This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/AWHVhqUb1FYqZfuTmTCoLEwnmkY.roa
File:                     AWHVhqUb1FYqZfuTmTCoLEwnmkY.roa (raw, json)
Hash identifier:          p/Q3tAPqy1Tf1RwO018rbJIfnjFNV98VOrZGxPMv6zk=
Subject key identifier:   01:61:D5:86:A5:1B:D4:56:2A:65:FB:93:99:30:A8:2C:4C:27:9A:46
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       019599B8A52F48B4982F6633F4DE53CDED10
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/AWHVhqUb1FYqZfuTmTCoLEwnmkY.roa
Signing time:             Sat 15 Mar 2025 12:12:49 +0000
ROA not before:           Sat 15 Mar 2025 12:12:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:99:b8:a5:2f:48:b4:98:2f:66:33:f4:de:53:cd:ed:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Mar 15 12:12:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0161d586a51bd4562a65fb939930a82c4c279a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9b:b8:69:28:79:7d:b5:ba:78:82:3d:41:94:
                    63:0e:a0:aa:d0:68:65:e2:0c:b6:e7:89:28:4a:10:
                    92:14:2c:07:9a:45:ea:f8:c1:d8:5c:a4:32:5e:52:
                    86:4c:76:dd:6a:26:7b:0a:15:33:8c:f6:29:4d:98:
                    f5:31:75:81:2d:30:0e:cd:0a:12:8d:22:2a:c4:dd:
                    70:75:b1:e7:ea:74:eb:db:6b:9d:dc:e0:6a:d2:74:
                    af:c2:7f:fa:9e:bd:ae:0b:55:4d:c4:ef:a1:33:83:
                    6b:c9:e5:a8:80:24:3e:e0:01:c3:0d:3b:c0:e0:9a:
                    54:a4:ba:ec:8d:3c:5c:3e:dd:78:a4:4e:a3:44:e2:
                    41:df:77:f3:f3:7c:dc:94:90:7d:b3:53:d8:db:ba:
                    17:38:bf:7d:74:16:54:7f:69:d6:c5:f9:84:05:0b:
                    c9:f9:99:99:3f:c9:17:5c:26:fb:e3:f1:49:9c:b2:
                    86:d5:5b:34:38:40:39:63:c9:d2:07:6b:90:d7:d3:
                    6a:df:17:32:e1:57:11:b0:5d:00:1d:5a:34:a8:7d:
                    e9:82:cb:67:70:9f:08:87:57:25:d8:65:df:e6:5b:
                    84:04:af:f0:54:9f:3b:9c:97:0d:3a:69:b1:39:7d:
                    fc:90:75:8d:3a:0e:9c:42:60:8d:69:d0:27:aa:83:
                    88:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:61:D5:86:A5:1B:D4:56:2A:65:FB:93:99:30:A8:2C:4C:27:9A:46
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/AWHVhqUb1FYqZfuTmTCoLEwnmkY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:195:86cf:630c/128

    Signature Algorithm: sha256WithRSAEncryption
         85:9a:00:1b:76:4c:6c:92:20:dd:9b:af:8e:5e:ad:34:5d:1e:
         81:9d:04:20:37:35:18:13:70:c1:02:e6:4b:86:24:dd:cc:34:
         a6:a2:b5:9b:9c:60:40:8c:9b:90:fa:08:fe:7e:43:b7:aa:30:
         12:ea:04:b0:9b:44:18:fb:ea:b2:c7:8c:af:ad:fb:b2:00:f5:
         1f:b9:57:f1:08:3c:c1:82:e9:e2:63:55:1e:11:f2:40:0e:3a:
         cd:89:e5:3f:80:60:81:0f:8f:a7:7c:18:64:5a:7b:cb:68:8e:
         9f:d2:81:0b:96:bb:b2:38:6c:01:93:6f:bd:8e:d5:c1:7a:e9:
         4a:1c:6f:1e:6b:f5:89:42:1a:8e:98:9a:2c:4c:82:4c:99:77:
         31:c6:e5:c7:3c:bb:30:5c:96:a0:1b:5b:9a:c5:a5:1d:2b:c2:
         d0:ea:b3:63:f9:43:83:f0:d6:6c:06:d8:ab:a1:12:31:3e:3e:
         00:07:c9:ce:e0:7e:74:0d:84:aa:4c:79:df:f0:1d:08:f8:10:
         65:f1:8f:50:d1:9f:a9:d3:6b:b2:50:2f:a5:45:19:19:29:b1:
         b3:a4:fd:e3:43:12:88:94:d5:d5:9e:4e:d2:6b:22:d5:b8:aa:
         34:8c:84:6d:c7:4e:ed:55:52:b5:f1:e7:82:ea:b9:a2:6a:35:
         19:50:b9:af
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 14 01:56:17 2025 by rpki-client