This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/c_5tRH66_veE2fBQTs1UtEV7pxg.roa
File:                     c_5tRH66_veE2fBQTs1UtEV7pxg.roa (raw, json)
Hash identifier:          2uXBfEqQ5bUP87uOeZNraZxM6rNAo7MCniqDnnEBmh0=
Subject key identifier:   73:FE:6D:44:7E:BA:FE:F7:84:D9:F0:50:4E:CD:54:B4:45:7B:A7:18
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       01958FA2DD5B53A2221F2CD3988520FE572E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/c_5tRH66_veE2fBQTs1UtEV7pxg.roa
Signing time:             Thu 13 Mar 2025 13:12:50 +0000
ROA not before:           Thu 13 Mar 2025 13:12:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8f:a2:dd:5b:53:a2:22:1f:2c:d3:98:85:20:fe:57:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Mar 13 13:12:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=73fe6d447ebafef784d9f0504ecd54b4457ba718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:98:d1:58:7e:24:56:0c:c7:71:8f:58:ac:82:
                    77:dc:17:45:bb:d4:d5:5b:9e:02:2e:95:fb:70:cc:
                    42:3f:6a:01:43:d7:9d:73:7f:8b:2a:b1:4e:3b:58:
                    28:49:30:12:e9:7f:d3:03:6f:05:cd:8a:f4:f1:ed:
                    10:fe:cb:71:9a:c3:b8:38:b7:0e:33:7e:88:86:72:
                    8c:36:9b:40:08:cb:42:9a:10:fc:fe:db:0f:4a:18:
                    40:b3:8e:d0:40:0b:88:17:db:2a:d0:97:63:f8:75:
                    65:b6:33:a0:f2:5e:de:7c:ef:d8:91:99:b6:22:ce:
                    bb:72:be:bc:b7:d8:1e:08:71:94:82:45:83:02:9d:
                    d4:ad:fd:be:99:e1:aa:84:22:08:81:cb:68:5c:a0:
                    61:8b:cb:78:4f:7b:52:ad:96:4a:fd:1d:26:0d:d3:
                    7e:25:56:90:8d:e9:fd:68:8e:24:fd:bd:05:7c:af:
                    e9:10:a6:3d:04:c7:f6:24:11:ea:18:ee:45:82:b6:
                    66:28:f4:81:94:33:77:d9:e2:3b:15:ab:18:f1:8a:
                    d6:91:9d:a7:0c:30:a9:27:d1:2b:39:98:2b:9a:c3:
                    ca:96:81:40:1c:02:e3:99:3d:1b:be:3d:48:3a:45:
                    7c:ac:01:26:03:e7:34:a9:cc:61:c6:4a:41:ea:68:
                    bc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FE:6D:44:7E:BA:FE:F7:84:D9:F0:50:4E:CD:54:B4:45:7B:A7:18
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/c_5tRH66_veE2fBQTs1UtEV7pxg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:195:86cf:630c/128

    Signature Algorithm: sha256WithRSAEncryption
         42:d8:e8:b6:78:1e:fb:78:98:d1:91:c4:02:aa:5f:ae:4d:9b:
         59:61:80:0a:c1:73:f9:dd:63:c0:2c:33:49:f9:17:0d:66:27:
         bf:9f:7a:6f:1b:46:55:54:e2:30:ed:d6:43:8e:ed:8f:0c:52:
         80:90:06:c8:52:55:b1:5c:c5:aa:d5:a1:d3:0e:31:7c:89:7b:
         57:c2:de:32:9b:0e:1f:18:d9:de:70:df:8a:0e:98:ec:29:de:
         ee:26:a7:64:4a:80:6a:f4:ac:ad:15:bf:3d:8f:5f:97:b1:24:
         81:77:83:5a:7e:85:e3:74:5d:a0:bf:4b:a4:02:75:ac:ac:57:
         cc:84:e7:71:38:e9:23:d2:88:b0:6a:09:20:51:57:a9:93:2b:
         72:17:d4:34:94:e1:e0:35:4d:59:ec:3f:30:82:31:4f:c4:2d:
         6e:7e:af:2e:cc:30:2f:7b:2c:c7:73:21:bf:ae:ef:56:3e:f5:
         06:ac:3b:00:44:03:0e:87:2a:f6:ce:61:5b:f8:51:e2:57:82:
         b9:5d:db:39:e3:39:39:7f:f9:9f:09:8f:b7:b5:f9:ec:55:8f:
         84:84:3e:51:8b:de:e7:6f:77:17:36:e7:35:ad:d7:f1:d6:1f:
         07:df:a3:11:45:1d:ac:04:c0:5d:4d:4f:d0:6e:d4:da:0a:cb:
         f2:ee:9b:d2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 14 03:28:58 2025 by rpki-client