This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/SfdDeO8z29BMiM_Lwo3WW6OVNBA.roa
File:                     SfdDeO8z29BMiM_Lwo3WW6OVNBA.roa (raw, json)
Hash identifier:          s3+aarqcltRdLuKUH/lW5y1cxKoZwytl69henyIlmpI=
Subject key identifier:   49:F7:43:78:EF:33:DB:D0:4C:88:CF:CB:C2:8D:D6:5B:A3:95:34:10
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       0191DC0FCD938A22A4BEAD4AAE0FBBF627A6
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/SfdDeO8z29BMiM_Lwo3WW6OVNBA.roa
Signing time:             Tue 10 Sep 2024 13:11:48 +0000
ROA not before:           Tue 10 Sep 2024 13:11:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
                          2001:67c:64:ffff:0:191:d606:d79c/128 maxlen: 128
                          2001:67c:64:ffff:0:191:d82c:371b/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:dc:0f:cd:93:8a:22:a4:be:ad:4a:ae:0f:bb:f6:27:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Sep 10 13:11:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=49f74378ef33dbd04c88cfcbc28dd65ba3953410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4e:5d:ad:67:fe:ea:0c:8f:ee:d3:94:14:7f:
                    46:cb:6e:45:03:c9:1e:fd:fe:bb:03:d3:1f:2a:4e:
                    24:44:cd:ff:52:c0:3c:45:84:a6:95:f7:af:82:02:
                    79:f9:4e:98:07:26:0e:c9:e6:45:6d:dc:58:97:3c:
                    53:29:af:0a:75:11:3d:96:61:be:35:eb:62:01:04:
                    00:1b:92:8e:a5:d0:56:5b:68:6e:10:a3:5d:39:dd:
                    57:1b:0b:d9:75:8a:fa:ff:ec:f9:2c:54:6a:7e:94:
                    3b:35:d1:38:ac:29:bf:92:19:21:05:95:a2:79:28:
                    45:2d:ad:0e:d6:0d:50:05:3b:99:4e:57:66:a9:f8:
                    cc:5d:4d:6c:d0:d8:09:ff:3e:03:02:7a:50:28:eb:
                    b8:14:93:fd:fb:fd:6c:bd:58:e5:0a:b1:72:bb:59:
                    1c:7c:37:58:75:ca:a5:95:eb:9d:be:8b:87:46:cb:
                    f1:53:5d:6d:6f:d8:c9:de:54:5c:63:d2:7c:1f:ff:
                    7f:04:73:67:2c:f0:7d:e1:74:69:ab:0e:20:58:ac:
                    9b:30:47:d4:9d:0e:c4:29:4d:23:85:58:7e:8e:5d:
                    30:0a:d0:ad:40:31:59:09:78:91:d7:f2:80:f0:02:
                    1e:71:9d:b2:e4:de:09:4b:23:80:7e:0d:01:40:db:
                    d2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F7:43:78:EF:33:DB:D0:4C:88:CF:CB:C2:8D:D6:5B:A3:95:34:10
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/SfdDeO8z29BMiM_Lwo3WW6OVNBA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:190:fdf2:f302/128
                  2001:67c:64:ffff:0:191:d606:d79c/128
                  2001:67c:64:ffff:0:191:d82c:371b/128

    Signature Algorithm: sha256WithRSAEncryption
         32:b0:30:b5:82:98:80:16:da:5e:8e:34:54:90:ba:3f:a1:47:
         94:6d:6d:b3:7c:52:99:d7:19:1f:4e:d8:ab:28:26:3f:46:de:
         92:32:55:00:02:f8:63:ca:35:5a:9d:29:80:a3:44:f4:ca:af:
         9f:38:44:f8:63:b7:54:df:0f:47:b9:00:70:04:27:15:3c:46:
         16:e1:4d:a7:e7:8d:17:38:92:de:9a:aa:81:2b:56:e9:ec:28:
         b8:6b:2b:f0:89:20:6e:d6:d6:15:ed:9b:64:92:5e:32:31:8b:
         65:de:1b:24:53:60:c9:db:4f:1e:ef:68:da:e3:c2:01:4d:82:
         98:bb:e6:1c:63:e1:b8:70:71:96:29:00:21:bb:a6:c5:e0:3e:
         11:fa:a8:2e:94:31:de:a1:ee:0d:51:46:fe:6f:72:43:10:a9:
         fa:50:41:6a:df:c7:f2:e8:45:c4:b3:42:a6:33:6b:f6:7b:d5:
         a7:ce:23:c2:2d:5d:3e:38:b4:a1:35:60:5b:36:5c:18:5d:e3:
         e2:d3:8e:af:96:b1:cf:ea:e6:ab:3f:64:f6:f7:00:9e:99:40:
         e5:25:a4:62:38:19:c1:a7:3d:fc:03:85:81:12:ac:12:d4:31:
         66:5c:80:d3:39:77:95:a3:6c:bb:2b:e7:8e:16:9e:b4:a1:ac:
         dc:0a:9a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 19:27:00 2025 by rpki-client