This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/bqonASN6m8_X-0PLTWyL1k78XVc.roa
File:                     bqonASN6m8_X-0PLTWyL1k78XVc.roa (raw, json)
Hash identifier:          BHHdw7qa2kmdkeh9BUPFPvgX9iTcx117t99txuo1M88=
Subject key identifier:   6E:AA:27:01:23:7A:9B:CF:D7:FB:43:CB:4D:6C:8B:D6:4E:FC:5D:57
Certificate issuer:       /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Certificate serial:       019B79EC9F0EA413C2123406C4EEDA7CDAA6
Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/bqonASN6m8_X-0PLTWyL1k78XVc.roa
Signing time:             Thu 01 Jan 2026 14:18:28 +0000
ROA not before:           Thu 01 Jan 2026 14:18:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     33942
IP address blocks:        82.213.64.0/23 maxlen: 23
                          82.213.67.0/24 maxlen: 24
                          82.213.68.0/23 maxlen: 23
                          82.213.72.0/22 maxlen: 22
                          82.213.76.0/22 maxlen: 22
                          82.213.84.0/22 maxlen: 22
                          82.213.102.0/24 maxlen: 24
                          82.213.103.0/24 maxlen: 24
                          82.213.104.0/21 maxlen: 21
                          83.139.192.0/23 maxlen: 23
                          83.139.195.0/24 maxlen: 24
                          83.139.196.0/22 maxlen: 22
                          83.139.197.0/24 maxlen: 24
                          83.139.201.0/24 maxlen: 24
                          83.139.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 08:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:9f:0e:a4:13:c2:12:34:06:c4:ee:da:7c:da:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
        Validity
            Not Before: Jan  1 14:18:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6eaa2701237a9bcfd7fb43cb4d6c8bd64efc5d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d9:08:65:81:ba:9d:91:51:85:66:fd:84:88:
                    f1:f7:3a:77:3f:08:82:d0:11:f0:bc:37:98:bd:03:
                    91:4b:39:49:a0:cd:e3:fc:55:7f:86:49:9d:07:70:
                    47:dd:7c:ac:f8:c1:04:28:d9:a3:97:9c:2b:ce:46:
                    64:ba:bd:24:22:90:86:f4:7c:ba:af:9c:b4:f4:c3:
                    ca:08:df:30:5a:25:36:7d:7f:c0:65:9f:5d:05:7e:
                    8e:2b:73:fc:2b:5e:e0:89:3a:8c:e7:bb:f8:bc:e7:
                    7e:f2:ff:e9:30:b4:91:2f:54:51:f6:16:b1:1d:7e:
                    38:e0:34:a8:9e:52:3a:60:5c:00:01:07:19:b5:67:
                    bc:fb:8f:02:54:50:70:35:d3:72:20:82:cb:72:a7:
                    6f:a6:e9:ac:00:73:69:2b:93:1a:63:e8:59:1f:fc:
                    f4:33:a9:b4:83:83:19:27:7f:4a:e9:a3:81:76:d6:
                    2c:78:11:f9:89:15:5d:1d:6e:9b:af:7a:81:25:09:
                    a1:de:98:0a:27:f6:c3:07:60:49:f0:50:db:27:77:
                    60:1b:41:b2:f7:8b:99:15:cf:0e:ad:d7:5d:c4:2d:
                    6c:fb:82:d7:f2:41:9f:76:fe:1e:88:a1:9a:b5:a7:
                    b9:f4:e4:20:5a:a6:6a:ff:9f:8f:ef:fb:29:ff:e0:
                    fc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AA:27:01:23:7A:9B:CF:D7:FB:43:CB:4D:6C:8B:D6:4E:FC:5D:57
            X509v3 Authority Key Identifier:
                keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/bqonASN6m8_X-0PLTWyL1k78XVc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.213.64.0/23
                  82.213.67.0-82.213.69.255
                  82.213.72.0/21
                  82.213.84.0/22
                  82.213.102.0-82.213.111.255
                  83.139.192.0/23
                  83.139.195.0-83.139.199.255
                  83.139.201.0/24
                  83.139.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:72:58:f6:0a:18:82:4d:79:9c:72:1a:20:62:74:64:50:3e:
         25:fc:b5:bd:8a:b2:90:0c:10:fc:41:f4:f6:3b:99:1b:f2:69:
         39:6f:99:db:15:e2:e4:0c:c8:40:14:e3:9c:bf:57:59:0c:30:
         03:8c:20:dc:f3:59:39:e3:85:7b:a1:93:dd:ed:0f:9b:51:77:
         7e:61:44:2e:a0:da:2f:ba:ef:8c:2e:76:20:6d:16:77:b7:cf:
         2b:bb:ea:0c:97:d8:04:3c:d5:c0:20:18:25:62:70:0d:7f:0b:
         fa:b7:26:11:21:18:e4:b6:7a:a5:58:d2:8e:73:ca:2d:2a:c4:
         f4:92:54:2c:10:a0:91:b7:a8:fe:32:a8:ae:82:8a:34:05:3d:
         a8:d2:87:1d:18:87:61:6f:90:46:5f:03:67:2b:23:c7:e4:00:
         bf:c6:2a:b0:ee:5b:48:17:bb:a2:f4:0c:82:47:12:3b:80:b8:
         41:53:5e:94:11:d6:30:95:19:95:ce:7d:c1:19:e9:1b:a5:20:
         ee:f3:e8:09:ef:8a:7c:2d:7c:d5:5b:cc:75:c2:9c:a3:3f:37:
         6f:09:bd:49:bb:3b:5f:17:ea:10:6a:da:e2:4c:f7:7f:55:62:
         ae:f1:60:7c:e6:a7:11:2c:42:c3:e4:dc:2c:7f:da:d5:a0:e0:
         5c:e6:ba:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:13:33 2026 by rpki-client