This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/VfwB6uKE0o9SUYD3dby2JhswLI0.roa
File:                     VfwB6uKE0o9SUYD3dby2JhswLI0.roa (raw, json)
Hash identifier:          rLJFhR6bzj2V+ceWYR07v3MseCfMJJwkSmnX5VyWHPw=
Subject key identifier:   55:FC:01:EA:E2:84:D2:8F:52:51:80:F7:75:BC:B6:26:1B:30:2C:8D
Certificate issuer:       /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial:       0195DFDBF7FC1D1FF59481891187EBC59BE7
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/VfwB6uKE0o9SUYD3dby2JhswLI0.roa
Signing time:             Sat 29 Mar 2025 03:04:49 +0000
ROA not before:           Sat 29 Mar 2025 03:04:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
                          2001:67c:64:ffff:0:195:dfdb:d818/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:db:f7:fc:1d:1f:f5:94:81:89:11:87:eb:c5:9b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
        Validity
            Not Before: Mar 29 03:04:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=55fc01eae284d28f525180f775bcb6261b302c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:59:aa:8c:d2:6d:ea:f2:15:e9:2a:bf:0a:49:
                    c0:fa:22:82:7f:7e:75:70:95:fd:40:2d:4a:3f:30:
                    5d:2e:1b:91:4b:db:9a:76:e5:87:09:a7:b5:c0:f7:
                    b8:a8:13:a4:92:44:ef:22:a3:c0:e5:49:12:c2:aa:
                    70:8f:7b:0d:73:7d:99:93:dd:19:f1:c2:8d:2d:df:
                    b5:4a:92:c4:b9:5a:28:9a:2c:57:f3:a4:84:5b:23:
                    31:d8:76:5a:04:cd:67:13:79:59:59:8a:ad:fc:74:
                    2c:d9:c4:b5:25:56:ba:91:d8:b6:7a:e9:aa:e2:61:
                    0d:d1:69:be:29:f1:22:81:5d:5f:03:89:1c:d0:73:
                    72:09:d8:ad:14:51:b1:ef:bc:8c:c4:23:99:84:28:
                    5a:ae:77:eb:8d:a1:f1:d5:5f:d0:ce:8b:b1:9a:0a:
                    38:ef:7c:55:81:d9:ae:d2:7a:71:14:83:ef:b4:7b:
                    08:16:ef:58:40:61:00:e7:ea:66:e8:27:b2:52:3b:
                    b8:35:34:20:8b:78:22:f0:74:8e:dc:21:f8:f5:e4:
                    15:67:aa:0d:1b:17:ab:a1:1a:99:9f:a0:46:ef:de:
                    42:c9:7b:f8:52:3d:a3:ec:84:41:cf:f1:3d:3d:d4:
                    42:9b:4f:26:4a:9a:eb:fa:cb:0c:77:7e:dc:f0:e1:
                    aa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FC:01:EA:E2:84:D2:8F:52:51:80:F7:75:BC:B6:26:1B:30:2C:8D
            X509v3 Authority Key Identifier:
                keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/VfwB6uKE0o9SUYD3dby2JhswLI0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:195:dc6c:d9df/128
                  2001:67c:64:ffff:0:195:dfdb:d818/128

    Signature Algorithm: sha256WithRSAEncryption
         7e:28:ca:5b:d3:cb:0a:9e:a9:d7:b5:ee:0c:ec:3a:17:9e:34:
         cf:ad:c6:7d:1f:f3:62:41:41:dd:df:61:ab:3e:c7:ab:82:6c:
         83:9f:a6:72:cc:32:28:d6:87:08:8f:03:f5:19:ab:2a:39:2d:
         f1:7c:06:4b:a8:bc:0c:ae:05:38:b1:22:2a:e5:bc:d5:20:9a:
         69:38:06:f9:ef:eb:44:3e:47:bf:e8:74:fc:bd:81:d1:85:d4:
         9c:92:dc:c5:14:c7:8e:47:68:c0:0b:ee:30:c6:91:83:da:ff:
         f2:1d:85:22:cd:ae:c2:ab:3c:10:fd:eb:bc:0c:ac:34:26:58:
         c0:b0:94:1d:c9:0a:9c:97:40:ea:88:b8:1d:0c:19:ef:23:2b:
         be:ab:b3:7b:b7:c4:a0:dc:26:eb:29:df:a8:7e:19:17:73:dc:
         79:32:9c:5c:53:c3:53:aa:bb:93:43:fb:e6:7c:86:6e:64:58:
         b1:11:ec:2d:f5:d4:07:83:08:57:a7:ea:1a:af:4c:fa:42:95:
         29:df:fe:ac:9a:9e:4f:ec:03:20:60:26:1b:32:ee:a1:d8:59:
         8e:3a:f5:89:cc:22:da:8f:fc:12:c4:15:cd:10:9c:f4:eb:9c:
         90:de:7f:4b:c4:64:fd:27:5a:05:ea:71:c5:43:be:c7:22:74:
         40:4e:69:b2
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZXf2/f8HR/1lIGJEYfrxZvnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj
MTFhMmQwHhcNMjUwMzI5MDMwNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWZjMDFlYWUyODRkMjhmNTI1MTgwZjc3NWJjYjYyNjFiMzAyYzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlmqjNJt6vIV6Sq/CknA+iKCf351
cJX9QC1KPzBdLhuRS9uaduWHCae1wPe4qBOkkkTvIqPA5UkSwqpwj3sNc32Zk90Z
8cKNLd+1SpLEuVoomixX86SEWyMx2HZaBM1nE3lZWYqt/HQs2cS1JVa6kdi2eumq
4mEN0Wm+KfEigV1fA4kc0HNyCditFFGx77yMxCOZhCharnfrjaHx1V/Qzouxmgo4
73xVgdmu0npxFIPvtHsIFu9YQGEA5+pm6CeyUju4NTQgi3gi8HSO3CH49eQVZ6oN
GxeroRqZn6BG795CyXv4Uj2j7IRBz/E9PdRCm08mSprr+ssMd37c8OGqqwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFFX8AerihNKPUlGA93W8tiYbMCyNMB8GA1UdIwQY
MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt
MDNhYTU1MTFhNzVmLzEvVmZ3QjZ1S0UwbzlTVVlEM2RieTJKaHN3TEkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm
LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk
//8AAAGV3GzZ3wMRACABBnwAZP//AAABld/b2BgwDQYJKoZIhvcNAQELBQADggEB
AH4oylvTywqeqde17gzsOheeNM+txn0f82JBQd3fYas+x6uCbIOfpnLMMijWhwiP
A/UZqyo5LfF8BkuovAyuBTixIirlvNUgmmk4Bvnv60Q+R7/odPy9gdGF1JyS3MUU
x45HaMAL7jDGkYPa//IdhSLNrsKrPBD967wMrDQmWMCwlB3JCpyXQOqIuB0MGe8j
K76rs3u3xKDcJusp36h+GRdz3HkynFxTw1Oqu5ND++Z8hm5kWLER7C311AeDCFen
6hqvTPpClSnf/qyank/sAyBgJhsy7qHYWY469YnMItqP/BLEFc0QnPTrnJDef0vE
ZP0nWgXqccVDvscidEBOabI=
-----END CERTIFICATE-----
Generated at Fri Dec 19 04:52:40 2025 by rpki-client