This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sMCVMAwMoXjaziy7ef_U_MwcNaY.roa
File:                     sMCVMAwMoXjaziy7ef_U_MwcNaY.roa (raw, json)
Hash identifier:          Hkx9giFYE9npXNetNXrhLmXqKPEhpPSGLZmnF5UU25s=
Subject key identifier:   B0:C0:95:30:0C:0C:A1:78:DA:CE:2C:BB:79:FF:D4:FC:CC:1C:35:A6
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       0191CB53DD0ED84EECE337A124B983C65630
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sMCVMAwMoXjaziy7ef_U_MwcNaY.roa
Signing time:             Sat 07 Sep 2024 07:12:36 +0000
ROA not before:           Sat 07 Sep 2024 07:12:36 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:cb:53:dd:0e:d8:4e:ec:e3:37:a1:24:b9:83:c6:56:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Sep  7 07:12:36 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b0c095300c0ca178dace2cbb79ffd4fccc1c35a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0d:d4:9a:47:39:c8:1d:21:b8:eb:7a:f3:e5:
                    6b:2a:da:30:b8:06:f0:92:0d:59:db:3d:b3:90:1e:
                    d7:5b:4a:2c:3e:69:e4:b4:28:00:26:a8:b6:52:5b:
                    c6:c2:31:a7:0b:92:3e:a9:35:2f:6e:c0:aa:fe:58:
                    dc:ed:47:02:79:a7:c3:3a:b4:7e:09:53:ac:d3:e1:
                    84:ff:46:49:6d:c6:dd:fb:7e:c7:71:1d:8c:8f:1d:
                    d2:8f:a8:c5:ff:63:97:f3:5e:bd:59:8e:57:ed:df:
                    d5:fc:a3:29:85:d1:a9:56:10:fa:87:81:7c:66:bd:
                    70:b1:71:ad:4f:59:02:12:3e:9d:e4:76:49:d4:68:
                    2b:8d:f5:7d:1a:6c:66:78:f0:23:17:04:7c:3e:00:
                    f0:d6:94:10:0b:01:58:88:e1:6b:e2:17:52:85:4c:
                    25:03:fa:a6:61:39:05:cd:b9:26:fa:0a:54:ee:04:
                    75:ed:29:b3:6d:1c:ba:d4:65:a2:a4:03:ba:29:ff:
                    41:c7:aa:99:fd:01:07:b3:ef:52:e3:9d:f1:71:a6:
                    74:2e:9d:bb:eb:70:de:2a:3d:88:6e:0a:3b:31:d9:
                    80:37:7b:a8:16:33:05:4a:51:cf:fc:8c:b0:83:37:
                    2f:69:dd:04:64:b3:5d:ef:c6:36:48:4b:f8:a2:75:
                    96:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C0:95:30:0C:0C:A1:78:DA:CE:2C:BB:79:FF:D4:FC:CC:1C:35:A6
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sMCVMAwMoXjaziy7ef_U_MwcNaY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:190:fdf2:f302/128

    Signature Algorithm: sha256WithRSAEncryption
         7c:b3:89:86:43:9d:39:a6:e2:3c:77:28:01:14:e5:d5:b2:8e:
         ea:e5:b0:19:b8:6b:23:47:8a:c8:12:15:9b:08:bf:e3:47:5f:
         91:d0:c4:ec:8c:64:b2:7d:ca:49:65:06:43:69:e8:58:6a:1f:
         fa:d3:7f:11:1d:17:54:54:68:00:32:fc:51:ff:3c:77:ea:1f:
         e3:63:f9:be:f6:41:f5:24:d2:5d:3c:82:b9:2b:68:71:39:71:
         41:e5:06:8b:26:b8:69:f3:0b:cb:b3:b6:72:48:8f:42:f2:21:
         2a:6a:63:31:0d:43:1c:24:e7:c5:dd:6b:c3:ed:49:26:e8:b2:
         2a:36:d1:6d:5d:b1:ab:eb:c1:19:f4:68:1a:ea:91:88:31:f6:
         70:29:9d:c1:1c:9f:60:3a:8c:2a:c3:27:27:c6:25:f4:9c:fd:
         e0:fd:7f:98:8c:a0:f3:23:f3:d3:3f:36:1e:52:99:a1:61:55:
         41:05:f3:65:e6:38:0b:ac:f5:3a:e3:de:38:5a:ac:84:39:89:
         d4:11:0c:47:6a:c2:3c:80:bd:99:d1:9c:40:b9:08:c6:b6:24:
         13:73:b5:00:4c:34:18:34:f1:87:b6:d3:d9:df:54:06:f2:48:
         3a:42:42:9e:d9:4a:3b:2b:53:17:d0:f5:80:b5:62:c9:1f:66:
         16:16:2d:d4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 14 03:43:19 2025 by rpki-client