This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WKlr8zlgzwLJCakEO8HwPIaW3Dw.roa
File:                     WKlr8zlgzwLJCakEO8HwPIaW3Dw.roa (raw, json)
Hash identifier:          Hu//nioWoXIoQPqrLEdD5jPKeFb6luvR+1fEr86SbUI=
Subject key identifier:   58:A9:6B:F3:39:60:CF:02:C9:09:A9:04:3B:C1:F0:3C:86:96:DC:3C
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       01916604974D0E2608CA95EAE74859989346
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WKlr8zlgzwLJCakEO8HwPIaW3Dw.roa
Signing time:             Sun 18 Aug 2024 15:04:22 +0000
ROA not before:           Sun 18 Aug 2024 15:04:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
                          2001:67c:64:ffff:0:191:6604:704c/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:66:04:97:4d:0e:26:08:ca:95:ea:e7:48:59:98:93:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Aug 18 15:04:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=58a96bf33960cf02c909a9043bc1f03c8696dc3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b5:f2:a2:1d:92:35:1c:b6:eb:84:38:f3:a8:
                    28:d7:32:f4:f7:97:06:71:e9:66:d3:8d:14:e0:be:
                    46:68:55:45:c8:15:df:38:8d:01:fc:b8:0d:9d:41:
                    8b:34:53:d9:89:0b:72:df:dc:e0:8f:4a:99:7c:60:
                    a4:f6:d9:a4:86:66:57:4e:a9:78:c0:22:6e:fc:fd:
                    38:fe:15:73:94:d5:b4:92:ac:59:11:99:ec:cb:49:
                    73:3d:68:75:d1:40:11:04:f5:50:cd:3c:4b:30:47:
                    49:1e:df:10:58:48:27:9c:5b:76:32:c5:e9:c6:96:
                    6e:a5:49:c6:66:20:05:75:c4:77:e8:ff:71:53:c9:
                    bb:f8:f4:28:7b:d3:c0:8b:55:2b:8c:d2:7c:d0:e4:
                    f0:0c:8b:43:0f:58:78:57:5a:32:c5:87:50:a1:b3:
                    63:68:ce:a5:5a:00:d7:5b:5c:e1:5f:3e:48:b3:77:
                    3e:3a:17:38:11:4a:6b:76:77:7a:6b:b3:8d:ee:c9:
                    95:d2:a9:d4:03:85:c0:bf:7a:b8:97:73:ee:22:da:
                    ef:9d:89:58:fc:87:f5:fb:4b:d4:45:d3:ac:2b:1e:
                    54:e3:7d:9c:ec:36:61:fd:b4:c0:be:10:1c:72:fa:
                    a0:d7:62:2c:a4:21:6a:6a:79:ad:21:77:71:ea:59:
                    fc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A9:6B:F3:39:60:CF:02:C9:09:A9:04:3B:C1:F0:3C:86:96:DC:3C
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WKlr8zlgzwLJCakEO8HwPIaW3Dw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:190:fdf2:f302/128
                  2001:67c:64:ffff:0:191:6604:704c/128

    Signature Algorithm: sha256WithRSAEncryption
         4c:86:6a:57:01:d1:ad:d6:37:e3:04:90:1e:f1:9d:35:ce:88:
         52:0d:d6:84:97:46:70:8e:4d:af:a7:9c:2a:7f:18:ca:c6:4f:
         b2:d2:e8:9a:d5:f7:c4:9a:2f:e8:97:ce:7f:ca:9c:b0:20:ed:
         fe:5d:d1:5d:6f:5d:06:7f:a8:fa:e9:1f:6f:8d:73:4e:69:03:
         02:28:2f:c6:c3:d5:eb:11:a9:75:f9:bb:b0:b0:89:46:71:47:
         42:da:ac:a9:0f:d8:8f:01:ec:64:d7:80:d8:17:aa:89:13:79:
         5c:3f:7f:d5:4c:e0:79:3b:be:22:f0:32:47:da:95:31:00:58:
         81:f9:2f:0d:67:51:c0:9f:31:c9:be:80:68:b9:fe:29:e4:ce:
         84:03:dc:a9:54:af:d6:d4:ee:bf:6a:f5:21:2c:4f:f8:56:a0:
         29:60:a6:35:61:8f:71:6b:3c:dd:c2:f3:4d:ce:c8:27:5d:59:
         a6:8c:87:97:67:f1:44:cd:54:d0:26:d2:9c:35:43:c4:38:d8:
         56:1e:b6:e0:55:8d:13:5e:62:e1:b9:5f:73:46:b0:bc:8e:61:
         5b:2e:dc:09:b2:45:e2:1a:9e:f3:0f:3f:15:4e:e4:48:53:f2:
         ef:6d:d2:46:22:08:90:ac:c8:bb:04:fa:ee:97:9b:cc:e2:0a:
         36:03:f5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 09:13:22 2025 by rpki-client