This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5q95Kt3EOUo_Ob6fhIBXDw8-DnQ.roa
File:                     5q95Kt3EOUo_Ob6fhIBXDw8-DnQ.roa (raw, json)
Hash identifier:          IEWdtz5r0cj3aNFszUzYmpzOfkKuoFGOIuzpPG49fEQ=
Subject key identifier:   E6:AF:79:2A:DD:C4:39:4A:3F:39:BE:9F:84:80:57:0F:0F:3E:0E:74
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       0194AE4D922D72F6CEBA72941561F33CCB7A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5q95Kt3EOUo_Ob6fhIBXDw8-DnQ.roa
Signing time:             Tue 28 Jan 2025 19:05:06 +0000
ROA not before:           Tue 28 Jan 2025 19:05:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:194:ae4d:1310/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ae:4d:92:2d:72:f6:ce:ba:72:94:15:61:f3:3c:cb:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jan 28 19:05:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e6af792addc4394a3f39be9f8480570f0f3e0e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f8:7f:9d:f1:5d:26:e5:e6:47:ed:83:8c:82:
                    05:b2:42:a2:18:1c:3f:64:e6:85:70:04:38:97:b8:
                    7e:23:98:23:f3:86:97:c8:9c:83:b4:d4:71:22:d2:
                    b8:1f:66:a6:37:55:55:8e:1e:03:09:73:c5:3b:6c:
                    1d:e1:df:83:c4:35:ca:e4:a1:30:e2:67:84:b9:af:
                    20:ef:8d:45:6d:30:18:af:09:be:44:f3:46:88:fe:
                    e9:6c:6d:13:72:29:f3:fd:a5:72:73:d1:73:68:37:
                    08:79:50:20:70:35:db:79:68:fd:f3:01:5a:85:02:
                    ba:d5:19:1b:9b:01:ac:46:b5:92:9c:b5:78:dd:e5:
                    53:c7:54:79:d3:48:72:c4:23:a1:2c:69:af:c6:d4:
                    c0:98:a2:74:dd:9a:38:3f:11:03:53:01:9d:00:1f:
                    24:7c:8f:13:28:9e:46:52:35:ad:13:69:ba:75:b4:
                    73:01:c2:b2:5a:84:30:61:29:97:ea:4b:de:98:a0:
                    55:cc:ee:bb:15:9c:f5:50:0f:8e:03:e4:6b:4e:9a:
                    1f:5f:db:87:a3:fc:a1:b7:a6:30:0d:de:6b:54:bb:
                    61:6d:2b:fa:ca:d3:3a:bc:36:e4:3d:ff:64:a7:14:
                    e9:04:f1:39:eb:c8:08:81:81:e8:e2:40:00:fe:0f:
                    c7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AF:79:2A:DD:C4:39:4A:3F:39:BE:9F:84:80:57:0F:0F:3E:0E:74
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5q95Kt3EOUo_Ob6fhIBXDw8-DnQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:194:ae4d:1310/128

    Signature Algorithm: sha256WithRSAEncryption
         18:ec:98:df:7d:d9:a5:c5:d1:1b:8d:e8:15:6c:41:d2:93:28:
         98:e7:ac:24:96:8a:cd:a4:dd:11:80:69:8d:cb:2f:86:36:e4:
         6e:19:19:94:f7:7a:03:03:68:9c:f2:15:6c:69:e1:93:23:5f:
         5f:19:5e:25:d9:1b:43:a9:1e:e2:2a:6d:37:97:41:d1:05:93:
         21:f0:75:ce:11:d4:7c:f7:6d:94:e1:48:a7:fc:eb:bc:78:13:
         66:2a:6c:e7:a1:84:b3:0c:00:63:1a:84:bc:a2:dd:ff:ce:1b:
         24:12:73:59:ea:97:36:b5:3c:6a:f6:2a:20:e0:d7:0f:01:51:
         fa:b3:11:7d:f8:ba:96:60:42:6f:17:56:de:88:01:13:b7:00:
         c3:f0:bd:9e:ec:53:03:6e:aa:3e:1e:75:5a:4c:48:aa:d0:e6:
         7e:3c:fc:d6:42:33:d4:2e:c0:d1:1b:8a:70:98:d8:e0:be:13:
         17:49:87:57:e8:e3:84:67:4e:2b:87:f2:01:d9:d8:1a:e9:7c:
         16:60:92:3a:e5:b4:66:ac:2c:cc:79:38:56:44:51:ab:83:2a:
         e2:b5:5a:94:90:65:a3:24:80:7d:f6:80:71:a0:79:21:6f:ea:
         dd:dd:b3:78:a2:91:cb:80:4f:e2:f3:35:4a:24:2d:15:25:ae:
         61:1d:b5:9e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 17 19:05:23 2025 by rpki-client