This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/L1MBadOv6ltz96BBBPU_8qRZnAQ.roa
File:                     L1MBadOv6ltz96BBBPU_8qRZnAQ.roa (raw, json)
Hash identifier:          EhafIOou3MQycXgy2QM13ZaB3saWoO6Ukk6c1NyYOPI=
Subject key identifier:   2F:53:01:69:D3:AF:EA:5B:73:F7:A0:41:04:F5:3F:F2:A4:59:9C:04
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       0192AE89C3AF1272BF47C95B240125A957BC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/L1MBadOv6ltz96BBBPU_8qRZnAQ.roa
Signing time:             Mon 21 Oct 2024 10:05:16 +0000
ROA not before:           Mon 21 Oct 2024 10:05:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:192:ae88:e568/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:ae:89:c3:af:12:72:bf:47:c9:5b:24:01:25:a9:57:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Oct 21 10:05:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2f530169d3afea5b73f7a04104f53ff2a4599c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7c:f0:7f:3f:61:12:10:73:4f:2f:ce:e3:85:
                    7a:72:55:1e:24:79:4d:c3:3d:0d:98:03:36:2f:ad:
                    b2:27:b1:e0:c9:ba:bd:cd:e0:2f:15:b5:97:5d:aa:
                    bc:21:ed:64:d6:ac:52:b2:f3:60:44:0f:c6:d1:32:
                    eb:4c:16:3e:b9:a0:f3:63:57:cb:d2:76:0a:2e:61:
                    4c:46:a4:d4:91:3c:49:12:4e:64:5c:37:36:b6:50:
                    14:ba:fd:21:98:01:84:1f:ec:19:62:44:8c:75:e4:
                    48:f2:31:27:0c:1a:07:33:a4:a2:7e:43:09:fd:a9:
                    da:d3:92:09:79:51:85:12:ef:8a:2f:33:ce:0b:a8:
                    b0:b4:02:4a:d9:09:47:ed:a1:09:9f:a3:1b:1f:94:
                    b8:1e:64:cb:a6:cf:26:63:62:6b:09:e6:4e:bc:dc:
                    5f:21:c9:31:13:56:88:76:57:75:57:73:c4:da:65:
                    99:98:8d:f8:4a:5e:70:81:f9:a6:f2:48:ef:41:e5:
                    0d:b0:63:d9:da:5d:fc:7d:ff:b6:d3:07:ef:87:40:
                    8c:3a:8c:0d:2c:8a:ff:f8:a8:f0:1e:a7:57:a2:98:
                    70:ab:ae:e0:0f:bf:9e:ff:12:2f:9e:e8:00:2c:9b:
                    f8:51:e2:40:79:10:dd:01:b8:be:3d:c4:b2:3f:f9:
                    32:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:53:01:69:D3:AF:EA:5B:73:F7:A0:41:04:F5:3F:F2:A4:59:9C:04
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/L1MBadOv6ltz96BBBPU_8qRZnAQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:192:ae88:e568/128

    Signature Algorithm: sha256WithRSAEncryption
         24:3e:c6:38:4f:7f:5d:d6:e0:05:c6:b5:f6:43:76:a8:62:21:
         be:cc:7d:c9:86:63:10:a4:bb:ce:eb:bc:de:60:66:8e:15:7d:
         fe:0e:e9:9f:b3:c4:52:5a:5a:76:85:b0:95:da:1a:5e:ae:20:
         b2:29:8c:64:af:1b:69:e1:1d:75:dd:37:9a:ae:fb:de:c2:2b:
         ec:67:af:a6:e1:ef:bb:88:52:02:63:19:4b:91:28:cc:e4:f1:
         c4:06:c0:36:b3:2e:08:db:e4:69:4c:ff:ca:bb:21:c5:cc:94:
         29:d9:10:9f:9a:0b:6d:e5:ec:10:38:2a:5d:b3:3a:05:14:b3:
         12:82:f8:e6:4f:7b:fd:3d:f5:ca:bf:ec:59:92:a4:e8:b5:c7:
         9d:a1:46:92:f6:3d:41:3a:69:66:9b:f2:f0:37:95:bf:82:04:
         f4:89:d6:55:3d:45:3e:f0:f0:9e:91:cd:c8:35:84:ea:59:e0:
         ba:3a:a0:55:14:af:a1:9c:7a:45:92:48:79:2f:5e:c7:6b:e4:
         18:41:91:ff:e4:60:38:7d:54:bb:c9:7c:f0:7e:68:2b:f7:71:
         4f:fb:3e:72:09:c5:d9:b0:c9:60:5b:b8:09:69:d6:26:48:1d:
         a6:ae:9b:87:a3:23:be:96:42:5a:c9:b9:b3:3c:9d:db:7f:67:
         de:e6:47:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 14 01:58:05 2025 by rpki-client