This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/qXy2zh6sKBIBuxI2VXuU_co-rlA.roa
File:                     qXy2zh6sKBIBuxI2VXuU_co-rlA.roa (raw, json)
Hash identifier:          nvTwBNQ4zf+Mw0SgqfZYIOYLWkoyjCGjxM3i/afBVvw=
Subject key identifier:   A9:7C:B6:CE:1E:AC:28:12:01:BB:12:36:55:7B:94:FD:CA:3E:AE:50
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       01907992704808DEF40F5965E89DD967EF56
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/qXy2zh6sKBIBuxI2VXuU_co-rlA.roa
Signing time:             Wed 03 Jul 2024 17:09:18 +0000
ROA not before:           Wed 03 Jul 2024 17:09:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:79:92:70:48:08:de:f4:0f:59:65:e8:9d:d9:67:ef:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jul  3 17:09:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a97cb6ce1eac281201bb1236557b94fdca3eae50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:9d:90:61:a1:3b:75:b5:50:e9:a1:fa:53:
                    05:95:cb:15:30:02:d5:09:8f:08:56:21:27:4a:b1:
                    9f:b2:23:4e:23:78:5d:41:bf:97:3d:ae:79:4b:bc:
                    ee:67:22:51:92:3b:f0:7e:d7:4f:cd:c9:d8:af:dc:
                    28:4b:79:17:43:61:2c:29:73:58:7b:93:b2:93:9c:
                    eb:89:3d:62:fe:a6:85:e6:e5:e1:85:1b:da:7d:be:
                    23:94:6f:43:cb:b1:61:c2:bc:8d:34:02:73:7f:22:
                    1e:62:eb:30:57:d5:05:3f:be:5d:e5:e5:31:cb:2c:
                    24:8b:48:3f:48:51:59:56:5e:ed:0a:bc:d2:fc:48:
                    2d:4e:ab:6e:00:ef:61:a6:05:e8:49:3b:11:04:4e:
                    d7:ec:71:27:c1:b1:4f:80:c8:cc:1a:e9:27:d3:3f:
                    34:85:07:e5:f0:c8:fa:2a:40:fc:57:19:ab:b5:94:
                    d1:a8:29:9c:25:10:d8:60:bf:d1:6d:90:ed:ee:b4:
                    63:c3:30:24:a9:33:b1:df:53:3c:d4:cb:84:33:e7:
                    09:2c:aa:13:01:c3:e5:de:9e:2e:aa:1d:27:22:fd:
                    e3:95:d1:8f:a9:67:65:01:b8:18:74:19:20:2d:28:
                    43:5a:1d:9f:6d:59:49:9b:b7:55:51:e7:a8:72:bb:
                    52:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7C:B6:CE:1E:AC:28:12:01:BB:12:36:55:7B:94:FD:CA:3E:AE:50
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/qXy2zh6sKBIBuxI2VXuU_co-rlA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:71:bf:1f:de:d9:95:c0:a8:bd:b4:80:ac:1e:c2:60:5f:6a:
         b2:78:46:8a:af:b3:dc:1a:6b:5e:2b:51:70:c7:af:b4:a9:91:
         ac:c0:e3:3c:a2:8e:a9:68:54:6a:34:43:86:95:91:15:04:91:
         2f:55:4d:5a:e8:2b:c3:71:df:44:b4:ba:db:a2:35:70:4b:79:
         d6:a0:8d:b2:e2:29:31:10:b6:6d:50:34:15:53:fc:35:f6:ed:
         11:3f:df:67:f3:a8:42:ca:b1:3c:5c:e5:6e:f8:1d:b1:3a:60:
         53:03:47:90:db:5d:29:9a:14:68:a4:4a:14:87:32:5e:64:c0:
         47:02:05:1f:fc:7b:b4:d3:83:03:01:b5:d4:d3:0e:95:ba:98:
         16:11:80:46:18:4a:18:2d:e7:d4:67:28:91:86:e2:7f:9a:39:
         ed:ca:3f:08:3b:45:5a:60:30:1e:f3:f4:65:19:7b:f3:e8:89:
         95:ce:c0:7b:b5:c6:80:07:5b:d7:75:de:1a:29:5b:df:80:99:
         9a:ca:ce:f2:90:22:cb:05:db:c9:46:9a:40:74:50:d9:09:95:
         e0:f1:89:dd:f8:6f:3c:8b:45:8c:e5:a7:31:42:5d:54:d9:84:
         49:62:a0:c1:23:c3:a4:c1:69:6f:bd:95:4a:a8:f7:b4:ff:3d:
         bb:94:4e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 04:58:46 2025 by rpki-client