fb:6d:77:b4:41:2c:82:23:f0:cc:0a:dc:ad:62:
         c3:4a:46:91:cf:8f:00:65:a3:39:de:2f:3d:fa:fe:63:00:fa:
         3a:5d:88:5a:ab:53:ac:aa:f2:99:6b:b0:42:c7:da:c0:4b:1a:
         47:28:ed:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 18:20:41 2026 by rpki-client