This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/K2N3RJYaT98eWUrK4Qybax5ZzVw.roa
File:                     K2N3RJYaT98eWUrK4Qybax5ZzVw.roa (raw, json)
Hash identifier:          zrYRY0GbitbhMX/juxv1KqYcjxKODKE8/th9hOCkRS8=
Subject key identifier:   2B:63:77:44:96:1A:4F:DF:1E:59:4A:CA:E1:0C:9B:6B:1E:59:CD:5C
Certificate issuer:       /CN=02da06259534dc452089d291ad277eeac16cd42a
Certificate serial:       0191454F
Authority key identifier: 02:DA:06:25:95:34:DC:45:20:89:D2:91:AD:27:7E:EA:C1:6C:D4:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AtoGJZU03EUgidKRrSd-6sFs1Co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/K2N3RJYaT98eWUrK4Qybax5ZzVw.roa
Signing time:             Mon 13 Jun 2022 05:30:08 +0000
ROA not before:           Mon 13 Jun 2022 05:30:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205960
IP address blocks:        45.91.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26297679 (0x191454f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02da06259534dc452089d291ad277eeac16cd42a
        Validity
            Not Before: Jun 13 05:30:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2b637744961a4fdf1e594acae10c9b6b1e59cd5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7e:dd:75:f6:4c:1b:f9:69:94:c3:c7:41:1c:
                    25:db:1c:2f:a4:d5:d5:33:c5:17:82:26:55:0c:9b:
                    36:bc:c7:70:77:d5:59:0d:d0:e5:48:16:37:0c:37:
                    b8:9d:0c:85:8a:83:c4:37:93:4e:b9:6a:98:a2:63:
                    02:0b:ef:c6:ab:91:32:b0:07:22:86:de:98:fe:ce:
                    38:c9:53:dd:c4:a5:a7:91:ec:7e:0f:a1:c2:0b:91:
                    63:f4:cf:ef:04:8e:10:f0:c4:b0:53:a2:eb:2b:53:
                    5f:53:3f:d1:5f:61:23:db:22:ca:25:38:d6:2f:1b:
                    9f:ae:79:f2:24:ec:6a:1e:54:30:9b:5a:01:35:a6:
                    49:63:c0:0d:ce:e7:cf:89:43:a8:b8:a8:38:31:7e:
                    ea:cd:65:33:31:09:74:5d:8c:17:86:ae:5b:4b:95:
                    24:12:34:69:ca:b3:10:6d:c3:7a:22:d3:9f:c1:58:
                    49:b4:51:57:71:a5:1c:43:34:80:5f:c0:ae:1d:a9:
                    36:40:24:9e:40:3f:cd:a5:6c:06:6d:1d:29:b7:dd:
                    dc:82:88:ae:27:f6:0a:a5:95:ac:57:09:dc:93:27:
                    6b:11:37:14:e3:f7:87:0a:c5:7d:c6:16:4a:d6:34:
                    ce:22:c0:c8:cb:aa:b5:18:f4:c9:47:ce:ad:66:15:
                    85:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:63:77:44:96:1A:4F:DF:1E:59:4A:CA:E1:0C:9B:6B:1E:59:CD:5C
            X509v3 Authority Key Identifier:
                keyid:02:DA:06:25:95:34:DC:45:20:89:D2:91:AD:27:7E:EA:C1:6C:D4:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtoGJZU03EUgidKRrSd-6sFs1Co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/K2N3RJYaT98eWUrK4Qybax5ZzVw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/AtoGJZU03EUgidKRrSd-6sFs1Co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:49:9d:97:64:15:09:3a:93:d3:22:f1:62:3d:59:94:65:bc:
         3d:4f:cf:64:42:10:47:61:94:1f:74:75:f0:e7:03:61:11:e9:
         12:ea:45:67:95:b2:ff:28:52:ef:75:81:7c:a9:86:d3:ca:b2:
         71:23:7e:c6:b4:0d:0c:b0:9e:2e:59:ce:60:77:6d:24:51:6a:
         0c:85:92:11:f8:82:08:41:cf:5f:28:ef:b3:d7:8e:d1:93:10:
         28:56:72:91:da:9f:77:8c:4a:fa:c7:dd:01:3f:c8:f1:93:c3:
         91:f5:13:53:1c:79:77:44:1f:cc:99:78:62:e1:45:ef:77:b9:
         60:a5:79:87:4d:53:1d:b4:8a:d4:52:42:e3:35:fb:a0:0e:0c:
         f8:f8:4b:4a:94:9a:ce:c5:44:2a:b0:5a:0f:63:2f:88:47:8c:
         31:13:9b:c7:ca:20:31:ff:1c:7b:80:e4:cc:21:30:11:47:06:
         a3:2a:b8:b0:6b:5f:34:56:9e:ea:eb:60:0f:b5:20:b7:53:36:
         3e:0b:1b:d7:6c:23:d6:7b:7e:d0:19:ca:11:ec:30:cf:67:e1:
         40:c2:ce:fd:af:12:31:f3:17:df:52:e7:e9:aa:9b:21:cd:89:
         2f:95:e7:4d:4e:c0:07:a2:eb:da:26:b1:0a:ad:72:14:1a:48:
         d9:e9:a5:b7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAZFFTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MmRhMDYyNTk1MzRkYzQ1MjA4OWQyOTFhZDI3N2VlYWMxNmNkNDJhMB4XDTIyMDYx
MzA1MzAwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmI2Mzc3NDQ5NjFh
NGZkZjFlNTk0YWNhZTEwYzliNmIxZTU5Y2Q1YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMd+3XX2TBv5aZTDx0EcJdscL6TV1TPFF4ImVQybNrzHcHfV
WQ3Q5UgWNww3uJ0MhYqDxDeTTrlqmKJjAgvvxquRMrAHIobemP7OOMlT3cSlp5Hs
fg+hwguRY/TP7wSOEPDEsFOi6ytTX1M/0V9hI9siyiU41i8bn6558iTsah5UMJta
ATWmSWPADc7nz4lDqLioODF+6s1lMzEJdF2MF4auW0uVJBI0acqzEG3DeiLTn8FY
SbRRV3GlHEM0gF/Arh2pNkAknkA/zaVsBm0dKbfd3IKIrif2CqWVrFcJ3JMnaxE3
FOP3hwrFfcYWStY0ziLAyMuqtRj0yUfOrWYVhesCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQrY3dElhpP3x5ZSsrhDJtrHlnNXDAfBgNVHSMEGDAWgBQC2gYllTTcRSCJ
0pGtJ37qwWzUKjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0F0b0dKWlUwM0VVZ2lkS1JyU2QtNnNGczFDby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTkvM2Y1YzIxLTdiM2ItNDBmNy04ODUxLWNkMzJmMGQ0MDg2Yi8x
L0syTjNSSllhVDk4ZVdVcks0UXliYXg1WnpWdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkv
M2Y1YzIxLTdiM2ItNDBmNy04ODUxLWNkMzJmMGQ0MDg2Yi8xL0F0b0dKWlUwM0VV
Z2lkS1JyU2QtNnNGczFDby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1b4TANBgkqhkiG9w0BAQsFAAOC
AQEAVkmdl2QVCTqT0yLxYj1ZlGW8PU/PZEIQR2GUH3R18OcDYRHpEupFZ5Wy/yhS
73WBfKmG08qycSN+xrQNDLCeLlnOYHdtJFFqDIWSEfiCCEHPXyjvs9eO0ZMQKFZy
kdqfd4xK+sfdAT/I8ZPDkfUTUxx5d0QfzJl4YuFF73e5YKV5h01THbSK1FJC4zX7
oA4M+PhLSpSazsVEKrBaD2MviEeMMRObx8ogMf8ce4DkzCEwEUcGoyq4sGtfNFae
6utgD7Ugt1M2Pgsb12wj1nt+0BnKEewwz2fhQMLO/a8SMfMX31Ln6aqbIc2JL5Xn
TU7AB6Lr2iaxCq1yFBpI2emltw==
-----END CERTIFICATE-----
Generated at Mon Dec 15 19:26:09 2025 by rpki-client