This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/RGMNPdrgdeaj_MoPn_xM4Fk747M.roa
File:                     RGMNPdrgdeaj_MoPn_xM4Fk747M.roa (raw, json)
Hash identifier:          JMOWzOuHFSfds0/vg+9JuHFT7U/BE1oxV80LZLK3fOo=
Subject key identifier:   44:63:0D:3D:DA:E0:75:E6:A3:FC:CA:0F:9F:FC:4C:E0:59:3B:E3:B3
Certificate issuer:       /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial:       019B4AC910DEEB0CA24C0EE506F6FA9E97D2
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/RGMNPdrgdeaj_MoPn_xM4Fk747M.roa
Signing time:             Tue 23 Dec 2025 10:37:29 +0000
ROA not before:           Tue 23 Dec 2025 10:37:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     271791
IP address blocks:        82.86.104.0/21 maxlen: 21
                          82.86.104.0/24 maxlen: 24
                          82.86.105.0/24 maxlen: 24
                          82.86.106.0/24 maxlen: 24
                          82.86.107.0/24 maxlen: 24
                          82.86.108.0/24 maxlen: 24
                          82.86.109.0/24 maxlen: 24
                          82.86.110.0/24 maxlen: 24
                          82.86.111.0/24 maxlen: 24
                          82.86.168.0/21 maxlen: 21
                          82.86.168.0/24 maxlen: 24
                          82.86.169.0/24 maxlen: 24
                          82.86.170.0/24 maxlen: 24
                          82.86.171.0/24 maxlen: 24
                          82.86.172.0/24 maxlen: 24
                          82.86.173.0/24 maxlen: 24
                          82.86.174.0/24 maxlen: 24
                          82.86.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Dec 2025 22:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4a:c9:10:de:eb:0c:a2:4c:0e:e5:06:f6:fa:9e:97:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
        Validity
            Not Before: Dec 23 10:37:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=44630d3ddae075e6a3fcca0f9ffc4ce0593be3b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:17:ab:e3:a9:b3:8b:5d:fb:23:e9:bc:8b:74:
                    0f:c2:1b:de:5c:50:1b:0c:bb:bd:20:3a:07:33:ac:
                    2f:d9:6d:d8:27:36:d8:cd:19:b3:cb:d3:68:73:e9:
                    f5:b6:a2:9d:e3:a7:b6:02:64:e5:c0:cf:e7:41:71:
                    4b:e9:4f:10:bf:4a:15:26:36:85:72:3a:21:52:c2:
                    ca:79:30:13:84:50:b3:2d:74:65:05:bb:2a:93:03:
                    82:0b:90:75:b5:53:79:6b:66:2a:65:94:1f:ff:cd:
                    4e:4b:c4:20:70:50:f2:da:ec:4e:36:3b:95:36:82:
                    43:01:0e:a5:62:c0:5e:28:c3:2a:76:77:10:8d:d7:
                    5d:7b:6a:18:5d:18:a9:96:57:89:93:b4:c2:3d:0f:
                    55:72:fe:90:a7:15:0c:6b:bd:6f:f9:48:9e:30:d1:
                    c6:d2:db:55:01:e4:01:c2:49:4c:00:b7:a2:34:6b:
                    3b:cb:b9:b2:fd:bc:69:52:6e:de:5e:02:59:28:b0:
                    45:17:0e:4d:bc:77:a0:5d:67:36:ae:b1:99:61:96:
                    a4:39:91:8d:d1:94:22:eb:dd:bf:b1:d4:c5:95:21:
                    11:bf:77:b0:fd:f0:9d:45:72:03:9e:3a:9a:d4:53:
                    be:dc:17:4d:23:2f:2f:33:60:90:44:5b:e4:a2:fb:
                    3b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:63:0D:3D:DA:E0:75:E6:A3:FC:CA:0F:9F:FC:4C:E0:59:3B:E3:B3
            X509v3 Authority Key Identifier:
                keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/RGMNPdrgdeaj_MoPn_xM4Fk747M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.86.104.0/21
                  82.86.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a3:ea:77:83:42:da:34:31:97:85:56:aa:98:d5:98:e9:e3:ab:
         4c:fb:5e:e8:47:b2:20:f6:a8:59:3e:bb:f5:c7:a3:27:a3:2b:
         8f:32:85:1f:48:36:d8:09:27:d5:85:7f:2b:75:d7:9f:41:a6:
         46:c8:d1:46:8d:d0:01:61:a7:3b:45:12:d9:db:2e:c9:27:42:
         8f:0c:d2:e5:db:7e:f8:79:36:e3:25:a4:85:3e:48:24:88:57:
         b0:59:10:8a:4f:aa:4c:1b:b9:a3:d4:b1:e4:09:9d:5f:91:b6:
         b6:1e:4f:6f:e5:38:8d:b2:c2:4c:3b:fd:7b:16:29:2b:51:ae:
         d9:87:d8:6d:90:98:5d:02:f7:46:bb:ef:b4:97:c5:a9:ba:94:
         83:76:92:cd:c2:a8:b2:e7:2d:c2:d0:4b:78:ed:14:e6:b0:6a:
         9d:da:5c:04:6c:c0:73:b0:53:63:8c:3a:81:4c:3a:49:5f:75:
         22:cb:e4:36:3d:8f:a9:d4:cc:8c:57:49:36:bd:bc:21:24:21:
         06:15:e1:20:e1:ef:d2:0b:30:2a:cd:dc:88:d2:c6:dd:43:7d:
         ec:43:72:a5:6c:3c:5b:d5:2e:09:6e:38:da:c2:17:41:b4:cb:
         24:9c:b4:10:8b:51:b3:70:a4:bb:4a:0a:a4:8b:91:d2:a3:62:
         7b:b1:e1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 07:40:54 2025 by rpki-client