This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ezN4CuiwcXInSYQAplkF9cRKxe0.roa
File:                     ezN4CuiwcXInSYQAplkF9cRKxe0.roa (raw, json)
Hash identifier:          E8QmQBmcdR2uUTqOjG+hqWxzINaJ20BlgAHXqMSe/Q8=
Subject key identifier:   7B:33:78:0A:E8:B0:71:72:27:49:84:00:A6:59:05:F5:C4:4A:C5:ED
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       0191A1B33DB0D012DFD23D87249648E15A05
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ezN4CuiwcXInSYQAplkF9cRKxe0.roa
Signing time:             Fri 30 Aug 2024 05:12:44 +0000
ROA not before:           Fri 30 Aug 2024 05:12:44 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:a1:b3:3d:b0:d0:12:df:d2:3d:87:24:96:48:e1:5a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Aug 30 05:12:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7b33780ae8b0717227498400a65905f5c44ac5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:09:be:7c:63:1c:4f:e6:c0:d5:fb:32:44:e8:
                    56:f5:60:ca:46:76:f6:aa:26:92:99:4f:a6:93:5e:
                    e3:29:8d:eb:d0:f2:bd:2c:2c:81:fe:d4:d7:f2:98:
                    6b:2b:7a:82:bf:49:dc:96:3b:c7:f2:bb:2a:7a:e7:
                    8d:1a:84:36:61:af:04:52:db:7b:7f:73:d0:65:76:
                    5b:30:0f:f8:d0:21:f2:56:c0:9d:4d:94:bc:98:75:
                    8a:ba:3b:ec:0f:e4:db:10:89:8a:60:31:0b:f4:be:
                    c1:65:f3:a8:45:ad:37:59:94:cc:c6:fe:39:4d:64:
                    9d:8f:bd:cb:ef:68:a3:22:f8:ac:99:22:86:7d:4b:
                    00:13:0d:ad:49:b0:99:bf:c3:66:73:5d:96:c0:4c:
                    04:88:86:a1:27:de:f7:64:06:67:dd:92:65:85:d1:
                    d0:ad:30:46:dc:01:5a:bb:ef:01:ec:6b:c8:52:8b:
                    0b:62:92:08:90:b0:89:26:02:48:60:f7:ee:a1:c4:
                    83:80:a4:f4:79:16:57:2a:90:fb:8c:da:f1:63:5f:
                    e3:b7:ac:c6:91:df:6e:a4:08:01:a0:6b:1f:c1:c8:
                    d0:d5:24:84:b9:8d:0e:7e:a0:28:09:6d:fc:16:0c:
                    62:b8:f6:91:64:26:12:85:01:a1:e9:44:2b:8c:5a:
                    05:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:33:78:0A:E8:B0:71:72:27:49:84:00:A6:59:05:F5:C4:4A:C5:ED
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ezN4CuiwcXInSYQAplkF9cRKxe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:190:fdf2:f302/128

    Signature Algorithm: sha256WithRSAEncryption
         5b:90:18:00:56:0e:ba:08:25:9a:26:4e:af:8f:d7:bd:c4:b5:
         61:30:ae:13:a7:d0:04:38:4a:4b:06:8a:62:1a:90:70:a0:0f:
         aa:b4:7c:ff:e6:34:3c:4f:a6:a3:34:90:1d:30:0c:69:90:e0:
         67:a9:7c:14:74:7a:c4:d4:7b:34:4e:6c:90:8a:2e:02:f0:1c:
         d2:54:18:a2:53:15:10:95:10:25:f3:12:dc:5f:92:df:13:d9:
         c3:23:88:0e:51:45:21:d2:2d:f9:02:23:97:74:05:9d:b1:d3:
         f0:ae:e5:a1:21:12:fa:48:c8:b9:c7:11:b9:c8:62:2c:7b:60:
         d6:27:7a:96:d7:fc:06:e1:e2:ef:5c:8d:10:59:53:0e:d8:48:
         27:11:3a:9f:30:b8:af:45:4b:88:2e:ad:fd:66:ad:34:4f:01:
         b7:f9:73:71:94:dd:e2:a9:8a:bd:26:75:5e:ef:e3:0e:bc:ad:
         d9:69:be:90:0b:5c:9e:b7:1a:e4:51:87:18:92:d2:32:50:13:
         19:87:59:fb:31:83:ec:9b:a5:c5:35:ca:e2:6f:4d:b4:67:8b:
         d3:c6:70:d2:86:2a:ce:c8:b2:61:1b:60:81:76:53:bd:09:72:
         f9:f1:bc:a3:25:00:c3:c6:30:ff:2c:f4:73:62:a2:7c:77:2b:
         72:ec:70:42
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 14 00:02:38 2025 by rpki-client