This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iDRJu1ZyOhvwZ4NoAPF1PqGNKGM.roa
File:                     iDRJu1ZyOhvwZ4NoAPF1PqGNKGM.roa (raw, json)
Hash identifier:          Zj8WxpuwQEUnIU8xT3DLpPZPg3NAJYySglyW4qshBoY=
Subject key identifier:   88:34:49:BB:56:72:3A:1B:F0:67:83:68:00:F1:75:3E:A1:8D:28:63
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       01901A85CBF0EA36060707531003B9C178B4
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iDRJu1ZyOhvwZ4NoAPF1PqGNKGM.roa
Signing time:             Sat 15 Jun 2024 06:11:34 +0000
ROA not before:           Sat 15 Jun 2024 06:11:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1a:85:cb:f0:ea:36:06:07:07:53:10:03:b9:c1:78:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jun 15 06:11:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=883449bb56723a1bf067836800f1753ea18d2863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:73:3d:52:38:c6:ae:be:4d:7b:ca:29:fe:85:
                    82:23:af:51:df:f7:3f:47:11:2d:8a:5f:94:6f:58:
                    6b:b4:38:a9:c0:ce:cc:51:dd:a4:7b:da:24:27:ad:
                    f2:8b:1a:d0:fd:4e:bb:93:28:aa:6d:42:1c:e8:97:
                    b5:f2:64:c5:15:99:c8:93:1b:07:2a:eb:18:cc:98:
                    8f:8f:91:bd:4d:d2:7c:e5:f9:b5:55:b4:25:3f:95:
                    22:1b:1b:65:66:8f:ce:02:38:be:25:86:5a:94:7c:
                    b1:dd:84:4c:2a:1a:77:14:81:7a:8b:c5:8b:4d:db:
                    3b:b3:c1:c0:2d:97:88:4f:c4:bf:6f:93:4b:f6:e4:
                    fc:de:db:bd:1d:39:e6:f3:6a:ac:2a:e0:90:cd:53:
                    61:4a:21:e4:1c:cc:9d:3e:36:52:19:dd:c8:35:a9:
                    7b:dc:3d:ce:90:be:1a:ae:1a:01:57:50:a2:51:d5:
                    ed:51:d5:00:e1:f5:38:c8:cb:4c:e4:dc:a3:c1:88:
                    5a:27:92:bc:69:c8:68:3b:20:f5:e5:0b:85:13:7b:
                    12:ab:a1:97:95:02:3b:9d:87:55:e7:07:03:62:a9:
                    ef:06:6e:f9:75:94:1c:3f:f1:60:3f:ec:88:e1:5e:
                    7f:80:0a:6d:e4:05:b3:94:ca:23:16:41:bb:03:c6:
                    6c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:34:49:BB:56:72:3A:1B:F0:67:83:68:00:F1:75:3E:A1:8D:28:63
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iDRJu1ZyOhvwZ4NoAPF1PqGNKGM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:79:1e:9f:be:d6:45:d0:f4:a7:68:35:f5:2a:7f:9c:c2:62:
         aa:35:50:5d:32:19:71:77:2a:6c:1a:92:a6:bf:85:ac:61:0f:
         61:60:79:b3:ac:5b:8c:40:f6:7d:bc:90:43:38:db:44:a4:9e:
         16:e7:ac:7c:8c:5f:fd:17:5a:6a:00:51:84:63:86:16:5e:b7:
         a2:bf:c5:15:08:0f:92:3d:8a:10:1f:32:1a:1c:4f:df:08:93:
         cb:82:a5:c5:ad:76:d2:d1:7f:9b:f8:32:30:bd:25:ec:9f:fb:
         d6:a6:b5:43:f1:a7:7a:00:74:7e:5a:f4:cd:e5:39:e2:9b:8e:
         13:77:8d:9d:59:73:af:00:fd:f6:92:f3:55:ac:ac:4c:a6:0b:
         b3:fc:d4:97:d2:a2:a3:64:d3:07:94:4f:4b:d9:0e:b0:00:f0:
         d1:86:19:1c:76:26:be:de:0a:2c:28:e9:2d:9d:5c:3b:6e:9a:
         ae:8e:dd:f4:6c:8f:21:e8:53:6f:1f:64:c0:15:f7:7e:a0:3d:
         c5:f5:71:92:16:43:72:9e:b9:b4:16:61:92:17:c4:90:61:67:
         3a:37:6f:9c:f2:01:ce:f5:43:24:57:d0:51:81:4e:16:14:35:
         ca:4e:30:a1:0b:90:62:a8:d2:bc:72:4c:b9:e6:f5:a3:52:e2:
         35:1a:f6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 06:45:57 2025 by rpki-client