This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/x2l1QZdSYuQZbiIzpKfL0vH6l0A.roa
File:                     x2l1QZdSYuQZbiIzpKfL0vH6l0A.roa (raw, json)
Hash identifier:          qCfSqDRrr9J+A9Gt+5Gcw5iRIKMcKfr1eg3j5KB+xPM=
Subject key identifier:   C7:69:75:41:97:52:62:E4:19:6E:22:33:A4:A7:CB:D2:F1:FA:97:40
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       019140EAF0AF2B91E67610B4A5E1430B46C0
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/x2l1QZdSYuQZbiIzpKfL0vH6l0A.roa
Signing time:             Sun 11 Aug 2024 10:10:24 +0000
ROA not before:           Sun 11 Aug 2024 10:10:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:40:ea:f0:af:2b:91:e6:76:10:b4:a5:e1:43:0b:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Aug 11 10:10:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c7697541975262e4196e2233a4a7cbd2f1fa9740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ee:1f:d9:27:c4:41:9d:00:e0:b4:fc:15:2a:
                    8f:99:9b:a3:39:28:d6:11:c3:8d:61:6c:37:91:c0:
                    d7:c1:af:a9:ee:44:86:68:f5:0c:f8:13:10:76:06:
                    36:d9:a4:fb:93:e4:28:89:91:80:5e:e6:dc:01:25:
                    b7:b6:dd:d2:72:cf:57:e4:aa:09:ec:d2:4b:36:ae:
                    f1:ef:6c:03:13:8a:ce:81:41:72:bc:4d:a7:c6:3b:
                    eb:5d:c3:3e:62:95:eb:ae:13:cd:83:da:bb:d6:c1:
                    f9:67:26:5d:e1:e4:e9:ce:d5:b6:c0:5a:3f:ca:67:
                    f2:cb:14:39:7c:04:70:db:57:e8:82:d2:b4:09:6c:
                    03:dd:82:5d:ea:89:36:ee:a8:f8:13:90:67:50:75:
                    ce:81:a4:44:bd:c2:a4:e2:c7:9e:ad:41:83:07:99:
                    97:f4:7a:94:a1:d5:9f:39:84:3f:85:11:08:a8:1c:
                    e5:eb:03:94:b5:60:5d:a9:d7:ad:7b:fb:cd:17:3d:
                    f5:42:ba:6e:e7:96:57:32:a7:98:f5:9b:e1:f9:1b:
                    a0:54:f0:2d:49:8a:b6:41:3c:51:2b:69:c0:5f:b9:
                    06:a3:cd:49:d6:34:00:c5:2a:1f:52:78:81:3a:c0:
                    be:f4:19:41:94:e2:64:27:0c:bb:8e:40:86:cc:ae:
                    00:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:69:75:41:97:52:62:E4:19:6E:22:33:A4:A7:CB:D2:F1:FA:97:40
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/x2l1QZdSYuQZbiIzpKfL0vH6l0A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:190:fdf2:f302/128

    Signature Algorithm: sha256WithRSAEncryption
         3a:b1:6c:fd:7c:9b:52:1a:d9:2d:c1:cc:e5:1f:58:09:43:bf:
         83:20:a6:51:b1:60:7c:b9:04:d1:08:39:ed:53:25:41:df:5c:
         49:58:d7:40:b7:31:5b:c5:c4:94:4b:72:c0:6b:4f:02:38:14:
         32:e7:30:49:d2:81:1b:01:ba:66:5f:b1:16:67:76:c6:c5:64:
         b8:7f:db:e4:f6:89:98:85:22:54:c2:c2:28:84:82:c0:c1:88:
         89:4a:1f:60:4e:c0:35:c1:1f:2e:e0:01:dc:60:a8:91:f2:c7:
         40:95:a0:d9:93:9a:c6:20:c6:09:58:be:f2:08:13:cb:c3:77:
         b4:8c:cf:41:09:0f:67:53:ae:e3:8a:02:2d:92:ab:76:2d:39:
         9f:d8:bb:b8:2f:40:f0:3c:f6:c8:a9:72:1b:46:8c:79:3d:76:
         38:4f:eb:e4:f1:ec:a6:39:17:2e:ec:d3:90:e9:b8:4c:75:d9:
         6c:d2:5e:c8:a6:f9:72:85:fb:e0:ca:fb:5e:5b:d5:7a:8a:7b:
         de:aa:93:2f:c8:e3:ab:af:f5:e6:82:5f:35:7f:8a:d5:75:d8:
         10:7b:ee:6b:4d:66:cc:04:5b:62:84:6b:72:ee:29:a2:a2:b4:
         69:51:95:18:0d:eb:f4:e7:84:55:91:78:e1:19:1a:4f:a8:5e:
         ac:18:0a:62
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZFA6vCvK5HmdhC0peFDC0bAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODExMTAxMDI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzY5NzU0MTk3NTI2MmU0MTk2ZTIyMzNhNGE3Y2JkMmYxZmE5NzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu4f2SfEQZ0A4LT8FSqPmZujOSjW
EcONYWw3kcDXwa+p7kSGaPUM+BMQdgY22aT7k+QoiZGAXubcASW3tt3Scs9X5KoJ
7NJLNq7x72wDE4rOgUFyvE2nxjvrXcM+YpXrrhPNg9q71sH5ZyZd4eTpztW2wFo/
ymfyyxQ5fARw21fogtK0CWwD3YJd6ok27qj4E5BnUHXOgaREvcKk4seerUGDB5mX
9HqUodWfOYQ/hREIqBzl6wOUtWBdqdete/vNFz31Qrpu55ZXMqeY9Zvh+RugVPAt
SYq2QTxRK2nAX7kGo81J1jQAxSofUniBOsC+9BlBlOJkJwy7jkCGzK4AXwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFMdpdUGXUmLkGW4iM6Sny9Lx+pdAMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEveDJsMVFaZFNZdVFaYmlJenBLZkwwdkg2bDBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAOrFs/XybUhrZLcHM5R9YCUO/
gyCmUbFgfLkE0Qg57VMlQd9cSVjXQLcxW8XElEtywGtPAjgUMucwSdKBGwG6Zl+x
Fmd2xsVkuH/b5PaJmIUiVMLCKISCwMGIiUofYE7ANcEfLuAB3GCokfLHQJWg2ZOa
xiDGCVi+8ggTy8N3tIzPQQkPZ1Ou44oCLZKrdi05n9i7uC9A8Dz2yKlyG0aMeT12
OE/r5PHspjkXLuzTkOm4THXZbNJeyKb5coX74Mr7XlvVeop73qqTL8jjq6/15oJf
NX+K1XXYEHvua01mzARbYoRrcu4poqK0aVGVGA3r9OeEVZF44RkaT6herBgKYg==
-----END CERTIFICATE-----
Generated at Fri Dec 19 01:54:46 2025 by rpki-client