This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/T7SDQyRAIsqVl6Cmm46qRUtn_6k.roa
File:                     T7SDQyRAIsqVl6Cmm46qRUtn_6k.roa (raw, json)
Hash identifier:          g7NZVD7X0IMioA761DPVNZNbHYv8v7O8bYur03QDLmE=
Subject key identifier:   4F:B4:83:43:24:40:22:CA:95:97:A0:A6:9B:8E:AA:45:4B:67:FF:A9
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       019094D5BEBC9023588AA5376B0A96C13E24
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/T7SDQyRAIsqVl6Cmm46qRUtn_6k.roa
Signing time:             Tue 09 Jul 2024 00:12:34 +0000
ROA not before:           Tue 09 Jul 2024 00:12:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:94:d5:be:bc:90:23:58:8a:a5:37:6b:0a:96:c1:3e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jul  9 00:12:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4fb48343244022ca9597a0a69b8eaa454b67ffa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:01:99:4d:6d:44:05:c9:9b:6f:39:fe:25:cc:
                    3f:99:b0:e9:52:c4:4a:cc:f2:7a:32:64:9d:f2:17:
                    d2:70:66:32:ce:f2:16:3f:93:5d:52:78:dc:ab:07:
                    51:55:85:00:34:9e:76:36:ad:1e:3a:94:3a:6f:89:
                    9e:47:ba:11:0b:70:37:40:19:87:b2:df:4a:be:de:
                    23:87:73:16:49:ad:20:a1:22:77:2b:3f:c1:05:bd:
                    80:d8:37:e9:ca:3c:d5:d8:c8:bc:2c:4d:df:62:44:
                    6d:95:b7:b3:41:8e:03:ff:09:42:59:69:ae:ca:4e:
                    44:86:ee:a4:63:8c:45:e1:2b:9c:4f:5a:80:f5:cd:
                    2f:b6:50:b4:4a:93:24:8c:70:b5:db:e8:92:cb:f3:
                    65:fe:24:85:4a:00:2c:91:45:aa:14:94:9f:30:c5:
                    b1:00:d1:85:c5:7e:13:b6:9c:3e:5e:3e:ea:cc:a5:
                    c1:68:5f:77:5b:ba:f1:60:49:9e:82:4c:49:72:8b:
                    fe:da:cd:4b:95:f0:b8:99:d1:90:33:c0:72:71:86:
                    83:1b:c9:14:ce:ee:f6:d8:2a:97:94:c9:5d:73:29:
                    0e:18:f0:01:08:12:79:72:66:c4:36:e2:ec:7b:30:
                    9c:99:bb:be:1b:f6:2a:6a:54:63:55:64:43:b7:2a:
                    c3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B4:83:43:24:40:22:CA:95:97:A0:A6:9B:8E:AA:45:4B:67:FF:A9
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/T7SDQyRAIsqVl6Cmm46qRUtn_6k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:bc:6b:ad:46:94:8c:6c:55:72:d4:50:4d:27:a4:71:35:23:
         11:12:11:33:b9:bc:08:87:fa:2a:fe:d6:88:e0:cd:87:8c:f9:
         7d:fc:ad:da:54:92:99:bf:f1:7c:a6:d3:a6:0f:70:f9:a8:e0:
         12:ae:2b:70:54:a0:4a:41:a7:15:96:eb:72:3a:94:42:74:1e:
         6d:64:8b:c5:b5:8a:eb:07:1a:fc:6c:cb:4d:25:0e:62:81:2a:
         f3:a1:bf:e6:3d:70:f8:90:fb:c9:2b:12:df:6a:f0:85:54:e9:
         f2:68:45:19:35:43:63:e6:16:46:a1:9d:2e:79:b4:3f:87:e6:
         11:57:1b:d3:5b:99:cf:93:b6:52:5c:2d:23:20:3f:50:fb:0a:
         7f:b0:7a:6c:98:34:69:ba:f2:12:8e:ef:3f:87:6e:6b:c2:2e:
         62:72:44:5b:a9:7a:cc:24:d8:ef:cb:c3:8b:ab:21:0c:27:84:
         43:2d:18:5d:dc:23:6d:5c:1d:9f:e5:1f:1f:89:e4:2f:87:9c:
         56:bf:24:62:73:45:0d:55:b1:d2:c1:c6:10:1f:a6:ba:b9:55:
         46:42:96:21:07:92:7b:f2:10:88:cb:68:3e:7c:f0:b9:3a:f7:
         df:fa:9b:b8:7a:59:de:53:78:c9:31:e4:0d:e0:7e:61:05:b9:
         c5:7b:00:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 07:42:41 2025 by rpki-client