This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6kHcDiVJRzAhAx9BA2l-duOQFd8.roa
File:                     6kHcDiVJRzAhAx9BA2l-duOQFd8.roa (raw, json)
Hash identifier:          k7dvYhSVQd2324oi9Ln8T9co3/71ZCuY6zMzrO4LPFg=
Subject key identifier:   EA:41:DC:0E:25:49:47:30:21:03:1F:41:03:69:7E:76:E3:90:15:DF
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018EB5A85F1DBA5B3E360242D9CCCDF56E3D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6kHcDiVJRzAhAx9BA2l-duOQFd8.roa
Signing time:             Sat 06 Apr 2024 23:04:54 +0000
ROA not before:           Sat 06 Apr 2024 23:04:54 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18e:b5a7:cdcb/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:b5:a8:5f:1d:ba:5b:3e:36:02:42:d9:cc:cd:f5:6e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Apr  6 23:04:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ea41dc0e2549473021031f4103697e76e39015df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:16:c3:fd:bd:67:2d:f2:8b:ed:b4:ee:db:33:
                    f8:77:34:5e:87:89:37:3e:52:6e:18:64:1e:d9:bb:
                    64:71:b2:58:5b:70:32:61:6b:4b:0b:d5:aa:fa:5f:
                    35:1b:23:52:56:c6:10:0c:79:bd:c4:44:25:b4:98:
                    41:e1:31:c7:6e:be:76:14:7d:49:a8:b0:38:71:0a:
                    27:71:ba:90:0c:59:b8:bd:b7:3a:b7:ba:85:7e:7c:
                    7c:62:6b:2e:36:c3:b5:f0:3d:cb:e9:e9:66:25:a4:
                    65:2f:71:19:b2:96:f4:15:1a:f9:04:f1:cd:37:c4:
                    93:1a:68:a4:5b:bc:e2:5e:8c:8f:ec:0c:e0:5f:19:
                    fe:78:dc:e4:f6:a5:8c:8f:bd:f6:c5:2e:7a:cf:52:
                    7a:4b:ed:76:a2:74:6f:cb:e7:98:c5:62:23:f7:98:
                    1b:45:db:9e:9d:6f:1a:9a:7a:5a:e8:12:dc:54:ab:
                    cc:47:fd:ef:49:7e:ca:f4:51:10:95:04:e3:b8:7f:
                    9d:a3:d2:68:36:aa:99:c5:6f:17:e5:be:b3:75:98:
                    55:08:41:61:d9:f5:24:7c:89:f0:f2:db:93:c3:fc:
                    c9:ae:40:2b:85:3a:a1:b7:16:65:0c:6e:b9:e4:e0:
                    57:00:04:77:24:3b:1a:f4:fb:70:d2:87:a9:27:8d:
                    4b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:41:DC:0E:25:49:47:30:21:03:1F:41:03:69:7E:76:E3:90:15:DF
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6kHcDiVJRzAhAx9BA2l-duOQFd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:cc:09:5f:57:fd:28:62:66:e6:a6:bb:3b:92:05:eb:82:47:
         f3:bd:30:8b:8b:ba:2e:78:f3:2d:a1:13:f4:f2:fa:a2:fb:59:
         42:6f:1d:fc:95:12:dd:6d:ba:b9:ef:92:21:40:7c:d9:c7:89:
         0d:d4:57:d6:f0:6f:35:02:db:55:85:c3:97:44:d6:6a:0a:f7:
         7e:c5:73:57:62:63:a9:c5:6c:9e:bc:21:5b:db:ea:f1:1f:b4:
         af:db:fe:83:70:8f:f1:a5:c7:ff:ea:f9:49:91:66:c3:9c:1f:
         60:90:3c:f5:fc:34:55:71:a2:18:76:ca:02:e1:0e:47:c6:d0:
         70:a1:a3:03:d7:8b:a4:a7:cf:04:fc:fc:51:99:1d:52:47:7a:
         53:32:a1:7e:c6:6d:07:15:d2:55:c5:14:09:61:51:cf:9f:c0:
         75:39:b7:e2:92:d3:7c:f2:06:6f:85:6f:e7:37:16:4b:c6:9d:
         0e:e3:be:ad:8b:7e:08:cd:b4:be:b8:ea:55:0a:97:d0:15:dd:
         d0:ec:87:05:0d:b1:6e:07:b0:7b:70:00:ac:3b:b7:2c:2c:4d:
         58:d5:97:6b:47:22:bd:e8:82:9a:c7:22:f1:32:ee:62:54:a9:
         86:a1:24:52:6d:5a:4c:d7:92:6f:94:97:f5:da:30:db:39:d8:
         e5:90:02:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:06:37 2025 by rpki-client