This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fyb83UHrdpaNUVc5ptwxOl1wc6A.roa
File:                     fyb83UHrdpaNUVc5ptwxOl1wc6A.roa (raw, json)
Hash identifier:          0AGM1katZPQcmYMabnV/jEUe2ipw68L3ZWWKdsOOMtc=
Subject key identifier:   7F:26:FC:DD:41:EB:76:96:8D:51:57:39:A6:DC:31:3A:5D:70:73:A0
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       019114EF7CB1286A7A57581D5DD1BE5C5965
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fyb83UHrdpaNUVc5ptwxOl1wc6A.roa
Signing time:             Fri 02 Aug 2024 21:12:04 +0000
ROA not before:           Fri 02 Aug 2024 21:12:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:14:ef:7c:b1:28:6a:7a:57:58:1d:5d:d1:be:5c:59:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Aug  2 21:12:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7f26fcdd41eb76968d515739a6dc313a5d7073a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ab:df:e2:11:ba:c9:be:10:83:1f:d7:aa:7f:
                    a6:7c:30:2d:b4:da:0b:dd:9e:de:6e:4f:ec:69:94:
                    20:cd:70:89:72:b7:a4:c7:72:3e:1b:f7:6b:69:a8:
                    7e:40:2a:5b:2a:3a:0d:6d:a7:b8:0d:15:c6:a9:a0:
                    23:02:ba:12:95:67:68:de:22:70:31:70:86:ca:b7:
                    5c:ae:e9:8a:85:25:e4:33:1b:14:26:0c:27:1c:54:
                    80:13:98:41:1a:f2:03:67:c3:73:dd:4b:ba:93:ad:
                    26:eb:9d:f9:4b:a1:91:44:0c:b7:bf:fe:76:6b:59:
                    35:f6:01:eb:9a:4b:bf:c3:6c:89:d5:2b:29:e0:a5:
                    1b:7b:91:8d:0e:8e:e9:52:ea:8f:77:59:98:53:98:
                    fb:ee:40:c2:2b:3f:71:ff:23:99:a2:0b:45:f4:2f:
                    17:83:66:07:99:d4:42:c6:3a:84:47:93:4f:03:29:
                    20:6b:ac:f2:ed:ab:ec:48:b5:1f:af:c6:ac:3b:93:
                    56:9b:a6:b1:34:19:aa:d6:82:e3:d7:be:d8:3b:80:
                    82:b4:a1:8c:32:0d:8c:c8:fe:27:ea:9f:29:3d:33:
                    12:28:9a:ac:3e:d6:e7:f1:ea:8a:61:7c:90:80:7c:
                    2f:43:b4:46:a8:4f:74:86:2f:43:fc:36:3f:98:3b:
                    9b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:26:FC:DD:41:EB:76:96:8D:51:57:39:A6:DC:31:3A:5D:70:73:A0
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fyb83UHrdpaNUVc5ptwxOl1wc6A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:190:fdf2:f302/128

    Signature Algorithm: sha256WithRSAEncryption
         3c:97:54:12:6f:25:41:b7:cc:86:9d:8f:a1:0c:1d:35:76:ad:
         4f:6b:71:45:35:c5:62:d2:98:89:2e:8c:3c:27:f2:c2:ca:9e:
         79:fc:5b:14:00:b1:a5:d7:9c:9e:5d:60:0a:6b:20:c2:ea:67:
         63:82:d2:87:8c:ad:fd:a9:16:69:cf:26:82:dd:a1:e2:cc:bb:
         0e:0e:7d:3f:c3:2f:ae:40:98:7a:dd:e0:01:bb:4e:4c:c1:81:
         8d:8c:fb:64:c6:10:a3:2b:a4:e9:44:31:36:ec:a1:c5:a5:98:
         2b:78:92:d2:22:fa:09:ff:b2:8e:38:d8:2d:6b:e8:6b:26:85:
         f5:80:a0:f5:1e:77:1b:b0:1e:54:a2:98:0d:dd:c3:0a:8f:79:
         1a:86:57:18:ae:e3:9d:57:2f:0e:e2:a5:b4:ad:e3:f4:b6:bd:
         d4:62:84:00:9c:8b:da:98:2d:9f:cc:b5:fe:8e:5e:a7:f2:d2:
         cf:be:11:64:8d:b3:fd:9e:42:0f:83:83:ba:7e:ed:9f:bc:93:
         45:fc:f2:20:08:4d:70:d5:ed:0e:d5:44:9b:d3:8b:3c:34:99:
         5f:a2:f5:36:81:79:a4:a1:74:bc:5b:35:bd:4b:72:10:cd:78:
         33:a7:39:57:1f:a6:c4:af:df:06:83:a5:9a:c8:46:85:55:92:
         fb:0c:93:c5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 14 07:43:12 2025 by rpki-client