This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yElCSqE0_bK28T7PWpLzVNHEkcI.roa
File:                     yElCSqE0_bK28T7PWpLzVNHEkcI.roa (raw, json)
Hash identifier:          WwCFp05TfPBDbS6acC8tpK0wi5nA3+6eSUlhnMiFEzE=
Subject key identifier:   C8:49:42:4A:A1:34:FD:B2:B6:F1:3E:CF:5A:92:F3:54:D1:C4:91:C2
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       0190B3F01641124FD760E39C7D47199C70DA
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yElCSqE0_bK28T7PWpLzVNHEkcI.roa
Signing time:             Mon 15 Jul 2024 01:09:34 +0000
ROA not before:           Mon 15 Jul 2024 01:09:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:b3:f0:16:41:12:4f:d7:60:e3:9c:7d:47:19:9c:70:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jul 15 01:09:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c849424aa134fdb2b6f13ecf5a92f354d1c491c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:b9:b0:35:ea:a2:d1:aa:42:5b:81:0e:4b:
                    96:e7:15:6f:6e:08:c0:c3:07:f5:5b:a7:61:dd:38:
                    9c:35:5c:b3:61:2a:f9:b6:78:a0:65:85:1b:d2:f7:
                    12:d1:d2:44:25:cd:49:58:da:cd:68:25:09:84:f9:
                    c3:bc:74:6b:18:bc:e4:f8:0b:da:f5:1c:f1:bc:bb:
                    dd:7d:bf:58:60:e9:62:42:b8:e8:48:a6:38:0b:63:
                    82:a3:55:80:10:da:50:7f:91:e9:12:d7:a5:df:06:
                    59:09:a4:20:3f:4e:4a:ae:63:78:ac:99:15:66:c1:
                    a4:bf:4d:18:c6:3e:c7:ca:37:dd:c6:37:34:25:98:
                    f4:64:cc:28:38:9b:e7:7e:43:9e:e1:a9:ad:7e:1d:
                    65:6e:c6:34:a7:91:45:ef:56:bc:da:48:99:56:a3:
                    47:41:57:e9:f4:84:46:fe:be:c2:3f:c0:21:21:e9:
                    8e:bc:5d:e7:b8:63:fe:23:ca:b8:20:2e:9b:ed:e6:
                    ba:f5:74:a7:08:05:ed:0a:87:33:76:63:06:40:d3:
                    e1:67:93:0b:6c:fe:35:b7:4c:b8:54:c6:34:bd:bb:
                    1b:f5:9c:7e:f0:3d:c4:e9:00:25:3f:4c:c3:8f:e3:
                    20:bf:60:73:bb:0d:bf:b8:cb:54:cf:fa:42:15:4c:
                    ae:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:49:42:4A:A1:34:FD:B2:B6:F1:3E:CF:5A:92:F3:54:D1:C4:91:C2
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yElCSqE0_bK28T7PWpLzVNHEkcI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:e7:d4:18:a4:b8:74:1b:78:d2:77:a7:cf:bc:46:7e:de:6b:
         9f:67:67:53:f3:0b:52:df:56:d0:22:d2:b3:49:0b:b2:92:01:
         7e:30:d9:02:41:88:56:e2:a2:ce:a8:08:80:77:4e:2c:61:5c:
         04:46:91:32:85:6e:5f:8b:39:e6:b1:a8:d4:0d:33:ee:b4:84:
         f7:78:15:0b:a9:af:98:4d:cb:e7:fd:b7:92:a7:a1:79:a2:ff:
         78:32:23:69:d2:03:26:2f:82:50:5f:65:56:0f:97:5e:12:fa:
         15:7b:98:db:8d:67:3e:0f:5e:e1:06:34:48:01:84:dc:a1:01:
         db:ef:55:98:17:f2:ba:24:fa:b6:20:98:39:07:bf:1a:92:88:
         09:a0:db:d5:d1:b6:e5:be:b9:9e:62:20:44:77:f9:e4:25:df:
         61:a9:93:d9:90:de:1a:35:a8:fb:ff:ea:04:95:68:fc:52:85:
         50:16:df:27:3b:5c:6a:17:21:18:08:7a:91:e8:65:db:2f:47:
         40:fd:02:1c:64:7e:e5:3e:20:70:2c:d2:70:97:f2:e2:07:be:
         6c:95:a1:32:fe:af:6a:4a:0d:f6:2b:e6:7f:10:1a:97:39:cf:
         34:3d:a6:07:ff:56:98:6f:ab:95:f9:40:1b:8e:64:d0:11:93:
         74:d0:57:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:36:49 2025 by rpki-client