This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/atjLvEfCwfD_QSSxxL71VAM13-I.roa
File:                     atjLvEfCwfD_QSSxxL71VAM13-I.roa (raw, json)
Hash identifier:          WRXtdUOpK2N4eogPtZssKjx3B3LxwWUCWEALozEhbHM=
Subject key identifier:   6A:D8:CB:BC:47:C2:C1:F0:FF:41:24:B1:C4:BE:F5:54:03:35:DF:E2
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       019481453EAECF09E69E68D53415AC56F4E9
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/atjLvEfCwfD_QSSxxL71VAM13-I.roa
Signing time:             Mon 20 Jan 2025 01:13:06 +0000
ROA not before:           Mon 20 Jan 2025 01:13:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:81:45:3e:ae:cf:09:e6:9e:68:d5:34:15:ac:56:f4:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jan 20 01:13:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6ad8cbbc47c2c1f0ff4124b1c4bef5540335dfe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2e:32:74:0b:73:01:8e:cf:25:1f:e2:08:61:
                    ab:3e:77:0d:b0:96:6b:d5:5e:11:30:ae:f6:2f:97:
                    3d:95:50:bc:eb:fc:9a:f7:00:52:80:a0:d7:df:ed:
                    e8:7b:c6:7f:2b:a8:fc:89:cc:20:9a:7d:69:bc:53:
                    1e:a6:0e:3d:14:64:0b:09:03:83:ad:21:c5:54:03:
                    54:49:4c:f7:92:be:fa:81:50:7e:6b:f4:30:0b:02:
                    a8:c4:85:af:d4:29:15:a7:c1:28:40:55:1a:2a:d7:
                    43:23:c4:0b:93:3b:8d:ba:00:46:fe:50:b4:b7:65:
                    b9:e5:d8:a2:db:4f:f5:04:d3:1a:b8:f3:2c:bf:33:
                    d2:68:d5:db:a1:79:88:4f:37:fc:e8:e8:17:25:9a:
                    54:e5:50:6b:a9:b2:86:2b:7f:09:1c:9d:b5:17:71:
                    3e:82:ad:ae:b8:16:11:1b:d4:20:62:81:22:70:ab:
                    a5:7c:3f:25:60:32:08:ee:e2:ad:58:30:4d:15:92:
                    dc:7e:0f:75:f0:9b:4b:41:ff:2b:5e:90:74:3b:a4:
                    b5:6f:51:5a:12:7b:dd:f7:cc:80:dd:a2:f0:25:e0:
                    c1:4e:58:d9:52:d9:df:d1:9d:0a:70:7e:54:bc:74:
                    dd:92:55:8a:a9:34:e1:3f:bd:c5:67:02:2b:c3:d4:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D8:CB:BC:47:C2:C1:F0:FF:41:24:B1:C4:BE:F5:54:03:35:DF:E2
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/atjLvEfCwfD_QSSxxL71VAM13-I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:194:2c0d:6680/128

    Signature Algorithm: sha256WithRSAEncryption
         52:74:30:0d:9e:40:13:2e:d4:64:57:81:64:8a:13:4f:38:5c:
         12:cf:b5:46:61:2c:94:1b:13:48:e6:34:6a:ac:83:71:f1:2c:
         44:cc:3d:b2:5c:db:8e:22:45:37:c1:54:c3:6f:57:6a:4e:1b:
         1d:31:49:5e:0c:60:a4:57:03:62:e0:d6:57:56:46:12:45:b5:
         b9:f4:5f:ba:48:8b:dd:8d:35:43:41:78:0b:bb:f7:54:91:b8:
         3a:6d:1b:ba:bb:00:3c:63:2f:4b:b4:2c:96:cc:b9:3c:5a:97:
         d6:df:b6:4e:90:64:fb:80:24:7e:b8:f2:95:8f:07:37:03:a7:
         c8:46:a2:e0:b8:c3:31:0e:97:30:53:e7:5a:6e:fe:18:ad:98:
         ce:3a:a4:61:e3:fb:9e:a6:ca:0f:24:dd:05:99:0c:25:c4:5f:
         3c:3c:50:7c:0f:c4:9b:ab:29:60:7d:4b:5b:77:bd:64:c9:2a:
         6f:c1:7c:7a:77:20:3b:0f:03:fc:72:4e:ee:9c:96:ab:59:ef:
         3a:f8:86:60:af:1f:a7:b9:b3:7c:54:52:53:57:0c:ee:91:e6:
         c9:ab:75:ab:66:ae:45:da:c8:23:6f:66:72:fb:a9:24:03:08:
         48:66:4c:c6:aa:cd:db:56:cf:d0:7e:f5:d1:a6:26:81:82:a5:
         56:ea:60:00
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 14 01:53:23 2025 by rpki-client