This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/w5CJDzii9YiaFffgryev7GJZyFs.roa
File:                     w5CJDzii9YiaFffgryev7GJZyFs.roa (raw, json)
Hash identifier:          Rgqza7GOtlWWgpDxw2THU+D0IWuFtTjjW3e9OEIXXuM=
Subject key identifier:   C3:90:89:0F:38:A2:F5:88:9A:15:F7:E0:AF:27:AF:EC:62:59:C8:5B
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       01917EB1BB11D2B24BDB503DADC556C452EA
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/w5CJDzii9YiaFffgryev7GJZyFs.roa
Signing time:             Fri 23 Aug 2024 10:04:22 +0000
ROA not before:           Fri 23 Aug 2024 10:04:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
                          2001:67c:64:ffff:0:191:7eb1:b675/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:7e:b1:bb:11:d2:b2:4b:db:50:3d:ad:c5:56:c4:52:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Aug 23 10:04:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c390890f38a2f5889a15f7e0af27afec6259c85b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5a:5d:db:7a:fa:6c:d3:a2:31:9c:df:1c:08:
                    82:2a:73:68:28:ea:2b:6c:4a:83:7b:0e:81:af:1d:
                    73:dd:41:02:5b:6f:f2:96:3a:10:06:0e:7c:f0:67:
                    42:fb:6d:fa:bd:d3:dd:0d:18:b4:d8:d6:7e:86:ce:
                    9f:ab:42:6e:36:b4:78:2a:7b:c7:37:9b:8c:9b:25:
                    0a:08:80:31:e0:b5:a4:1b:b4:60:1c:28:c5:87:65:
                    ca:b2:92:6f:09:a1:58:8b:80:4c:e9:f8:cf:06:fc:
                    b7:9e:69:9e:8b:6e:21:c8:56:b8:70:3d:1b:28:76:
                    3f:e8:85:b3:8c:fd:eb:70:d7:7f:4d:a4:6e:a5:1a:
                    89:d2:9e:a8:de:5e:b3:3d:75:d0:1e:1a:da:68:b3:
                    e1:33:fc:b6:8b:3f:e0:64:a4:d1:6c:83:91:ee:91:
                    49:99:b9:76:ee:68:e7:25:5e:9d:2b:76:8e:7c:db:
                    c6:c0:c0:ee:26:15:90:f4:73:c4:eb:47:f5:ea:d7:
                    0b:ba:b8:21:a6:b5:15:2d:e8:48:ad:ec:73:02:68:
                    62:bd:bb:0a:1e:3a:0b:41:74:d4:2b:f1:28:e5:99:
                    1d:7d:13:f9:f1:e2:da:c3:ac:97:4c:3c:0c:0e:a3:
                    c3:c3:63:f6:6d:21:00:e9:5a:d1:16:e9:58:19:11:
                    14:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:90:89:0F:38:A2:F5:88:9A:15:F7:E0:AF:27:AF:EC:62:59:C8:5B
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/w5CJDzii9YiaFffgryev7GJZyFs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:190:fdf2:f302/128
                  2001:67c:64:ffff:0:191:7eb1:b675/128

    Signature Algorithm: sha256WithRSAEncryption
         21:72:08:7a:c5:99:b7:31:3f:0f:fa:8c:c1:2f:27:77:34:f4:
         a8:14:c9:38:89:8e:6f:04:1d:49:6b:73:2d:8b:70:a2:2a:d4:
         62:49:30:9c:79:dd:ea:79:d4:d8:d0:b3:4c:ea:af:5a:22:b5:
         69:56:89:9e:3f:36:49:72:dd:9f:0c:3b:f4:9d:77:b5:be:cb:
         a2:9f:ba:3b:e2:c2:81:75:74:7e:e1:73:d6:94:7e:b5:28:32:
         92:06:a0:8e:0f:35:28:1c:d3:07:db:3b:49:24:78:25:b6:56:
         29:71:c4:a5:ce:5f:43:fe:6a:74:45:bf:dd:61:db:b6:6f:e1:
         ab:9f:35:5b:fa:4b:c4:7b:92:35:76:e2:f4:c2:a9:93:05:75:
         75:0d:91:8a:39:b3:f5:12:8e:bd:60:05:22:b2:c1:e0:b8:5e:
         f2:ff:b4:21:8d:cc:28:26:1b:04:47:92:12:b4:fb:10:da:78:
         f4:a0:61:7f:2f:7c:87:22:f4:37:82:c7:dd:8e:ce:77:7a:90:
         cc:07:3f:0e:c2:3e:fb:14:cd:26:8c:f1:dd:ae:0d:f1:e8:b3:
         96:64:87:62:80:62:04:dd:65:28:d5:1b:b2:35:a6:27:9e:1c:
         cb:b0:03:fd:42:fa:6e:c0:a7:5e:4a:23:d6:46:ba:d8:a3:d9:
         cd:f4:f2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 01:56:56 2025 by rpki-client