This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vZ5Wacs0Tbejw_ZnlgXQb4h4KOA.roa
File:                     vZ5Wacs0Tbejw_ZnlgXQb4h4KOA.roa (raw, json)
Hash identifier:          aMg+GEbZaC4BKbpicQdcTIWaAfNLU8yTzEc04+p5yr4=
Subject key identifier:   BD:9E:56:69:CB:34:4D:B7:A3:C3:F6:67:96:05:D0:6F:88:78:28:E0
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       0193D18126F0E44725DD272D5DA4596E79C9
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vZ5Wacs0Tbejw_ZnlgXQb4h4KOA.roa
Signing time:             Mon 16 Dec 2024 22:05:22 +0000
ROA not before:           Mon 16 Dec 2024 22:05:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:193:d180:441a/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:d1:81:26:f0:e4:47:25:dd:27:2d:5d:a4:59:6e:79:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Dec 16 22:05:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bd9e5669cb344db7a3c3f6679605d06f887828e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:84:ff:f9:9a:ab:bb:ea:f3:a6:7e:ce:2f:79:
                    d9:0d:e4:74:72:0b:3c:0c:80:b8:08:d2:81:72:8f:
                    66:3e:20:4d:73:25:55:98:ad:b1:14:a7:52:6c:b8:
                    2e:84:3a:29:02:50:e4:ac:db:e6:d8:9d:f9:29:53:
                    e8:12:48:1b:e4:bb:2c:74:c9:8a:56:23:3a:4f:5f:
                    56:20:0b:65:74:9d:d7:b2:1e:6b:f4:fa:53:69:fe:
                    3d:4f:5e:fd:de:dc:54:b7:0d:0f:10:54:56:49:29:
                    e8:a6:ef:29:8b:2b:a4:9f:80:b4:ee:97:ad:63:20:
                    ab:97:c2:99:47:7c:33:60:26:81:12:e6:c6:af:20:
                    82:9e:4c:81:1e:0f:80:b5:f8:ba:c0:f2:18:29:2c:
                    ad:32:a7:53:7e:31:af:db:c3:64:7d:9b:4b:2f:1b:
                    a5:9d:0d:0b:8f:18:56:98:8c:c5:2f:04:33:16:22:
                    52:d5:fd:20:be:4d:e8:1a:b4:47:46:49:3e:b8:5a:
                    96:3c:10:17:75:cf:6f:1e:35:ae:d5:37:d8:3e:df:
                    19:eb:6f:fb:cc:2f:61:3a:48:69:8b:55:5e:e7:f7:
                    65:18:f4:f4:13:c5:2f:6b:c0:2d:13:7f:e8:e7:a3:
                    28:00:28:35:3f:16:8b:0a:5b:27:cc:0e:83:5f:89:
                    f9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9E:56:69:CB:34:4D:B7:A3:C3:F6:67:96:05:D0:6F:88:78:28:E0
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vZ5Wacs0Tbejw_ZnlgXQb4h4KOA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:193:d180:441a/128

    Signature Algorithm: sha256WithRSAEncryption
         0b:00:2e:10:15:22:50:72:30:df:5d:57:17:d7:48:50:df:f4:
         a6:1f:a6:f4:a2:c1:ca:5c:a4:35:63:16:b0:a0:8f:92:fc:85:
         7a:ff:70:42:5b:1b:07:ee:6c:83:b6:6d:e0:81:3f:2e:ca:9c:
         d6:1b:e3:dd:cf:e7:9a:7c:e1:0f:db:64:f6:2b:03:64:ae:3a:
         ad:ee:cd:62:bb:15:56:ba:cd:39:e3:b8:d0:77:07:c1:af:da:
         9e:7f:b3:08:59:02:a6:c1:5f:59:2b:3a:ef:02:b5:a5:5f:ab:
         58:05:44:68:9d:e0:87:36:cb:d5:81:51:e0:86:58:55:1b:c7:
         41:f5:2a:04:48:3b:d9:82:d0:1a:64:94:4d:10:52:af:9a:9d:
         53:43:a0:8d:40:4d:2a:cf:cf:ae:70:2e:0d:aa:6c:f7:e4:67:
         17:61:21:d0:cc:8d:be:5c:ea:aa:5e:e9:a7:59:22:47:cc:ba:
         97:e9:75:ed:20:57:b0:f0:c6:a5:97:3a:7b:92:92:b0:80:18:
         17:90:a2:a3:c4:fa:30:57:5b:14:6f:f0:97:22:fd:cf:52:09:
         7e:5d:c1:f8:07:44:27:ce:80:8e:c5:9c:7f:d8:42:29:3d:59:
         4d:ca:1e:84:d7:44:5a:f3:7b:0b:40:c5:0f:51:38:17:87:ae:
         7e:04:ec:32
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Dec 15 04:55:28 2025 by rpki-client