This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uIR55zBXrS2ktOxsdUOGhMR59jA.roa
File:                     uIR55zBXrS2ktOxsdUOGhMR59jA.roa (raw, json)
Hash identifier:          dWdBVI/05JqDzqz79pCE/xncERJcXOTedyqB1g1fZYo=
Subject key identifier:   B8:84:79:E7:30:57:AD:2D:A4:B4:EC:6C:75:43:86:84:C4:79:F6:30
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018E193B4FA5454ECE0F35084EFEE56ECC08
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uIR55zBXrS2ktOxsdUOGhMR59jA.roa
Signing time:             Thu 07 Mar 2024 14:05:01 +0000
ROA not before:           Thu 07 Mar 2024 14:05:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
                          2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
                          2001:67c:64:ffff:0:18e:193a:a12b/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:19:3b:4f:a5:45:4e:ce:0f:35:08:4e:fe:e5:6e:cc:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Mar  7 14:05:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b88479e73057ad2da4b4ec6c75438684c479f630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e9:3e:22:c7:8b:40:da:68:03:f6:dd:be:6c:
                    fe:38:d5:b9:de:f4:94:2f:3f:48:95:9a:89:56:67:
                    ce:fa:e5:51:3c:0d:f6:8a:ee:cb:ef:16:2c:c8:05:
                    f9:43:90:dd:0b:a5:bf:2f:fe:93:f1:30:00:6b:82:
                    d6:53:ab:5a:9c:ce:65:5a:20:7f:c3:3e:3a:d2:bb:
                    eb:5e:a1:98:2f:99:36:9f:34:c9:c2:ee:6b:af:37:
                    93:f8:49:4a:1b:a0:66:d8:ff:f0:1a:bd:5e:c4:c6:
                    49:3b:3e:b2:2e:1f:d0:fd:2f:2b:e5:5c:44:34:36:
                    b4:1a:cf:41:59:6a:4d:ee:cf:8d:ab:3b:08:97:8c:
                    42:37:2f:a1:97:7a:a2:6d:e9:c9:d7:e6:f0:5e:14:
                    79:49:85:73:85:45:f0:d1:ac:7d:db:f7:31:86:db:
                    ba:ae:fd:fb:3a:2f:53:88:4e:74:6d:81:fa:3c:2c:
                    eb:5c:f1:73:63:84:61:e8:c8:55:bb:32:0f:4b:60:
                    0a:5a:f8:4c:be:a8:f4:ad:f1:38:ae:08:8e:2a:71:
                    1f:e7:33:b6:1f:14:5b:62:97:64:68:a1:18:ab:97:
                    f7:e1:d7:d5:c6:47:10:0e:0d:cb:49:2f:4d:3b:7f:
                    da:11:0d:bc:e5:7a:3f:06:77:ce:ac:a3:d0:4c:ac:
                    ee:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:84:79:E7:30:57:AD:2D:A4:B4:EC:6C:75:43:86:84:C4:79:F6:30
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uIR55zBXrS2ktOxsdUOGhMR59jA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:3c:67:20:9d:c3:12:d6:46:38:9c:1c:5f:a5:73:5e:bf:ae:
         cf:90:d4:f4:b7:49:90:0a:9a:fa:7e:b5:9a:e6:c2:5c:8d:7c:
         4d:f5:bf:b3:ed:57:c4:5a:7a:ac:b7:d6:b7:79:50:5e:1c:0d:
         05:e1:e4:88:55:05:4f:fb:56:6b:e9:28:d3:a8:b4:c3:13:5b:
         68:4e:16:08:2e:bf:84:2c:b5:e8:5a:ad:0f:b1:cb:52:28:9f:
         8e:f5:70:94:27:07:fd:58:0e:20:f6:c2:10:6e:ab:90:cc:64:
         9b:97:ca:35:bb:39:7c:d7:8d:36:66:7b:08:74:2e:db:fc:54:
         f9:8d:6b:ce:bc:09:81:19:33:07:2f:56:8c:6e:cc:ef:ad:83:
         a0:4f:1b:81:b4:04:e2:94:8a:11:63:e7:d5:9e:9e:2d:68:38:
         25:7a:25:57:1c:e3:a4:49:3a:25:22:49:d5:00:67:d4:ba:91:
         5e:f5:22:fc:84:f6:af:e1:69:66:6a:87:80:4f:6f:77:b7:55:
         7b:3b:b6:73:8f:cf:39:1d:6b:61:5d:85:3a:1b:a2:79:38:09:
         2a:90:cd:ee:de:dd:8f:eb:66:ff:06:42:bc:79:11:c9:c9:65:
         be:05:8d:9a:74:ed:fd:83:db:bf:92:07:e6:26:61:1b:a9:19:
         ce:7a:25:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:21:53 2025 by rpki-client