This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xdJlJHwG_DPJU-K_UB-W_hr6ccA.roa
File:                     xdJlJHwG_DPJU-K_UB-W_hr6ccA.roa (raw, json)
Hash identifier:          7EaewZRgvcIsVfJQcXCFDkXJRjfcZvrp40EBO15Op8k=
Subject key identifier:   C5:D2:65:24:7C:06:FC:33:C9:53:E2:BF:50:1F:96:FE:1A:FA:71:C0
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       01942F4A1CAEF03DAD07D597A666EAA8B0FD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xdJlJHwG_DPJU-K_UB-W_hr6ccA.roa
Signing time:             Sat 04 Jan 2025 03:09:33 +0000
ROA not before:           Sat 04 Jan 2025 03:09:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:2f:4a:1c:ae:f0:3d:ad:07:d5:97:a6:66:ea:a8:b0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jan  4 03:09:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c5d265247c06fc33c953e2bf501f96fe1afa71c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f0:7d:90:ec:16:b9:b7:96:8a:aa:13:a4:75:
                    bb:c0:a3:ac:a3:9e:c7:01:d0:98:0f:09:8d:3c:3a:
                    b6:db:2a:3f:0e:85:ab:c0:7b:f6:34:a5:8f:f9:24:
                    25:03:4d:a4:fe:e1:63:30:4d:7d:bd:83:dd:5f:8f:
                    f6:7e:5f:d6:27:16:72:e6:90:48:f3:86:90:26:a8:
                    6a:a5:7e:e7:ed:58:79:93:20:42:46:33:73:af:03:
                    da:d9:ae:1e:88:5b:06:71:3b:6b:86:9e:96:49:5a:
                    ad:2a:bd:d0:ff:69:3f:e9:89:f9:1f:f2:5b:8d:f0:
                    e3:b0:f0:cc:99:d7:21:b6:3a:ef:7c:fe:84:a4:d6:
                    5e:a1:14:d1:bc:db:31:94:c1:66:b7:95:39:ff:3c:
                    0d:5a:8b:2f:50:29:e8:61:dd:de:ad:3d:62:de:7a:
                    c1:9e:42:00:4f:76:5c:a8:48:9c:04:74:fd:af:d5:
                    72:b3:4a:43:1d:55:99:59:a0:a5:93:10:74:2b:cc:
                    e9:51:de:a6:67:cc:eb:26:6c:c2:fe:ec:91:90:66:
                    13:58:f7:82:06:a6:5b:86:7f:b9:e6:06:5f:5b:cc:
                    59:15:34:dd:24:bb:78:0e:a3:8c:3f:f0:e1:07:0d:
                    3a:28:60:81:df:86:9b:1d:92:ab:68:44:ba:08:7c:
                    4f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D2:65:24:7C:06:FC:33:C9:53:E2:BF:50:1F:96:FE:1A:FA:71:C0
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xdJlJHwG_DPJU-K_UB-W_hr6ccA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:194:2c0d:6680/128

    Signature Algorithm: sha256WithRSAEncryption
         8d:88:f6:9b:d4:3a:54:0a:b8:51:b9:e4:89:50:af:a5:59:18:
         2f:67:76:2f:a8:93:b8:f1:ef:59:00:40:be:93:ff:c3:64:26:
         0d:f7:c9:33:7d:a7:4e:5b:62:f7:a7:90:fd:34:c0:cd:4b:43:
         ff:3a:af:6a:ee:f4:64:c4:83:2d:9e:3b:30:93:45:54:76:73:
         1f:ab:1b:2a:b6:f7:87:dd:08:09:6a:32:59:10:ed:e2:6c:3d:
         c1:84:eb:89:75:ec:8b:00:52:ae:75:0f:7e:6b:e9:aa:aa:99:
         5e:0b:28:aa:a6:cb:b8:75:35:43:4b:06:7b:83:95:d0:36:12:
         5d:0c:f7:f2:39:72:e8:38:d9:2c:e3:ac:b9:ed:a9:67:c6:8d:
         f2:35:3f:d0:27:1b:f0:db:9f:42:44:02:ac:f1:4a:28:22:03:
         1c:a0:cf:85:40:eb:c1:43:31:27:c3:87:f8:be:9f:ee:9b:44:
         20:8a:82:eb:e8:8a:44:e3:57:56:2e:9f:50:c1:80:ec:1e:ff:
         35:73:93:55:e7:39:9f:4f:99:f1:c6:57:7b:e9:74:b6:b9:2a:
         02:1b:77:ea:0a:1f:38:12:02:c7:77:54:b3:41:5c:53:fc:5f:
         5c:4a:b8:ae:e6:db:e8:06:65:12:cd:eb:c0:43:09:af:30:16:
         c7:2f:bf:ca
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZQvShyu8D2tB9WXpmbqqLD9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMTA0MDMwOTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWQyNjUyNDdjMDZmYzMzYzk1M2UyYmY1MDFmOTZmZTFhZmE3MWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfB9kOwWubeWiqoTpHW7wKOso57H
AdCYDwmNPDq22yo/DoWrwHv2NKWP+SQlA02k/uFjME19vYPdX4/2fl/WJxZy5pBI
84aQJqhqpX7n7Vh5kyBCRjNzrwPa2a4eiFsGcTtrhp6WSVqtKr3Q/2k/6Yn5H/Jb
jfDjsPDMmdchtjrvfP6EpNZeoRTRvNsxlMFmt5U5/zwNWosvUCnoYd3erT1i3nrB
nkIAT3ZcqEicBHT9r9Vys0pDHVWZWaClkxB0K8zpUd6mZ8zrJmzC/uyRkGYTWPeC
BqZbhn+55gZfW8xZFTTdJLt4DqOMP/DhBw06KGCB34abHZKraES6CHxPlwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFMXSZSR8BvwzyVPiv1Aflv4a+nHAMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEveGRKbEpId0dfRFBKVS1LX1VCLVdfaHI2Y2NBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGULA1mgDANBgkqhkiG9w0BAQsFAAOCAQEAjYj2m9Q6VAq4UbnkiVCvpVkY
L2d2L6iTuPHvWQBAvpP/w2QmDffJM32nTlti96eQ/TTAzUtD/zqvau70ZMSDLZ47
MJNFVHZzH6sbKrb3h90ICWoyWRDt4mw9wYTriXXsiwBSrnUPfmvpqqqZXgsoqqbL
uHU1Q0sGe4OV0DYSXQz38jly6DjZLOOsue2pZ8aN8jU/0Ccb8NufQkQCrPFKKCID
HKDPhUDrwUMxJ8OH+L6f7ptEIIqC6+iKRONXVi6fUMGA7B7/NXOTVec5n0+Z8cZX
e+l0trkqAht36gofOBICx3dUs0FcU/xfXEq4rubb6AZlEs3rwEMJrzAWxy+/yg==
-----END CERTIFICATE-----
Generated at Fri Dec 19 00:49:33 2025 by rpki-client