This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jCly3iJNfSAy2s09lcwVjd0IYy0.roa
File:                     jCly3iJNfSAy2s09lcwVjd0IYy0.roa (raw, json)
Hash identifier:          LaILOdwy4I9tNEVZFTwMWmVRxSiZmu0WHbdZtQOAoek=
Subject key identifier:   8C:29:72:DE:22:4D:7D:20:32:DA:CD:3D:95:CC:15:8D:DD:08:63:2D
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       0193E9C06363743E18212DBA6B90F74B6D27
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jCly3iJNfSAy2s09lcwVjd0IYy0.roa
Signing time:             Sat 21 Dec 2024 15:05:19 +0000
ROA not before:           Sat 21 Dec 2024 15:05:19 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:193:e9bf:862c/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:e9:c0:63:63:74:3e:18:21:2d:ba:6b:90:f7:4b:6d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Dec 21 15:05:19 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8c2972de224d7d2032dacd3d95cc158ddd08632d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:12:7f:37:fe:13:1b:86:30:28:73:d8:aa:35:
                    6f:13:c4:34:af:15:34:73:8a:97:7b:67:48:ec:db:
                    4b:10:d8:c1:0f:2f:14:2b:85:0b:ab:0a:e4:ee:20:
                    b7:90:a8:1d:cf:14:1f:8d:f4:b6:da:a7:96:77:11:
                    b2:14:02:d6:46:91:3c:9a:2e:d0:ad:d6:f6:df:83:
                    b2:79:79:9d:c8:b6:3e:d4:cb:8d:ee:fb:ab:2c:fc:
                    c9:28:84:46:28:a1:53:dc:88:6f:33:77:28:87:51:
                    c6:72:41:b7:94:c0:01:d7:2a:e6:fb:a0:df:0f:fc:
                    6d:40:a9:5e:e1:f2:35:3c:34:d6:2f:fc:d5:3f:ec:
                    11:30:9d:01:06:a4:28:f1:a7:3d:6e:48:6e:a6:4d:
                    d0:20:69:46:33:d7:97:23:01:ef:df:89:7e:8c:58:
                    cf:82:f2:97:b4:54:fe:d4:8e:5b:61:2b:e9:ea:54:
                    ab:e1:3e:90:cb:47:95:b3:b1:fc:0f:b0:8e:c4:3b:
                    f0:59:9c:48:49:fa:e8:16:60:04:b2:ff:cf:da:82:
                    09:24:ef:5b:07:5e:0e:ed:63:16:c6:1b:56:29:25:
                    62:6d:a3:95:ff:b5:30:98:ca:3d:4f:1d:cb:b3:cb:
                    18:f0:11:a5:27:c8:d1:ca:d5:f1:3b:90:cc:ed:b5:
                    33:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:29:72:DE:22:4D:7D:20:32:DA:CD:3D:95:CC:15:8D:DD:08:63:2D
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jCly3iJNfSAy2s09lcwVjd0IYy0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:193:e9bf:862c/128

    Signature Algorithm: sha256WithRSAEncryption
         17:52:7a:40:86:df:5d:41:b7:7a:11:22:8a:f1:c7:95:cc:08:
         8d:58:0d:b1:b4:4e:a7:ec:ae:a0:d1:a1:20:a4:76:51:34:18:
         b9:1e:34:0b:cc:04:9f:ea:70:b1:e4:fd:1b:5e:06:e4:95:36:
         bb:8f:0f:fe:37:ae:92:bf:0d:d9:63:6b:d0:b3:9b:26:6b:78:
         85:38:d8:ed:52:ae:0d:0c:f3:68:bc:3b:16:53:3b:1e:3f:dc:
         3f:34:0b:77:68:ed:2d:01:5d:94:92:b3:1b:c9:84:8d:3d:5e:
         08:2d:8a:a8:4a:01:2a:41:d4:d6:15:96:d9:a0:62:04:5f:39:
         a7:80:1f:ce:f5:36:8b:a5:3b:3f:8a:5b:79:65:7c:e6:fd:6d:
         cd:e8:4c:48:e0:9e:fb:b0:4a:6c:63:df:f2:e1:1f:a7:8a:2f:
         59:5b:24:35:b7:0b:74:8d:53:71:de:ae:b3:a3:04:f2:07:9e:
         06:b2:c2:68:6e:44:b0:ab:fd:c4:62:8c:81:59:7e:b1:cb:82:
         f8:e9:bc:e7:9d:1c:52:8b:04:6a:bd:6f:b3:0e:a3:1e:50:c9:
         69:85:39:8a:6f:f2:b2:e5:11:66:6b:36:0a:56:df:30:35:36:
         86:29:6d:0b:e9:26:96:22:b3:7b:7d:cc:37:f4:a3:78:5a:72:
         71:97:32:bf
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZPpwGNjdD4YIS26a5D3S20nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQxMjIxMTUwNTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzI5NzJkZTIyNGQ3ZDIwMzJkYWNkM2Q5NWNjMTU4ZGRkMDg2MzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRJ/N/4TG4YwKHPYqjVvE8Q0rxU0
c4qXe2dI7NtLENjBDy8UK4ULqwrk7iC3kKgdzxQfjfS22qeWdxGyFALWRpE8mi7Q
rdb234OyeXmdyLY+1MuN7vurLPzJKIRGKKFT3IhvM3coh1HGckG3lMAB1yrm+6Df
D/xtQKle4fI1PDTWL/zVP+wRMJ0BBqQo8ac9bkhupk3QIGlGM9eXIwHv34l+jFjP
gvKXtFT+1I5bYSvp6lSr4T6Qy0eVs7H8D7COxDvwWZxISfroFmAEsv/P2oIJJO9b
B14O7WMWxhtWKSVibaOV/7UwmMo9Tx3Ls8sY8BGlJ8jRytXxO5DM7bUzVQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFIwpct4iTX0gMtrNPZXMFY3dCGMtMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvakNseTNpSk5mU0F5MnMwOWxjd1ZqZDBJWXkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGT6b+GLDANBgkqhkiG9w0BAQsFAAOCAQEAF1J6QIbfXUG3ehEiivHHlcwI
jVgNsbROp+yuoNGhIKR2UTQYuR40C8wEn+pwseT9G14G5JU2u48P/jeukr8N2WNr
0LObJmt4hTjY7VKuDQzzaLw7FlM7Hj/cPzQLd2jtLQFdlJKzG8mEjT1eCC2KqEoB
KkHU1hWW2aBiBF85p4AfzvU2i6U7P4pbeWV85v1tzehMSOCe+7BKbGPf8uEfp4ov
WVskNbcLdI1Tcd6us6ME8geeBrLCaG5EsKv9xGKMgVl+scuC+Om8550cUosEar1v
sw6jHlDJaYU5im/ysuURZms2ClbfMDU2hiltC+kmliKze33MN/SjeFpycZcyvw==
-----END CERTIFICATE-----
Generated at Sun Dec 14 03:30:18 2025 by rpki-client