This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eqZCujTr6s_1cfG5VK57ssiwKzg.roa
File:                     eqZCujTr6s_1cfG5VK57ssiwKzg.roa (raw, json)
Hash identifier:          WHy+v6wXT2w1o50jYlVkXnaADa0l9FZC8EiBw5RKgcg=
Subject key identifier:   7A:A6:42:BA:34:EB:EA:CF:F5:71:F1:B9:54:AE:7B:B2:C8:B0:2B:38
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       0190B30FC812828E5F5F8A7880D8CD612E64
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eqZCujTr6s_1cfG5VK57ssiwKzg.roa
Signing time:             Sun 14 Jul 2024 21:04:34 +0000
ROA not before:           Sun 14 Jul 2024 21:04:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:190:b30f:67d7/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:b3:0f:c8:12:82:8e:5f:5f:8a:78:80:d8:cd:61:2e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jul 14 21:04:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7aa642ba34ebeacff571f1b954ae7bb2c8b02b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:f7:81:e2:83:19:8b:74:73:23:29:4e:91:
                    76:e0:bc:aa:23:de:ae:5b:e7:6c:82:62:9f:61:ef:
                    db:3d:6f:08:42:d3:d9:4b:28:21:e9:32:52:7c:c5:
                    c9:85:6a:cb:c1:60:8b:8b:af:da:67:cc:01:0a:3c:
                    76:8b:79:dc:13:a3:c8:8f:fa:73:3a:88:11:65:ec:
                    54:79:09:97:a6:e6:e6:b8:e8:fd:53:86:ca:93:d7:
                    1d:fb:b8:75:57:19:d1:eb:36:77:7b:1c:08:dd:87:
                    12:f2:c5:69:a6:c7:78:58:75:e0:03:e2:c3:67:5b:
                    9d:23:94:31:b3:a3:cd:b2:87:f5:f6:c0:65:cd:d1:
                    a0:26:20:53:a2:2c:22:55:61:71:c2:d1:ea:0c:69:
                    c7:91:2f:43:9b:32:28:58:10:eb:68:74:fc:87:22:
                    8d:46:a7:16:6e:2c:34:52:25:c6:97:c8:9f:d0:40:
                    25:7c:46:2b:18:c1:8d:4b:9c:41:af:ae:aa:78:5e:
                    4f:27:83:76:fa:ee:cc:f1:f8:97:bd:2a:2e:96:6d:
                    13:61:8e:77:2b:f0:c8:0e:a1:6d:f7:bf:70:b6:2c:
                    f8:7e:67:71:e8:e6:15:ec:cc:fc:ce:63:79:8d:59:
                    b5:4b:5b:d1:25:3f:f8:1a:f8:3f:46:a7:33:bd:29:
                    15:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A6:42:BA:34:EB:EA:CF:F5:71:F1:B9:54:AE:7B:B2:C8:B0:2B:38
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eqZCujTr6s_1cfG5VK57ssiwKzg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:cc:f6:66:85:29:25:16:d5:94:87:31:60:c0:af:74:70:c3:
         58:b5:c8:bb:5b:7c:fa:c3:1f:f0:1c:fc:86:20:d1:33:26:f8:
         ac:a2:c3:8a:ac:25:55:c5:97:37:53:dd:6b:fc:9b:8f:33:93:
         f4:f5:11:fd:06:e9:a2:3a:ac:42:e0:9c:3a:e4:2b:c7:e6:8b:
         ca:64:46:41:da:09:a1:13:9f:7c:03:e6:e6:ae:6a:69:f8:fc:
         3c:85:6a:ef:64:d9:cf:77:f2:f0:c4:69:c1:cd:38:7b:6f:06:
         54:c3:d2:d3:bf:72:b5:2b:57:40:83:6a:85:7b:d3:8c:7c:86:
         53:ea:e3:ff:4d:26:10:d0:76:cd:53:9e:8c:15:b7:0c:97:a0:
         eb:d7:42:0e:3e:4e:07:aa:fd:24:29:f7:fa:e1:fd:de:57:6d:
         4c:88:00:4b:c1:bf:96:2f:3b:ae:23:50:12:d3:94:38:5b:a0:
         77:cf:24:f4:02:e0:80:7f:0f:8c:d5:d3:3f:a7:37:b0:eb:cd:
         83:f7:b5:6d:55:95:b7:98:97:8f:8f:8a:a0:76:5d:9c:2a:77:
         49:26:0a:62:9c:16:c6:13:78:73:68:b6:01:49:71:8e:95:4c:
         c0:d1:05:58:6c:68:06:b4:c6:25:d9:df:91:8a:48:0f:9a:00:
         08:5e:69:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 16:56:27 2025 by rpki-client