This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_pRC_adGFfimLgguBsjS5TCUJW8.roa
File:                     _pRC_adGFfimLgguBsjS5TCUJW8.roa (raw, json)
Hash identifier:          4pWkPa+qO3xAETI1VF1jmI/ck2CQH1V5AM8dpFBA1uo=
Subject key identifier:   FE:94:42:FD:A7:46:15:F8:A6:2E:08:2E:06:C8:D2:E5:30:94:25:6F
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       01918CE28B2F9FD8ED08D84F9ACB6A34511F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_pRC_adGFfimLgguBsjS5TCUJW8.roa
Signing time:             Mon 26 Aug 2024 04:12:22 +0000
ROA not before:           Mon 26 Aug 2024 04:12:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:8c:e2:8b:2f:9f:d8:ed:08:d8:4f:9a:cb:6a:34:51:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Aug 26 04:12:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fe9442fda74615f8a62e082e06c8d2e53094256f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c4:1f:49:30:89:d8:0b:94:c3:0b:0e:d2:3c:
                    50:32:ed:62:f7:c4:5c:ec:cd:7e:36:f5:30:b9:83:
                    aa:a2:d9:de:51:09:84:81:ea:76:e8:8c:29:f5:c2:
                    c8:18:9e:fe:9e:63:4a:84:aa:32:95:ab:f5:b7:98:
                    cb:60:ee:61:b1:fc:c4:46:8c:2b:aa:fc:7b:5f:d9:
                    33:92:8d:51:69:7a:ae:e4:a1:fe:2f:2a:30:49:c6:
                    1c:f7:f3:0b:d7:c0:10:1d:e5:58:ee:c2:ca:85:f9:
                    0a:94:87:86:04:4f:7d:00:2a:fe:cc:ad:89:e3:53:
                    49:48:76:cb:5d:7f:6b:da:21:4a:9e:9a:a1:0f:1c:
                    d5:82:56:36:36:be:a9:93:ae:f9:aa:d0:3c:b3:c5:
                    aa:4d:f0:99:c4:8f:f5:45:01:11:71:ce:21:f8:cf:
                    38:dc:b6:10:34:30:73:98:11:fb:25:3b:b0:1a:23:
                    c0:c2:a8:5f:7c:70:34:92:99:d4:59:ce:4e:15:79:
                    e3:37:66:21:21:bd:b4:75:85:41:44:b1:ab:b4:a8:
                    3a:8c:bd:7c:e9:2a:1b:d2:df:44:fe:98:2f:28:dc:
                    27:53:2f:9d:aa:eb:17:c0:87:8a:f6:f3:db:fe:5f:
                    4e:6d:1a:82:a7:0a:76:16:df:da:03:98:4a:00:62:
                    d9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:94:42:FD:A7:46:15:F8:A6:2E:08:2E:06:C8:D2:E5:30:94:25:6F
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_pRC_adGFfimLgguBsjS5TCUJW8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:190:fdf2:f302/128

    Signature Algorithm: sha256WithRSAEncryption
         31:1e:f5:a1:94:f4:c9:34:be:88:cb:3c:e7:be:e2:3c:ba:c9:
         ae:1d:33:1b:66:38:5f:78:d5:c5:85:c2:63:8c:01:9a:64:2a:
         58:93:51:01:1d:49:f4:e3:39:40:9c:d5:3f:83:51:e6:36:ae:
         c7:81:9a:95:c5:74:78:10:11:79:f3:07:1c:ff:ad:81:07:aa:
         d4:82:27:ab:97:61:f1:77:cb:91:ca:cc:82:bf:28:a0:1b:ac:
         96:6a:16:a3:ee:21:25:63:f1:52:81:06:d7:f8:b4:36:a5:4b:
         52:6f:96:48:3b:66:fe:1b:73:83:8a:ac:b9:7a:12:16:d6:65:
         0e:32:da:90:53:05:87:a1:92:2d:f7:10:14:f9:b0:fe:f8:74:
         78:9d:22:0c:f8:e2:21:48:a4:c3:5c:22:70:f6:fc:49:83:bc:
         9c:75:f6:3c:8c:dc:83:c9:f6:1a:b5:fb:04:d9:f0:f9:c8:73:
         6a:d8:17:35:0a:1f:9b:44:44:db:e0:01:07:48:88:9c:f1:81:
         d6:ef:b0:3b:a7:20:ae:4a:93:95:de:2e:68:fa:03:b4:87:f3:
         06:24:92:a5:e0:7c:e6:4f:fa:02:9e:9c:53:50:5f:3e:29:31:
         d3:69:a0:0d:f1:47:e2:f3:6e:d2:51:6e:b6:f7:d4:5d:b4:09:
         9e:56:64:27
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 14 00:05:07 2025 by rpki-client