This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/u3k4DRfayzjXBaEjeTAQA9wIlJA.roa
File:                     u3k4DRfayzjXBaEjeTAQA9wIlJA.roa (raw, json)
Hash identifier:          G+I81uyYM3X2n3q7jSA2ER+glnGmu/0LcJH5LoM3NWQ=
Subject key identifier:   BB:79:38:0D:17:DA:CB:38:D7:05:A1:23:79:30:10:03:DC:08:94:90
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       01903C6DE92C698A975BF9A00D1C6B2C8CA4
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/u3k4DRfayzjXBaEjeTAQA9wIlJA.roa
Signing time:             Fri 21 Jun 2024 20:12:34 +0000
ROA not before:           Fri 21 Jun 2024 20:12:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3c:6d:e9:2c:69:8a:97:5b:f9:a0:0d:1c:6b:2c:8c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jun 21 20:12:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bb79380d17dacb38d705a12379301003dc089490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:15:6e:72:e6:f0:6b:6d:4b:97:0a:f5:f5:89:
                    48:2d:95:13:6a:a8:f0:21:7f:f2:06:ed:76:de:f6:
                    6f:d2:c6:bf:b8:9c:3c:22:28:ca:3e:d3:c0:f5:b1:
                    db:a3:51:a5:29:cb:63:db:7d:12:53:32:98:73:f3:
                    a2:cd:9c:1a:bd:41:68:a2:64:b7:4d:8f:f9:6a:f5:
                    06:2f:fa:07:e5:10:e1:41:0b:bc:db:e5:80:8f:0c:
                    18:41:39:35:8e:87:31:70:fc:06:2f:5f:8a:48:55:
                    43:23:1c:06:a9:11:64:ff:0f:ab:8f:02:54:8e:9d:
                    47:b8:09:36:c2:5f:7d:73:43:da:2e:b0:7a:56:38:
                    de:b3:f5:82:c6:e8:04:45:41:c3:2c:23:e3:43:a1:
                    06:25:b9:2c:9d:12:b0:1d:ff:8d:65:61:e8:52:f6:
                    be:ed:43:77:92:b5:c0:99:79:2b:d5:57:d8:65:34:
                    5f:1a:ae:38:0e:3d:be:70:70:c8:88:75:4e:31:84:
                    a2:d7:3a:ca:02:02:c8:0f:14:0b:9e:55:7b:51:ca:
                    c8:b6:74:f7:84:26:56:6c:54:42:75:27:59:35:bd:
                    33:05:02:73:0f:b1:a1:b7:9d:a5:a0:de:fb:e3:86:
                    b2:81:ef:49:cc:3f:c1:43:7c:56:96:7a:55:a7:d9:
                    f1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:79:38:0D:17:DA:CB:38:D7:05:A1:23:79:30:10:03:DC:08:94:90
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/u3k4DRfayzjXBaEjeTAQA9wIlJA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:e3:d5:c5:13:d0:d9:a3:f8:e4:e3:01:68:dc:c8:b1:22:cc:
         bc:51:36:f7:2c:6e:3b:cb:cd:47:9c:05:56:0e:78:f0:df:e0:
         b5:fb:3b:0c:ab:6c:24:5f:cd:92:bf:24:47:7e:89:bd:e4:6d:
         0e:5b:e6:39:d5:d1:d3:15:d6:f5:c3:ef:0d:45:1e:2d:f9:4d:
         d4:b6:b4:7e:57:66:fe:7f:a8:be:48:62:40:49:e3:32:2f:d9:
         5c:8b:50:60:76:b2:4a:29:1f:4e:06:b3:f4:38:41:eb:e0:43:
         cd:ba:9f:7d:39:7d:9e:24:dc:ad:18:6d:84:a7:be:67:29:0e:
         f9:4c:4c:eb:3e:01:56:0e:2b:cc:4e:df:c4:c9:cf:95:8e:a1:
         73:bb:d2:34:bd:0f:6b:e4:9b:12:44:4b:71:0c:d7:d7:76:42:
         f5:f0:96:94:ce:03:22:73:35:e0:7f:b1:91:05:f1:45:6e:85:
         52:f4:0e:0f:18:5c:1d:e0:cc:6b:55:1b:78:5e:50:9a:6d:b4:
         e2:fb:96:e7:db:3f:72:f5:b2:f5:f3:c0:60:00:8a:39:55:f2:
         6c:4f:89:fe:4f:f9:6c:15:2d:38:f9:e9:3a:d1:69:53:6b:7d:
         62:6a:8b:24:a1:8f:fb:b6:ae:05:75:fa:fe:cd:7d:9e:53:81:
         38:49:2f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 04:52:09 2025 by rpki-client