This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sph9zZv_Y6_2m1T52rY8uvPih3g.roa
File:                     sph9zZv_Y6_2m1T52rY8uvPih3g.roa (raw, json)
Hash identifier:          uY96osPbB1vWEsSwjgByjxT+RqRVHigJrR53G48GHlk=
Subject key identifier:   B2:98:7D:CD:9B:FF:63:AF:F6:9B:54:F9:DA:B6:3C:BA:F3:E2:87:78
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       018FAF6C9F7CA318C49F6F8596889F31F0FF
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sph9zZv_Y6_2m1T52rY8uvPih3g.roa
Signing time:             Sat 25 May 2024 11:04:42 +0000
ROA not before:           Sat 25 May 2024 11:04:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:af6c:3db2/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:af:6c:9f:7c:a3:18:c4:9f:6f:85:96:88:9f:31:f0:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: May 25 11:04:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b2987dcd9bff63aff69b54f9dab63cbaf3e28778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:22:05:b7:d1:a1:db:28:bc:43:8a:9b:3a:
                    26:52:bc:a5:98:d0:e2:1e:c9:85:e6:e6:9a:da:2b:
                    42:1d:84:ff:13:46:3c:6f:7e:69:3c:61:50:86:5a:
                    3a:da:67:22:89:29:36:ff:89:f0:ec:5f:9a:76:91:
                    46:9e:31:21:0d:d1:9f:5a:10:09:fc:02:ea:f9:91:
                    74:74:2b:3a:33:b5:12:45:76:dc:dd:11:cf:c9:d5:
                    0c:97:04:bb:9e:77:6c:55:df:e9:e5:ad:73:b1:6b:
                    af:ab:93:1b:71:e1:66:54:7c:ff:12:fe:f7:2a:ec:
                    d9:e9:46:a1:3e:c5:61:f6:c2:f0:a9:41:ca:8b:68:
                    62:e1:3a:2e:50:be:e4:29:37:3b:76:9d:83:cb:a2:
                    b0:75:57:d0:c3:ba:ce:42:cc:db:77:87:f6:0c:f9:
                    b6:3b:95:42:63:55:0f:48:42:d4:2b:14:bb:9d:5e:
                    48:69:50:3c:35:ee:0c:09:65:fe:b5:09:6c:f0:a6:
                    0a:94:77:85:a0:0c:7d:38:20:37:ac:db:d2:34:fa:
                    d5:ba:e5:b9:ea:4b:97:df:5c:09:43:e4:4c:a5:fb:
                    6e:41:ba:50:ac:55:ac:e6:fa:9f:04:10:ed:d3:69:
                    bb:b7:60:64:3b:0a:14:ae:03:78:b6:11:db:6e:d6:
                    16:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:98:7D:CD:9B:FF:63:AF:F6:9B:54:F9:DA:B6:3C:BA:F3:E2:87:78
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sph9zZv_Y6_2m1T52rY8uvPih3g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:ea:1d:f5:75:c6:8a:3e:27:33:0a:07:2b:73:c3:8c:94:66:
         5d:31:c0:1b:e5:50:62:48:97:20:e3:91:32:c3:f1:b0:cc:a3:
         b0:bd:f9:65:ac:b3:be:ac:6a:df:dc:0d:c9:79:8f:64:5c:89:
         bc:8c:b1:48:ef:51:f3:af:1d:a3:37:f4:25:e7:26:ab:ef:1c:
         d4:31:43:59:75:12:68:c0:a2:1e:4f:36:74:69:b8:5a:26:67:
         1a:86:4f:98:8a:77:6d:5b:79:de:7a:39:4a:7a:22:34:49:fc:
         52:fe:1a:de:ae:d4:f2:b8:08:f7:41:a0:50:4c:d1:26:92:d3:
         48:64:33:90:eb:8b:fc:bb:f3:e4:e9:36:8e:48:ad:c4:fe:b5:
         d0:b2:5b:a4:9b:dc:c2:cc:b8:95:20:29:f7:0e:a1:56:1c:c9:
         78:f4:8b:8b:91:10:d0:1c:c0:db:52:d1:22:34:94:bc:6a:d6:
         dc:bb:e2:54:99:52:bf:a3:5f:ef:e7:a0:23:49:29:b7:a2:e5:
         7f:f3:31:c7:b6:9f:a9:64:bc:01:5d:ab:82:72:bb:e0:7f:75:
         2a:6f:f8:d5:94:7a:94:8a:0c:95:42:ae:32:e6:ce:49:cb:c0:
         21:d1:a9:2a:c9:98:33:0c:16:db:78:c7:14:ac:a4:71:f0:02:
         35:c2:5c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:03:47 2025 by rpki-client