This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/VEGHoxhhHVB-D4aY0Y3_4jbUdyo.roa
File:                     VEGHoxhhHVB-D4aY0Y3_4jbUdyo.roa (raw, json)
Hash identifier:          oOu25O1lLjcQ94aJO/rE50oCG5Vg7rSdNnxkHyjmobc=
Subject key identifier:   54:41:87:A3:18:61:1D:50:7E:0F:86:98:D1:8D:FF:E2:36:D4:77:2A
Certificate issuer:       /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial:       019BA340D74AC20ECFFCCE4653DD35224320
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/VEGHoxhhHVB-D4aY0Y3_4jbUdyo.roa
Signing time:             Fri 09 Jan 2026 14:54:54 +0000
ROA not before:           Fri 09 Jan 2026 14:54:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     30818
IP address blocks:        82.221.0.0/20 maxlen: 20
                          82.221.4.0/24 maxlen: 24
                          82.221.16.0/20 maxlen: 20
                          82.221.32.0/20 maxlen: 20
                          82.221.48.0/20 maxlen: 20
                          82.221.57.0/24 maxlen: 24
                          82.221.64.0/20 maxlen: 20
                          82.221.80.0/20 maxlen: 20
                          82.221.96.0/20 maxlen: 20
                          82.221.112.0/20 maxlen: 20
                          82.221.164.0/24 maxlen: 24
                          82.221.166.0/24 maxlen: 24
                          82.221.167.0/24 maxlen: 24
                          82.221.168.0/24 maxlen: 24
                          82.221.170.0/24 maxlen: 24
                          82.221.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a3:40:d7:4a:c2:0e:cf:fc:ce:46:53:dd:35:22:43:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
        Validity
            Not Before: Jan  9 14:54:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=544187a318611d507e0f8698d18dffe236d4772a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:81:d0:db:a2:9f:1a:97:39:9a:fe:e9:4d:e7:
                    6b:ba:27:a5:53:fb:74:55:17:36:bd:15:15:94:c4:
                    8a:3e:1c:d2:b8:48:7b:39:8a:ee:3a:1b:96:1a:8f:
                    90:f7:6c:69:05:c5:e6:96:93:20:a0:e7:cf:cc:bc:
                    a3:74:06:07:51:96:a8:c8:27:79:c6:4d:3c:d3:68:
                    c0:16:00:87:4b:d1:55:d4:48:e7:c9:c2:2c:53:24:
                    06:08:cb:af:ef:f1:81:cb:e7:01:b9:2b:64:f7:0f:
                    04:66:02:92:b1:85:3f:86:3e:00:eb:48:fc:e1:0f:
                    ce:ae:2a:c9:20:4a:96:d9:95:31:ba:f9:ab:bb:8a:
                    cb:d7:0a:7f:58:27:4b:99:a0:20:32:e9:3c:fc:eb:
                    56:a8:96:8d:e6:aa:7e:a3:d0:35:9f:0f:ba:e5:0e:
                    70:27:8f:39:1f:78:1e:9f:57:2f:42:7d:42:55:47:
                    32:4a:ea:77:43:ae:d4:e5:45:92:84:84:95:d5:c0:
                    8c:92:48:7a:a1:7f:61:ca:ef:7e:c2:14:37:51:71:
                    2e:56:be:e1:b1:a7:6c:c7:7b:ef:24:12:cb:42:b1:
                    83:bb:43:46:75:42:a7:99:50:2b:be:ce:2c:67:38:
                    f1:26:f4:ec:d4:7f:dc:85:21:5a:89:04:00:0b:66:
                    9a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:41:87:A3:18:61:1D:50:7E:0F:86:98:D1:8D:FF:E2:36:D4:77:2A
            X509v3 Authority Key Identifier:
                keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/VEGHoxhhHVB-D4aY0Y3_4jbUdyo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.221.0.0/17
                  82.221.164.0/24
                  82.221.166.0-82.221.168.255
                  82.221.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:b1:95:82:3a:71:ab:64:b2:d6:ca:8a:c0:e2:ad:a2:da:ea:
         21:09:8a:ae:68:99:d5:b3:e6:fa:07:77:88:74:91:81:a8:04:
         83:2f:31:47:c5:78:8c:20:2e:c9:83:b6:77:88:7d:c5:d2:e9:
         05:0a:87:89:40:b8:4c:a0:33:ac:c1:9a:69:1d:3a:c7:44:0a:
         39:b3:ca:19:fc:e1:97:2b:fa:35:77:b6:48:db:ca:fb:65:76:
         d7:10:a9:91:64:e7:ad:b7:e7:40:6d:81:32:0f:d2:3f:a0:12:
         fc:bf:99:11:49:2e:29:2a:03:82:ec:76:51:64:c4:a4:ca:71:
         96:02:f4:88:a0:9f:d0:a3:73:2e:96:e6:ec:b7:88:f4:89:f2:
         12:00:43:8c:03:8d:f7:30:88:9e:12:a9:77:78:05:14:a4:ec:
         f9:60:20:f7:0e:ae:7c:36:67:a0:1e:38:40:ce:fb:1f:16:d2:
         f7:cd:c3:e6:eb:79:00:d3:b4:bb:ee:8e:61:31:25:81:0b:41:
         0b:45:fe:a9:1c:df:13:60:59:ad:17:8e:49:20:10:8b:7c:8b:
         b5:9f:2d:c0:8d:2a:8c:cc:07:86:64:3c:7b:e9:d4:d1:15:7f:
         02:91:6a:93:a3:62:da:a4:92:21:32:19:2b:42:11:5b:97:f4:
         fe:f0:de:18
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZujQNdKwg7P/M5GU901IkMgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwODAyNWM3ZGUwNDAwZTBmM2M4OGQ0YTEyMmEzMTdlMzJj
NWUyMWMwHhcNMjYwMTA5MTQ1NDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDQxODdhMzE4NjExZDUwN2UwZjg2OThkMThkZmZlMjM2ZDQ3NzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4HQ26KfGpc5mv7pTedruielU/t0
VRc2vRUVlMSKPhzSuEh7OYruOhuWGo+Q92xpBcXmlpMgoOfPzLyjdAYHUZaoyCd5
xk0802jAFgCHS9FV1EjnycIsUyQGCMuv7/GBy+cBuStk9w8EZgKSsYU/hj4A60j8
4Q/OrirJIEqW2ZUxuvmru4rL1wp/WCdLmaAgMuk8/OtWqJaN5qp+o9A1nw+65Q5w
J485H3gen1cvQn1CVUcySup3Q67U5UWShISV1cCMkkh6oX9hyu9+whQ3UXEuVr7h
sadsx3vvJBLLQrGDu0NGdUKnmVArvs4sZzjxJvTs1H/chSFaiQQAC2aagQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFFRBh6MYYR1Qfg+GmNGN/+I21HcqMB8GA1UdIwQY
MBaAFECAJcfeBADg88iNShIqMX4yxeIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUt
ZmVlMmU4ZDQwODRmLzEvVkVHSG94aGhIVkItRDRhWTBZM180amJVZHlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUtZmVlMmU4ZDQwODRm
LzEvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQHUt0AAwQA
Ut2kMAwDBAFS3aYDBABS3agDBAFS3aowDQYJKoZIhvcNAQELBQADggEBALqxlYI6
catkstbKisDiraLa6iEJiq5omdWz5voHd4h0kYGoBIMvMUfFeIwgLsmDtneIfcXS
6QUKh4lAuEygM6zBmmkdOsdECjmzyhn84Zcr+jV3tkjbyvtldtcQqZFk562350Bt
gTIP0j+gEvy/mRFJLikqA4LsdlFkxKTKcZYC9Iign9Cjcy6W5uy3iPSJ8hIAQ4wD
jfcwiJ4SqXd4BRSk7PlgIPcOrnw2Z6AeOEDO+x8W0vfNw+breQDTtLvujmExJYEL
QQtF/qkc3xNgWa0XjkkgEIt8i7WfLcCNKozMB4ZkPHvp1NEVfwKRapOjYtqkkiEy
GStCEVuX9P7w3hg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:43:08 2026 by rpki-client