This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EbUavq5nqPsQJcALiM71uAwbXQQ.roa
File:                     EbUavq5nqPsQJcALiM71uAwbXQQ.roa (raw, json)
Hash identifier:          HPcILIrEOmG4Oad+Yd9T0oM3PYsdsFjAPRx3YwALHYE=
Subject key identifier:   11:B5:1A:BE:AE:67:A8:FB:10:25:C0:0B:88:CE:F5:B8:0C:1B:5D:04
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       019143473129C201B61110858459AA3264D2
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EbUavq5nqPsQJcALiM71uAwbXQQ.roa
Signing time:             Sun 11 Aug 2024 21:10:24 +0000
ROA not before:           Sun 11 Aug 2024 21:10:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:43:47:31:29:c2:01:b6:11:10:85:84:59:aa:32:64:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Aug 11 21:10:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=11b51abeae67a8fb1025c00b88cef5b80c1b5d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c6:a5:59:2f:67:ec:63:60:a8:89:d9:f1:0e:
                    34:b7:00:5f:cf:20:7e:03:49:2f:90:8e:be:b0:89:
                    cd:7e:c9:a7:5d:15:09:2f:8c:b2:cb:08:48:0f:b0:
                    aa:e8:2c:c1:1a:a5:f4:ac:ff:da:ce:26:4e:a9:8e:
                    59:58:6f:33:89:f1:90:e5:b7:1f:3b:ff:af:e5:d3:
                    d3:6e:e0:4c:1f:26:b7:ea:db:05:fa:72:a3:8a:1a:
                    86:3b:58:3c:77:56:ae:b6:81:e6:e3:08:81:92:78:
                    ff:18:ca:3b:5e:c2:28:fe:a0:19:3d:4d:a9:1c:a0:
                    6e:2b:b6:38:60:90:f4:38:32:42:f6:95:1d:08:12:
                    fa:76:a5:ef:61:f6:7b:19:de:ff:6d:94:3a:9a:6e:
                    61:5e:1a:20:7c:c2:86:fd:26:63:b1:27:47:88:78:
                    8f:97:8b:a4:d5:df:ba:0d:35:94:30:82:20:46:e3:
                    64:2e:85:a0:b0:ad:f5:bc:fd:43:d1:16:04:1e:f4:
                    71:f1:13:ab:09:21:25:2f:b5:f3:48:e8:21:40:93:
                    4f:c2:15:2d:3b:f8:e4:61:10:66:b2:8d:5e:77:36:
                    61:cf:34:4f:92:29:3c:54:84:ea:14:bb:aa:53:c4:
                    c7:e5:ef:68:85:30:68:a0:f8:48:d7:0e:e6:0f:3a:
                    a8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B5:1A:BE:AE:67:A8:FB:10:25:C0:0B:88:CE:F5:B8:0C:1B:5D:04
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EbUavq5nqPsQJcALiM71uAwbXQQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:190:fdf2:f302/128

    Signature Algorithm: sha256WithRSAEncryption
         8c:77:db:67:47:44:11:94:c5:0c:56:e3:e8:2f:bb:c7:de:c0:
         c7:77:d1:09:07:d6:07:60:5a:8b:28:fa:3d:73:44:44:b9:90:
         53:1a:47:c8:3e:d5:8e:63:f9:4b:7d:ba:db:42:73:51:76:6a:
         6e:16:6a:de:69:9b:3b:ed:e4:02:3a:47:aa:bf:51:4c:48:10:
         53:cc:25:b8:82:02:54:6a:a6:c1:2e:17:d2:2e:60:f3:ea:1b:
         16:53:84:51:83:dd:84:64:a4:06:d5:4d:ee:21:8d:83:8b:e5:
         38:43:53:fc:24:df:1f:ac:b5:b3:ad:64:dd:e0:61:9b:92:b3:
         e5:cd:b0:e2:b1:41:a6:31:1e:7c:b7:ed:5f:f0:1b:8e:37:56:
         22:32:22:7f:0d:3e:5a:2a:cb:79:ff:78:4d:f0:2d:86:96:64:
         46:54:17:21:0a:51:36:fe:d8:56:f6:72:bc:33:14:44:98:d4:
         ec:cd:5b:7b:e8:dc:5c:d7:bf:b2:f3:54:d1:2b:69:ef:db:85:
         9c:b9:95:45:a6:60:a7:eb:64:66:d5:e1:20:58:04:f0:b1:d4:
         2b:35:6e:26:04:99:88:c1:d7:e9:0b:7a:fa:59:b5:4b:23:cd:
         53:ec:30:ad:81:ca:55:6f:69:a1:e5:16:cb:92:a7:57:b1:c3:
         7e:3a:f1:ac
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Dec 15 04:52:07 2025 by rpki-client