This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fFsbgVoyybuvztir6xTVIIUG5QM.roa
File:                     fFsbgVoyybuvztir6xTVIIUG5QM.roa (raw, json)
Hash identifier:          NsbeWqmXffWHxAt7LB1/AGlUmPMtLuInDfW2z/vJ1rA=
Subject key identifier:   7C:5B:1B:81:5A:32:C9:BB:AF:CE:D8:AB:EB:14:D5:20:85:06:E5:03
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       01956DB4CB4E51C983392EBFD5C63CAA684D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fFsbgVoyybuvztir6xTVIIUG5QM.roa
Signing time:             Thu 06 Mar 2025 23:05:19 +0000
ROA not before:           Thu 06 Mar 2025 23:05:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:195:6db4:e54/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:6d:b4:cb:4e:51:c9:83:39:2e:bf:d5:c6:3c:aa:68:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Mar  6 23:05:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7c5b1b815a32c9bbafced8abeb14d5208506e503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4e:29:d0:7d:42:57:02:ba:f9:dd:62:2c:f6:
                    1e:27:4b:50:60:13:3a:42:43:61:93:1f:e3:5c:42:
                    e1:04:12:45:8a:b8:19:56:63:54:69:de:2f:77:8a:
                    54:d9:0b:3b:1f:f5:6a:83:6c:18:41:f8:d0:93:8d:
                    9c:f5:fa:88:b4:bf:eb:5a:8d:9f:4a:2d:bf:aa:5d:
                    42:15:25:8e:89:eb:8e:a5:cd:4e:e3:ab:d6:1f:a1:
                    77:f0:9b:4b:a1:c2:ac:4e:e6:62:d8:34:25:98:8a:
                    2c:a4:5f:4d:e5:7c:7a:f8:16:06:1b:d2:22:da:fd:
                    7a:40:6c:b7:2f:70:00:e2:2a:92:8e:fc:11:a3:28:
                    ad:0e:69:0f:fe:f5:0a:86:66:6e:54:99:cd:fc:95:
                    b8:b4:9c:ef:0f:8a:4a:c2:f5:23:62:42:4e:d3:f5:
                    0f:7f:c1:d8:42:d3:6d:c4:72:8a:22:dc:56:2d:c7:
                    6e:3a:0c:24:85:32:42:8d:ba:2e:f4:7c:1e:9d:94:
                    9a:d2:4b:f5:fd:67:ae:bc:a5:e4:f3:60:81:9e:b4:
                    5e:5e:29:8e:e0:d4:9f:19:c4:ff:ef:44:a6:69:24:
                    25:30:f7:02:b2:e0:44:97:33:bf:5e:bc:a7:38:d7:
                    ba:11:58:61:18:66:53:24:87:1e:06:c2:5f:d5:f1:
                    51:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:5B:1B:81:5A:32:C9:BB:AF:CE:D8:AB:EB:14:D5:20:85:06:E5:03
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fFsbgVoyybuvztir6xTVIIUG5QM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:195:6db4:e54/128

    Signature Algorithm: sha256WithRSAEncryption
         34:fc:0a:66:34:ff:df:47:43:3d:b6:78:2c:c2:82:90:5c:b1:
         12:68:fa:8f:e1:ad:78:21:74:c7:23:64:b5:dc:15:21:3a:d7:
         2e:53:09:de:b9:b0:f3:e9:fe:58:a5:fc:90:3c:fb:9e:3f:20:
         6b:82:31:63:10:c5:e1:72:9b:77:f2:86:1a:2a:dd:fc:26:51:
         d2:32:cb:aa:5e:df:6a:f9:75:b8:3b:e1:24:b0:cc:87:c1:0d:
         4a:dd:95:cd:aa:20:99:bc:46:cf:42:db:d4:2b:15:ea:d3:fd:
         bc:06:6e:5b:38:ed:4d:e1:30:05:97:92:f7:dd:04:1a:fa:b8:
         d1:08:d2:e3:69:5b:30:dd:b6:e5:83:91:cc:a5:46:ba:90:53:
         67:95:dd:9c:ea:c1:d1:16:e4:20:fc:38:fa:53:4c:65:2d:5b:
         2d:c5:bc:fb:e4:29:3e:df:35:68:3f:0c:33:1c:d4:d3:08:10:
         53:a1:46:f5:87:a6:86:a8:fa:83:00:c3:25:e2:58:3e:7d:3e:
         4e:a1:69:2c:66:07:a6:b2:69:2f:7e:c3:b3:5e:bf:0a:5b:8d:
         24:75:36:cc:14:ef:8e:a6:82:1d:43:90:49:a1:88:12:6c:ea:
         d9:ec:77:6e:c1:52:88:af:7a:a1:e5:10:14:7c:77:b0:f2:ea:
         a8:3a:69:56
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZVttMtOUcmDOS6/1cY8qmhNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMzA2MjMwNTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzViMWI4MTVhMzJjOWJiYWZjZWQ4YWJlYjE0ZDUyMDg1MDZlNTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr04p0H1CVwK6+d1iLPYeJ0tQYBM6
QkNhkx/jXELhBBJFirgZVmNUad4vd4pU2Qs7H/Vqg2wYQfjQk42c9fqItL/rWo2f
Si2/ql1CFSWOieuOpc1O46vWH6F38JtLocKsTuZi2DQlmIospF9N5Xx6+BYGG9Ii
2v16QGy3L3AA4iqSjvwRoyitDmkP/vUKhmZuVJnN/JW4tJzvD4pKwvUjYkJO0/UP
f8HYQtNtxHKKItxWLcduOgwkhTJCjbou9HwenZSa0kv1/WeuvKXk82CBnrReXimO
4NSfGcT/70SmaSQlMPcCsuBElzO/XrynONe6EVhhGGZTJIceBsJf1fFR4wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFHxbG4FaMsm7r87Yq+sU1SCFBuUDMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvZkZzYmdWb3l5YnV2enRpcjZ4VFZJSVVHNVFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGVbbQOVDANBgkqhkiG9w0BAQsFAAOCAQEANPwKZjT/30dDPbZ4LMKCkFyx
Emj6j+GteCF0xyNktdwVITrXLlMJ3rmw8+n+WKX8kDz7nj8ga4IxYxDF4XKbd/KG
Gird/CZR0jLLql7favl1uDvhJLDMh8ENSt2VzaogmbxGz0Lb1CsV6tP9vAZuWzjt
TeEwBZeS990EGvq40QjS42lbMN225YORzKVGupBTZ5XdnOrB0RbkIPw4+lNMZS1b
LcW8++QpPt81aD8MMxzU0wgQU6FG9Yemhqj6gwDDJeJYPn0+TqFpLGYHprJpL37D
s16/CluNJHU2zBTvjqaCHUOQSaGIEmzq2ex3bsFSiK96oeUQFHx3sPLqqDppVg==
-----END CERTIFICATE-----
Generated at Thu Dec 18 22:39:15 2025 by rpki-client