This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Rrd6_RwrjrJhQX-7vIZu7s8nfx8.roa
File:                     Rrd6_RwrjrJhQX-7vIZu7s8nfx8.roa (raw, json)
Hash identifier:          BI6h8efY+eb/cq4PQ/ItVr9ZtVoP680VwFpmCOJBwLo=
Subject key identifier:   46:B7:7A:FD:1C:2B:8E:B2:61:41:7F:BB:BC:86:6E:EE:CF:27:7F:1F
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       019002B379053D54C887A6759429C40020D9
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Rrd6_RwrjrJhQX-7vIZu7s8nfx8.roa
Signing time:             Mon 10 Jun 2024 15:10:34 +0000
ROA not before:           Mon 10 Jun 2024 15:10:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:02:b3:79:05:3d:54:c8:87:a6:75:94:29:c4:00:20:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jun 10 15:10:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=46b77afd1c2b8eb261417fbbbc866eeecf277f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:18:a9:44:c0:2b:96:aa:fa:1e:ef:56:61:72:
                    d1:49:9d:6f:d7:9e:15:00:98:f6:ec:9f:3a:1c:d2:
                    ab:7e:84:18:b2:c1:18:2a:7e:6c:3c:fb:3f:84:43:
                    e7:77:33:18:6f:c6:cb:47:99:01:52:42:b2:01:4e:
                    14:a8:7d:99:4e:31:e8:53:80:bd:02:fe:0c:d7:45:
                    af:59:d8:60:e9:03:35:6f:0d:8f:0b:0d:f7:18:ea:
                    34:2c:2f:81:25:77:cf:0d:49:78:e8:3b:22:79:8a:
                    16:46:f2:56:0c:63:95:48:18:62:2c:94:78:7e:db:
                    f7:c5:9e:55:20:ad:fe:7c:b5:15:71:b5:da:80:4b:
                    a4:da:b7:86:6e:21:30:91:78:b4:68:71:26:f3:11:
                    8a:6e:f7:c5:af:d7:af:67:fa:a4:45:ee:f3:90:ec:
                    0d:dd:ae:73:8a:9f:79:e2:40:3b:2b:77:ca:7e:ea:
                    cd:06:ec:1c:bc:d2:af:d9:df:1a:05:7e:0c:99:8e:
                    6b:74:ef:d9:09:3a:98:51:d1:5f:56:34:70:8a:34:
                    e6:d8:46:98:58:ef:fa:bc:d2:5b:b8:26:2e:49:6f:
                    d9:b7:61:7c:60:ae:40:49:96:be:20:03:7a:59:f9:
                    08:c0:cf:ec:b2:0c:d1:a2:d6:13:22:18:fa:45:81:
                    44:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B7:7A:FD:1C:2B:8E:B2:61:41:7F:BB:BC:86:6E:EE:CF:27:7F:1F
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Rrd6_RwrjrJhQX-7vIZu7s8nfx8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:f9:81:b0:16:ee:bf:ea:c3:47:30:c9:d5:0b:6a:86:4e:9a:
         46:3f:dd:5f:65:32:7b:e5:d5:a0:a8:bf:6a:bf:7d:a6:80:5b:
         42:ac:73:87:3d:fb:03:68:d9:37:1b:2a:0f:dd:9f:cb:b3:14:
         e6:48:64:71:93:a8:59:ed:18:f3:08:5c:43:c3:f9:3d:7c:48:
         2c:cf:7c:60:54:69:b9:f5:8e:46:4a:b7:41:29:51:cd:5e:75:
         82:99:ae:b9:8a:f6:90:10:0f:fd:b7:92:45:d2:7f:79:b4:3a:
         a6:f9:9a:d3:72:2b:8d:16:30:32:61:1d:57:92:f9:bd:3c:98:
         9f:37:16:2f:c8:56:cf:15:84:b0:43:ea:8c:05:d7:09:22:48:
         65:d8:21:a8:a1:1f:69:b9:67:c4:f0:c2:cd:47:1c:be:63:ce:
         d6:b6:fb:84:1f:c3:38:c8:d1:f9:b1:a3:07:c3:d6:f7:8b:20:
         fc:68:5d:0c:34:6a:f4:88:8c:2c:fd:19:62:e9:8d:f2:d0:d1:
         57:2f:38:0b:a9:8c:7f:ee:07:3d:79:06:a3:81:c2:52:19:7c:
         55:22:19:43:26:7d:af:a7:ec:b4:80:cd:66:16:ae:18:ee:89:
         2d:61:bf:ce:9c:5d:22:43:bd:29:ff:0e:47:e9:c4:64:e6:9e:
         84:cc:7f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 01:54:40 2025 by rpki-client