This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/CL0GaXY7yCF5tOCyer_cfY0bb2w.roa
File:                     CL0GaXY7yCF5tOCyer_cfY0bb2w.roa (raw, json)
Hash identifier:          4wxodrilwD6GGNBy2bD0L4OdR/Uc4+KEJti7NWoScmA=
Subject key identifier:   08:BD:06:69:76:3B:C8:21:79:B4:E0:B2:7A:BF:DC:7D:8D:1B:6F:6C
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       019375AA387E3986B43352D8B4007FF64A85
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/CL0GaXY7yCF5tOCyer_cfY0bb2w.roa
Signing time:             Fri 29 Nov 2024 02:05:09 +0000
ROA not before:           Fri 29 Nov 2024 02:05:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:193:75a9:83f0/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:75:aa:38:7e:39:86:b4:33:52:d8:b4:00:7f:f6:4a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Nov 29 02:05:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=08bd0669763bc82179b4e0b27abfdc7d8d1b6f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:06:00:66:1b:02:7c:df:45:e9:c9:69:4a:
                    53:9e:cc:be:b4:41:c8:b6:09:3e:af:8a:a6:66:fe:
                    29:37:57:b2:09:cf:a8:bf:59:8a:cc:8f:a5:21:d8:
                    3e:0c:04:52:c9:b9:b6:5a:aa:45:ad:ab:d4:f5:19:
                    2a:f6:f9:00:0e:19:6b:0f:4a:0a:50:5d:23:c4:68:
                    3a:98:e6:7a:b5:0f:cb:96:58:57:58:bf:3c:a8:e5:
                    b5:5e:55:d5:2c:3f:94:06:ec:12:3a:ca:c8:92:45:
                    11:51:71:9c:6a:d6:b2:17:c4:7c:64:97:05:be:f5:
                    a7:02:4b:e6:27:79:72:bc:90:de:d0:10:19:97:55:
                    74:34:d7:af:98:a6:0a:4e:35:19:28:83:ea:76:bc:
                    42:5b:18:89:21:f7:72:60:9e:3d:6f:13:fd:31:d9:
                    6e:d0:69:4e:10:c9:b6:7a:dd:c4:13:3c:b1:6f:f4:
                    1e:34:fd:f8:01:56:f1:8f:5b:20:ee:6a:1b:c2:68:
                    b1:ef:cf:3d:3f:0f:51:8a:f7:02:89:e2:4b:6f:c5:
                    40:ea:eb:24:74:86:41:7b:60:7f:60:96:dd:f5:3f:
                    e5:3e:09:4f:38:fa:fa:b5:ce:75:10:35:f3:28:2d:
                    77:3d:47:b5:91:e0:4d:04:7f:59:2e:cd:f6:c5:76:
                    f9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BD:06:69:76:3B:C8:21:79:B4:E0:B2:7A:BF:DC:7D:8D:1B:6F:6C
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/CL0GaXY7yCF5tOCyer_cfY0bb2w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:193:75a9:83f0/128

    Signature Algorithm: sha256WithRSAEncryption
         38:86:26:cb:01:b8:05:5b:e2:1d:cf:54:81:8c:4e:98:55:f8:
         29:6b:f2:f7:6b:ca:04:90:37:4a:9c:7d:9a:bc:d0:19:ed:18:
         10:c2:cb:f7:f2:8f:1b:34:35:c3:91:90:28:11:92:32:85:e5:
         a6:47:62:93:5e:b2:1f:76:53:24:51:1f:01:8f:45:4f:6e:e7:
         26:03:4c:10:89:42:32:78:1f:63:ca:56:55:0f:79:f2:5f:be:
         21:80:80:19:3d:ff:98:85:61:36:1d:91:9a:74:7b:3b:80:4f:
         c4:f9:f4:6e:9a:7d:4c:56:b8:92:14:8a:d3:72:ae:80:90:a6:
         fa:95:1b:e2:0a:6d:de:16:ac:a4:54:87:c3:5b:23:d0:af:27:
         37:a4:c9:1c:15:10:67:a1:5f:55:bc:2a:04:f6:4c:52:13:e6:
         ed:87:1a:11:ea:1a:ff:cd:99:33:db:5d:69:e2:f7:12:8e:c2:
         76:c8:a0:d9:a4:e3:e5:40:b3:04:35:b3:80:aa:f0:41:48:41:
         ee:ef:52:65:49:53:1a:43:a0:c8:78:30:83:0d:a8:ba:ef:63:
         42:7a:a6:e7:18:24:3a:bd:fe:c6:46:07:57:6c:e4:28:20:6e:
         51:99:93:b9:0d:c6:96:23:3f:6f:e5:dc:61:0f:8b:03:88:ae:
         13:67:e9:56
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 14 03:33:43 2025 by rpki-client