This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/83OVzlvIqdDKmb_5wBRC0WcFjfM.roa
File:                     83OVzlvIqdDKmb_5wBRC0WcFjfM.roa (raw, json)
Hash identifier:          8PFHggPnaezbnMW4+XspuMTvGK1XDvaIsNpmC/tZiA8=
Subject key identifier:   F3:73:95:CE:5B:C8:A9:D0:CA:99:BF:F9:C0:14:42:D1:67:05:8D:F3
Certificate issuer:       /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial:       019B7F15F0DCE98BB4F108CFDFEBA4E073CC
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/83OVzlvIqdDKmb_5wBRC0WcFjfM.roa
Signing time:             Fri 02 Jan 2026 14:21:42 +0000
ROA not before:           Fri 02 Jan 2026 14:21:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31514
IP address blocks:        83.217.192.0/21 maxlen: 21
                          83.217.196.0/24 maxlen: 24
                          83.217.198.0/24 maxlen: 24
                          83.217.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:f0:dc:e9:8b:b4:f1:08:cf:df:eb:a4:e0:73:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
        Validity
            Not Before: Jan  2 14:21:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f37395ce5bc8a9d0ca99bff9c01442d167058df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c9:e6:68:05:fe:fc:b1:e3:3a:24:5d:a3:4c:
                    70:21:77:36:d0:79:9b:a3:f2:0f:56:5e:ef:34:f8:
                    61:82:13:3b:9e:70:8b:f0:96:f1:ad:10:a9:d0:7d:
                    e0:30:64:26:77:48:13:8c:b5:d7:8b:7e:3c:37:d5:
                    a5:10:e7:e9:2d:7e:62:56:a5:b4:a1:06:45:30:84:
                    e1:d4:f6:33:cd:48:82:7c:f6:8e:6c:99:0a:49:c5:
                    36:47:60:71:ac:30:ff:df:cf:ea:64:81:86:b1:86:
                    f1:69:12:4f:4a:e5:c3:11:8c:cb:1d:6a:99:af:df:
                    71:a8:ee:08:64:3b:08:20:5c:57:36:5a:ad:ef:be:
                    37:e3:29:82:f6:57:10:de:58:28:d5:1c:19:19:f7:
                    e9:01:0d:0b:02:da:a6:3c:7b:4d:a5:3d:de:3f:5b:
                    45:70:e7:42:69:10:92:bb:72:32:ed:f4:53:91:66:
                    60:29:33:0f:18:03:21:6e:54:54:5f:5a:33:d7:53:
                    b3:0e:3b:7f:e1:62:8b:fe:d7:21:d8:b5:dd:7f:35:
                    8b:d4:2f:05:49:4a:a4:cb:26:24:53:9f:39:27:99:
                    05:ae:33:80:72:e5:58:99:8d:f7:6b:c0:c6:99:ba:
                    77:73:ea:20:39:26:1a:a1:e3:d1:e9:97:33:1e:30:
                    86:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:73:95:CE:5B:C8:A9:D0:CA:99:BF:F9:C0:14:42:D1:67:05:8D:F3
            X509v3 Authority Key Identifier:
                keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/83OVzlvIqdDKmb_5wBRC0WcFjfM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.217.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:cc:00:34:be:af:39:f5:b1:d0:d7:be:d8:c3:64:d3:f7:c2:
         93:86:d3:d7:b4:ed:5d:98:cb:7f:a2:27:3d:7c:63:9a:7b:5d:
         c2:85:d1:43:6a:3d:85:90:2a:1b:ed:43:d5:ce:70:f3:ae:1b:
         72:ee:8d:ee:95:fb:d3:50:3c:6e:02:6c:30:52:11:48:0b:4c:
         f2:f0:d6:32:21:90:b9:db:fc:82:99:af:74:83:64:04:48:90:
         73:f9:1f:29:74:1a:c8:8d:a6:56:f9:28:48:e7:d2:a0:03:0c:
         87:e8:f8:3d:c4:7f:c5:95:e7:2a:bb:95:e0:27:be:fc:f7:7b:
         14:02:1b:cc:6e:ad:96:d2:11:3c:91:03:19:24:3b:0a:c2:64:
         be:d9:1a:c2:bd:08:80:a0:79:f0:08:a4:dc:6d:37:77:4d:2d:
         53:7d:4f:3e:27:c1:05:86:8c:ca:a6:75:bf:2e:10:54:5f:b0:
         0e:96:d2:d3:2d:f9:e6:b4:9f:45:3c:9a:2f:70:c2:6a:e8:0d:
         79:af:f1:be:6a:de:37:49:90:3f:f9:2b:52:c9:5d:c4:a6:a4:
         c0:d8:97:e5:4a:d7:e2:30:77:79:ef:88:ca:95:67:68:b8:cc:
         e4:09:e2:5f:2d:ff:12:19:0a:dc:d1:8a:9a:04:30:1d:83:77:
         3e:c3:03:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/FfDc6Yu08QjP3+uk4HPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiODI0MzNmZmU5NGJmMzUzNmZlYzMyNzU0M2QzOTYxNTgy
MDIwNzIwHhcNMjYwMTAyMTQyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzczOTVjZTViYzhhOWQwY2E5OWJmZjljMDE0NDJkMTY3MDU4ZGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMnmaAX+/LHjOiRdo0xwIXc20Hmb
o/IPVl7vNPhhghM7nnCL8JbxrRCp0H3gMGQmd0gTjLXXi348N9WlEOfpLX5iVqW0
oQZFMITh1PYzzUiCfPaObJkKScU2R2BxrDD/38/qZIGGsYbxaRJPSuXDEYzLHWqZ
r99xqO4IZDsIIFxXNlqt77434ymC9lcQ3lgo1RwZGffpAQ0LAtqmPHtNpT3eP1tF
cOdCaRCSu3Iy7fRTkWZgKTMPGAMhblRUX1oz11OzDjt/4WKL/tch2LXdfzWL1C8F
SUqkyyYkU585J5kFrjOAcuVYmY33a8DGmbp3c+ogOSYaoePR6ZczHjCGQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPNzlc5byKnQypm/+cAUQtFnBY3zMB8GA1UdIwQY
MBaAFIuCQz/+lL81Nv7DJ1Q9OWFYICByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt
MmRkNzg5MGRjNjg5LzEvODNPVnpsdklxZERLbWJfNXdCUkMwV2NGamZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5
LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDU9nAMA0G
CSqGSIb3DQEBCwUAA4IBAQCAzAA0vq859bHQ177Yw2TT98KThtPXtO1dmMt/oic9
fGOae13ChdFDaj2FkCob7UPVznDzrhty7o3ulfvTUDxuAmwwUhFIC0zy8NYyIZC5
2/yCma90g2QESJBz+R8pdBrIjaZW+ShI59KgAwyH6Pg9xH/Flecqu5XgJ77893sU
AhvMbq2W0hE8kQMZJDsKwmS+2RrCvQiAoHnwCKTcbTd3TS1TfU8+J8EFhozKpnW/
LhBUX7AOltLTLfnmtJ9FPJovcMJq6A15r/G+at43SZA/+StSyV3EpqTA2JflStfi
MHd574jKlWdouMzkCeJfLf8SGQrc0YqaBDAdg3c+wwN3
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:07:25 2026 by rpki-client