This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fvWIvK8YT1NUaes7Y4Z0mogYAfg.roa
File:                     fvWIvK8YT1NUaes7Y4Z0mogYAfg.roa (raw, json)
Hash identifier:          1i8E/3MYzb70526CO6z2Mbp9EZv9+1RiVkyir16ns4c=
Subject key identifier:   7E:F5:88:BC:AF:18:4F:53:54:69:EB:3B:63:86:74:9A:88:18:01:F8
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       019039DAF920965BDFB71A9785B805268DCA
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fvWIvK8YT1NUaes7Y4Z0mogYAfg.roa
Signing time:             Fri 21 Jun 2024 08:12:50 +0000
ROA not before:           Fri 21 Jun 2024 08:12:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:39:da:f9:20:96:5b:df:b7:1a:97:85:b8:05:26:8d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jun 21 08:12:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7ef588bcaf184f535469eb3b6386749a881801f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7f:52:c6:73:6e:b8:35:f4:d8:b3:21:99:d0:
                    81:93:5e:c8:1a:c0:90:26:d5:59:f4:59:ef:fc:fb:
                    3e:7c:a6:05:e8:c4:0e:9c:92:46:80:43:14:d8:b4:
                    d7:b3:8f:6e:ba:72:02:29:8e:28:31:14:88:28:4f:
                    15:ce:f2:40:db:23:cf:b2:1d:6e:6d:f6:47:6a:48:
                    31:51:80:55:7f:06:f8:b1:8a:9a:33:b6:41:43:6a:
                    5f:b0:c6:0f:6f:6b:8f:22:37:b0:49:10:17:77:ef:
                    78:5f:bd:c5:61:fd:08:1d:81:5a:b2:fc:d5:0d:1e:
                    c6:ae:44:0e:b7:8c:5e:89:5d:7d:97:4e:60:c2:5e:
                    72:33:a7:40:a1:01:b7:b2:76:2e:67:b2:f9:14:c7:
                    4b:ad:e5:74:dc:dd:39:53:73:9f:43:69:ca:b4:87:
                    42:84:8a:30:96:de:b1:8b:bd:ae:18:bd:bd:6b:c6:
                    44:8c:c3:b7:1b:d5:18:cf:ff:54:6f:01:27:de:f2:
                    1c:0c:81:b1:57:ad:68:1c:a0:8a:e7:a2:e4:6c:3a:
                    e3:a8:21:6a:3d:ec:cb:05:07:5a:0b:bb:14:2e:8c:
                    82:dc:29:99:5f:49:25:8a:03:c3:62:1d:e0:19:9a:
                    85:8c:0c:98:4c:fc:b7:7b:79:4e:af:ee:f4:0d:d9:
                    5f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F5:88:BC:AF:18:4F:53:54:69:EB:3B:63:86:74:9A:88:18:01:F8
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fvWIvK8YT1NUaes7Y4Z0mogYAfg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:75:79:23:39:72:a4:3b:11:8b:37:fa:a8:b8:32:08:4e:07:
         9d:1a:8b:f6:6d:ff:ce:f8:ea:02:af:42:16:80:e0:d8:b3:41:
         3d:20:cc:6e:4b:41:cb:38:d3:e0:3d:90:75:60:69:7f:0f:a4:
         76:3c:98:2a:1d:48:ae:98:b1:7e:d8:67:b2:c1:0d:6b:50:2f:
         97:b0:e9:34:f4:0d:b2:c3:a9:26:bd:7e:35:66:a7:61:9e:ee:
         3c:7a:5d:83:62:72:3b:14:3c:64:35:77:33:75:bd:b6:c9:7a:
         c4:92:d4:b7:e8:df:f2:c1:0a:41:93:4e:d2:c1:4e:79:67:8e:
         fc:9e:f1:dd:be:ac:99:b4:f6:dd:fb:de:8a:be:7d:70:e7:d4:
         38:5a:dc:81:2e:dc:6d:60:95:ed:b9:62:5c:c1:f8:79:8b:54:
         eb:bd:02:b9:a4:2f:8b:19:06:0b:4b:80:38:4f:08:4b:55:9f:
         a5:f9:3a:2c:ad:6c:94:63:7e:f2:9d:e3:c9:6f:22:9a:0b:9e:
         56:b4:58:b1:17:4c:4b:2a:1d:ff:bd:1e:22:2e:7d:89:ee:de:
         d2:bc:41:81:5c:42:16:69:e3:02:49:3c:2f:76:7c:e6:e1:5d:
         b2:f9:b5:ca:3b:23:30:23:02:e1:94:23:e3:ed:87:8f:8f:36:
         fd:aa:fe:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 04:53:19 2025 by rpki-client