This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/8bG5gGlvDeuRp6jrE-F2lx5_T-U.roa
File:                     8bG5gGlvDeuRp6jrE-F2lx5_T-U.roa (raw, json)
Hash identifier:          C4ZMCLsKQ/CL0xZr39JjZDohk6ssz+62ipXwGUzDc+A=
Subject key identifier:   F1:B1:B9:80:69:6F:0D:EB:91:A7:A8:EB:13:E1:76:97:1E:7F:4F:E5
Certificate issuer:       /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial:       0192D4C869477F259C2578FF359B4DA0FABB
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/8bG5gGlvDeuRp6jrE-F2lx5_T-U.roa
Signing time:             Mon 28 Oct 2024 20:19:16 +0000
ROA not before:           Mon 28 Oct 2024 20:19:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2856
IP address blocks:        147.78.68.0/22 maxlen: 22
                          193.187.132.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:d4:c8:69:47:7f:25:9c:25:78:ff:35:9b:4d:a0:fa:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
        Validity
            Not Before: Oct 28 20:19:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f1b1b980696f0deb91a7a8eb13e176971e7f4fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e2:0c:ef:ed:ea:2b:ec:f2:71:f8:30:02:2d:
                    c8:42:49:bc:8e:63:00:91:86:67:12:ef:3f:94:7c:
                    13:55:f2:fa:69:c7:17:97:a0:20:61:a6:6d:97:ec:
                    6a:20:d2:08:8d:ac:32:72:25:05:68:12:71:98:16:
                    59:04:de:97:d3:c6:fe:30:5b:5f:16:93:1e:0e:ae:
                    95:91:7d:1c:2b:9e:c5:f8:fb:c4:68:88:00:0d:5a:
                    36:53:25:bf:08:e6:7c:d1:36:55:39:70:6b:ed:99:
                    51:79:72:78:a5:b4:ce:30:c0:41:c6:a0:dd:9c:13:
                    6b:1a:15:47:4e:94:96:8d:2d:9d:14:df:d7:a0:d0:
                    81:b2:51:16:a1:55:01:87:85:34:e9:ad:c3:df:51:
                    f4:c7:9e:f7:ee:00:e2:97:ff:49:ee:5a:7e:73:7d:
                    e0:3f:48:31:26:3f:48:7e:52:80:d5:ec:ea:88:3c:
                    67:66:9a:0f:af:ef:7a:fa:2a:1e:74:93:c6:28:6e:
                    1d:66:97:33:92:d5:13:11:0f:ee:19:ef:00:83:3f:
                    3e:a1:0f:48:fe:a8:31:2b:eb:34:c3:dc:ed:1e:73:
                    16:db:5e:ad:80:62:f2:47:23:00:a1:49:71:c3:de:
                    c3:d3:0a:4c:3c:8a:0e:ba:41:32:50:36:d5:1d:60:
                    ca:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B1:B9:80:69:6F:0D:EB:91:A7:A8:EB:13:E1:76:97:1E:7F:4F:E5
            X509v3 Authority Key Identifier:
                keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/8bG5gGlvDeuRp6jrE-F2lx5_T-U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.78.68.0/22
                  193.187.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:e7:31:90:24:d4:14:00:b1:b1:7b:2f:15:37:4c:79:0c:2b:
         0f:a3:9c:fc:40:1f:d5:8c:24:b6:39:fe:ac:e4:03:f4:46:d8:
         59:66:ec:d7:3f:4d:b0:7c:ab:2d:a2:29:6a:f5:1a:d4:a8:37:
         9a:d7:e0:ac:fa:48:2b:99:25:e2:d2:93:23:11:67:b3:a2:86:
         d4:a9:32:18:85:83:4d:b8:6f:6b:79:99:3b:7c:8b:2f:f9:79:
         22:4f:11:21:d3:85:1e:6a:6a:d7:01:c4:f2:a1:e8:fc:5e:4e:
         e1:66:5e:34:25:74:f3:bc:18:b9:99:0b:67:cb:d4:b8:5b:f2:
         9f:02:bb:49:5e:e6:86:c9:66:72:d7:d7:03:62:70:9e:53:63:
         e7:82:37:fc:7a:3a:da:df:04:d7:f2:d0:63:ff:32:ea:30:02:
         f9:18:cb:2f:52:b6:81:f5:52:89:5e:65:ac:ec:69:39:ae:c7:
         bc:7e:33:e1:dc:77:08:bb:51:1e:16:75:b8:80:41:da:29:27:
         3c:41:54:3c:b5:58:5a:60:72:27:f0:e5:40:b8:6c:a4:0e:a8:
         21:ef:f9:e4:9c:d0:17:52:02:cf:44:73:c7:8b:a5:85:4d:51:
         81:7a:95:08:e5:ad:e5:bd:d6:4e:55:a9:6c:5b:ea:ee:e4:14:
         00:0d:06:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:29:24 2025 by rpki-client