This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/YGxOWC67xnFdZpqiT6jQNZ3x7F8.roa
File:                     YGxOWC67xnFdZpqiT6jQNZ3x7F8.roa (raw, json)
Hash identifier:          IBA2eWmYoe53rLsRx6eyDDNbF8a4NYDcbQ80+DftLrA=
Subject key identifier:   60:6C:4E:58:2E:BB:C6:71:5D:66:9A:A2:4F:A8:D0:35:9D:F1:EC:5F
Certificate issuer:       /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Certificate serial:       019B79EC9FED9B0223332163305DB9065162
Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/YGxOWC67xnFdZpqiT6jQNZ3x7F8.roa
Signing time:             Thu 01 Jan 2026 14:18:29 +0000
ROA not before:           Thu 01 Jan 2026 14:18:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201058
IP address blocks:        82.213.70.0/23 maxlen: 23
                          82.213.70.0/24 maxlen: 24
                          82.213.71.0/24 maxlen: 24
                          82.213.80.0/22 maxlen: 22
                          82.213.80.0/24 maxlen: 24
                          82.213.81.0/24 maxlen: 24
                          82.213.82.0/24 maxlen: 24
                          82.213.83.0/24 maxlen: 24
                          82.213.96.0/22 maxlen: 22
                          82.213.96.0/24 maxlen: 24
                          82.213.97.0/24 maxlen: 24
                          82.213.98.0/24 maxlen: 24
                          82.213.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 08:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:9f:ed:9b:02:23:33:21:63:30:5d:b9:06:51:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
        Validity
            Not Before: Jan  1 14:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=606c4e582ebbc6715d669aa24fa8d0359df1ec5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c9:f5:61:fa:ab:ba:27:ce:7e:b0:5e:71:25:
                    0e:47:20:8a:e6:81:ba:0d:23:3e:c1:80:06:14:97:
                    b0:38:ce:1a:f7:e5:c4:53:00:ee:1f:5c:f2:62:1d:
                    d2:d7:9c:fc:5f:06:16:0c:e4:83:f8:ee:78:95:63:
                    e9:75:83:5a:6a:2f:d1:dc:bf:99:98:f0:cc:83:c9:
                    65:0c:70:a0:74:99:10:82:d5:3b:44:c9:43:e6:29:
                    d4:89:c1:04:50:be:b8:fa:a2:5d:71:1a:5f:54:22:
                    f2:0c:66:6b:83:d5:53:e1:f6:8f:07:c4:43:4e:a8:
                    ee:3b:96:07:ed:24:1f:30:7c:25:00:51:43:5a:6f:
                    91:34:3f:02:0c:92:8e:d1:73:37:d3:67:de:72:9f:
                    47:d6:89:bb:38:d2:70:16:15:14:7a:72:2b:63:5f:
                    a9:88:e1:f2:2d:58:86:e4:64:c2:04:86:8e:b2:69:
                    a9:da:14:be:7b:70:17:c0:90:5d:31:df:70:6b:e6:
                    59:e7:14:45:c3:59:5c:07:1b:76:a7:87:ce:81:8e:
                    be:58:ce:7c:be:f9:5e:72:a6:ae:ac:b0:0f:ac:f8:
                    a6:b0:aa:bc:a7:0a:0f:24:bb:30:91:72:f2:9e:28:
                    d0:a1:c8:3d:20:88:cc:8c:f5:39:61:f3:ad:0d:d6:
                    fd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6C:4E:58:2E:BB:C6:71:5D:66:9A:A2:4F:A8:D0:35:9D:F1:EC:5F
            X509v3 Authority Key Identifier:
                keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/YGxOWC67xnFdZpqiT6jQNZ3x7F8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.213.70.0/23
                  82.213.80.0/22
                  82.213.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:a3:d3:ee:82:5e:38:e1:a4:2b:76:4a:aa:42:a8:72:79:6b:
         1d:6a:07:c1:5f:d1:a1:fb:b1:4f:b4:08:a7:c2:f6:93:db:a3:
         88:f2:a6:7a:82:3f:ab:ce:72:e5:7c:f5:c9:d6:03:ba:50:f9:
         d1:59:b7:b3:31:ed:9b:43:9d:6c:48:3c:6d:1d:0e:ed:92:d2:
         f5:f9:76:d3:fd:93:e9:71:1e:ff:d9:2d:c8:4d:09:3b:4c:2f:
         52:38:86:e0:c8:93:a2:2f:ec:76:d2:4d:0a:4d:fd:bb:49:e2:
         1e:b7:0c:fe:0a:65:b0:72:a3:21:72:2d:95:56:b3:15:35:18:
         32:94:a8:62:41:4d:15:d6:c9:1d:11:10:66:2c:ba:ca:27:e4:
         9a:5d:17:95:cf:c8:d4:36:2b:c5:3a:f1:3a:9d:1e:e6:fe:2b:
         c1:c0:90:3d:a6:23:9f:01:30:1c:51:7b:63:cb:27:ef:ba:fb:
         5c:a2:2c:38:0c:bf:40:31:6f:d8:c2:60:e3:9a:37:46:e2:e4:
         d5:04:30:ac:1a:59:a0:57:e6:5d:cf:4b:35:45:44:46:e4:d8:
         c1:5b:8e:e0:44:0d:58:3f:bf:0b:3b:74:bb:e8:dc:59:05:b3:
         2c:94:47:70:08:37:8c:b7:e0:29:d3:65:82:38:f3:ef:03:6c:
         ba:c2:d2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:13:32 2026 by rpki-client