This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/V9txxjzIsqWzRjY7IWR9KOh0Zrk.roa
File:                     V9txxjzIsqWzRjY7IWR9KOh0Zrk.roa (raw, json)
Hash identifier:          FHsBZ16sf+Y+zDi0kEH9cm/tI4Y2PDFu4TC3IlRDsQo=
Subject key identifier:   57:DB:71:C6:3C:C8:B2:A5:B3:46:36:3B:21:64:7D:28:E8:74:66:B9
Certificate issuer:       /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial:       0195E313F1027AD8B9FDAE57055EF5B561BB
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/V9txxjzIsqWzRjY7IWR9KOh0Zrk.roa
Signing time:             Sat 29 Mar 2025 18:04:49 +0000
ROA not before:           Sat 29 Mar 2025 18:04:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
                          2001:67c:64:ffff:0:195:e313:2c66/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e3:13:f1:02:7a:d8:b9:fd:ae:57:05:5e:f5:b5:61:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
        Validity
            Not Before: Mar 29 18:04:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=57db71c63cc8b2a5b346363b21647d28e87466b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:71:e6:31:4b:9f:2e:83:01:79:a7:a8:5c:c0:
                    d0:49:cf:91:42:5c:89:89:d0:cc:ac:7e:8b:c0:46:
                    66:b9:d7:8c:2d:df:f4:fb:dd:83:f4:0d:a9:81:b0:
                    69:c5:6a:f9:b2:0c:2f:37:a7:86:da:11:ff:35:83:
                    2d:39:0b:8f:a5:83:74:09:74:28:3b:01:8d:3c:e7:
                    93:48:fc:89:c1:3b:57:2b:6d:f5:34:6a:eb:c0:8a:
                    1b:14:ae:7c:57:ea:bd:c9:cd:25:94:2f:0a:df:7f:
                    75:57:79:ea:a5:aa:8b:b4:d0:3c:d4:59:91:2b:94:
                    83:0a:cc:55:15:69:8b:99:69:69:52:5f:8e:5b:3d:
                    4e:62:b5:6f:9c:56:5f:62:fe:28:3d:6a:ee:44:2b:
                    ab:7e:22:24:2d:35:9d:b7:ab:9f:1d:b4:75:f3:4b:
                    9d:9a:37:6a:f8:46:76:7f:76:f2:76:20:d0:52:31:
                    f4:95:22:76:40:13:4d:29:97:ff:fa:be:c4:1a:d5:
                    c5:62:79:9c:62:6c:45:90:2c:6d:7c:72:ef:71:ad:
                    a7:a5:e9:30:c5:92:1f:64:2a:b9:98:03:52:1b:3e:
                    78:04:8d:c4:4c:d6:1c:c5:25:6c:52:b9:2c:51:c9:
                    8f:2d:54:81:1c:69:78:41:fd:01:60:9d:e5:92:27:
                    77:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DB:71:C6:3C:C8:B2:A5:B3:46:36:3B:21:64:7D:28:E8:74:66:B9
            X509v3 Authority Key Identifier:
                keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/V9txxjzIsqWzRjY7IWR9KOh0Zrk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:195:dc6c:d9df/128
                  2001:67c:64:ffff:0:195:e313:2c66/128

    Signature Algorithm: sha256WithRSAEncryption
         6e:17:83:b2:2d:44:fd:8c:d0:2f:34:6f:3d:67:b4:b6:7b:7c:
         cb:e8:44:d8:d9:56:70:82:0d:05:b9:1f:6d:89:9e:26:65:ca:
         96:1b:42:7a:10:22:db:61:d6:27:10:84:87:8c:b6:30:75:99:
         3a:30:61:d5:28:71:92:3d:5c:5a:38:82:ff:bc:ba:47:0b:73:
         90:30:c8:1e:5f:e2:a3:e3:d9:af:ab:27:af:ae:98:ab:32:60:
         3b:9e:34:26:8a:1a:9f:e7:66:19:ae:ca:b1:a5:fc:29:fa:a9:
         51:5b:df:99:5a:f4:28:bd:09:5b:e1:90:b0:1b:ec:11:ed:75:
         4b:e3:98:42:a4:49:3a:2a:09:41:5e:ad:5f:4b:00:75:31:9b:
         a7:5c:46:28:cf:3c:a0:68:8e:5f:04:c6:14:89:d6:79:5d:f3:
         74:9e:19:98:47:df:87:72:62:1b:01:a3:db:a6:d9:75:ee:bf:
         31:ab:d9:9e:e6:d2:dd:19:48:a0:20:3c:44:cc:ee:98:38:85:
         2f:ba:85:7a:7c:1c:f2:36:48:16:99:8a:ef:f7:b3:d0:3f:c2:
         96:97:ba:3e:f3:0c:be:08:92:65:e7:7e:71:91:14:4b:ab:16:
         2d:e1:1f:a6:58:97:bc:36:2e:5c:ec:16:15:5a:26:e5:82:15:
         9f:0b:c4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 01:57:04 2025 by rpki-client