This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VYuwG_xmQS7bmXdiD2ZgZXCy9os.roa
File:                     VYuwG_xmQS7bmXdiD2ZgZXCy9os.roa (raw, json)
Hash identifier:          G+09tzRH/LWRVO9+k4B+iVSejRBn89Qh+RWKS55ICVU=
Subject key identifier:   55:8B:B0:1B:FC:66:41:2E:DB:99:77:62:0F:66:60:65:70:B2:F6:8B
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       01912FC1055C5775BD2FE325F206251286E8
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VYuwG_xmQS7bmXdiD2ZgZXCy9os.roa
Signing time:             Thu 08 Aug 2024 02:11:04 +0000
ROA not before:           Thu 08 Aug 2024 02:11:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:2f:c1:05:5c:57:75:bd:2f:e3:25:f2:06:25:12:86:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Aug  8 02:11:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=558bb01bfc66412edb9977620f66606570b2f68b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:00:86:e6:8a:24:42:31:c8:0d:40:c2:57:e9:
                    27:5f:36:1a:44:67:1b:96:06:11:e2:c8:a2:96:40:
                    2b:b8:67:74:1a:11:cb:34:e5:4a:c4:19:72:77:80:
                    cf:de:0c:64:20:cb:1c:ba:75:01:a3:b2:b6:cc:37:
                    21:f1:4b:59:86:a3:21:6b:40:db:0c:11:49:54:60:
                    aa:b0:5f:e4:74:2f:f0:ab:15:74:ab:e9:ab:fe:ff:
                    1d:72:cc:45:15:7c:34:7d:c1:86:b0:56:8a:00:cf:
                    fd:93:ed:0d:77:98:cc:e0:8e:5c:dc:93:41:97:8f:
                    61:44:52:be:d8:bf:22:c4:e0:35:9f:0b:d8:cd:56:
                    67:a6:a8:20:c6:b7:ce:d0:6d:dd:3e:ed:75:3b:54:
                    01:9e:6c:9d:d9:f1:ed:9b:b5:77:e1:4a:29:b4:82:
                    1e:f7:cb:49:cb:4d:e2:23:5a:e7:01:86:12:d4:bc:
                    f5:f5:de:8c:b6:12:55:ce:f3:48:97:40:5d:98:ad:
                    bd:6e:9f:f5:97:bc:98:f4:7e:04:f8:f3:54:b2:6c:
                    af:34:d2:b5:13:02:08:8a:58:58:43:af:c5:b5:ad:
                    1b:e8:91:67:52:8b:ef:6f:4f:09:34:92:20:b8:19:
                    4e:ad:72:ec:9d:44:4a:84:f5:87:5c:90:16:94:bf:
                    02:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8B:B0:1B:FC:66:41:2E:DB:99:77:62:0F:66:60:65:70:B2:F6:8B
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VYuwG_xmQS7bmXdiD2ZgZXCy9os.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:190:fdf2:f302/128

    Signature Algorithm: sha256WithRSAEncryption
         6a:93:fa:1c:94:69:36:42:82:05:17:9f:5b:e3:ea:30:23:b5:
         52:9d:4e:79:ee:f2:1f:34:76:dd:d9:14:5b:2b:6c:a6:14:63:
         8b:ab:0b:81:0a:ae:1b:3e:4a:3b:25:68:a6:11:31:60:66:bd:
         63:c7:7f:fd:a2:c0:3e:48:bc:63:ff:5d:62:55:3a:80:55:9c:
         f9:77:0e:87:a2:03:23:61:75:b0:df:74:b3:f2:56:c6:fd:ab:
         6e:bd:79:74:50:d2:24:0b:f7:ee:50:55:88:a9:41:f2:dc:dc:
         8b:73:5e:26:05:1b:a2:98:14:07:2a:ba:7d:6b:7a:88:2a:2e:
         17:76:7f:40:53:5f:4c:8a:01:dd:40:ae:16:57:9b:db:79:fa:
         3a:a7:7f:a7:3f:ff:6e:95:1b:a2:48:03:e7:1e:f6:e8:3e:13:
         0c:52:27:a2:60:de:48:6c:0b:17:ec:d5:af:89:f1:83:53:0f:
         7f:7f:26:1b:d1:41:25:9f:8f:af:83:31:9b:c2:1b:34:d3:10:
         4b:34:39:b6:8e:44:5b:18:af:bc:66:30:f1:ba:68:94:9c:7b:
         ae:40:02:43:b6:03:6e:7c:b7:d9:e4:66:18:06:6d:ba:b6:c5:
         b5:ae:cc:8f:53:c9:cb:48:db:9d:06:0d:c4:8f:7f:3e:a1:1c:
         9c:e8:64:3f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 14 01:57:01 2025 by rpki-client