This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ec326d-849f-409c-8933-19cca912d827/1/tX42yjt7xCJkXNM8FT1myD5E7gw.roa
File:                     tX42yjt7xCJkXNM8FT1myD5E7gw.roa (raw, json)
Hash identifier:          kCn9GxdKmSXZbegXAhDnAK3bH3Mxt6cJwSg3Pwqap28=
Subject key identifier:   B5:7E:36:CA:3B:7B:C4:22:64:5C:D3:3C:15:3D:66:C8:3E:44:EE:0C
Certificate issuer:       /CN=9f73adb2a909c681fffd6cdb1ac3725739f6e868
Certificate serial:       021BFD26
Authority key identifier: 9F:73:AD:B2:A9:09:C6:81:FF:FD:6C:DB:1A:C3:72:57:39:F6:E8:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3OtsqkJxoH__WzbGsNyVzn26Gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ec326d-849f-409c-8933-19cca912d827/1/tX42yjt7xCJkXNM8FT1myD5E7gw.roa
Signing time:             Fri 24 Jun 2022 14:10:31 +0000
ROA not before:           Fri 24 Jun 2022 14:10:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209371
IP address blocks:        45.128.97.0/24 maxlen: 24
                          45.128.98.0/24 maxlen: 24
                          45.128.96.0/24 maxlen: 24
                          45.128.99.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35388710 (0x21bfd26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f73adb2a909c681fffd6cdb1ac3725739f6e868
        Validity
            Not Before: Jun 24 14:10:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b57e36ca3b7bc422645cd33c153d66c83e44ee0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e9:68:4e:1a:56:68:61:85:5c:19:b7:e9:69:
                    41:6f:9f:59:18:f9:02:95:06:ab:62:31:79:f0:66:
                    ec:c2:84:12:97:48:e4:59:fb:0e:e7:86:e4:24:ac:
                    c3:54:ba:93:3e:64:0e:0c:00:30:a9:2a:3f:fe:39:
                    cf:36:36:e4:15:d7:8d:0f:13:e0:af:9a:bd:50:cb:
                    cb:6e:57:88:ae:ba:ad:18:84:cb:9d:52:5c:d3:c8:
                    ea:8a:f3:aa:cb:8d:de:e5:97:8b:b2:40:a7:39:9e:
                    4c:45:22:ca:b2:15:75:44:09:7d:5d:23:5f:a5:99:
                    67:c2:9e:ab:3f:af:ba:9c:5c:fc:20:8e:65:87:06:
                    7c:eb:f7:df:94:e2:a3:25:8c:0b:c4:ae:93:7e:42:
                    3d:51:38:23:ab:f0:61:99:b2:a7:3b:28:e2:78:da:
                    2b:99:ce:76:12:f7:3d:42:0c:22:b7:93:19:5f:6b:
                    58:76:31:d3:d4:47:86:cb:fa:88:25:d6:83:ac:d3:
                    82:6c:fc:ac:21:bb:38:1b:84:8f:1b:31:71:f8:8e:
                    bc:ab:4f:b0:98:c7:11:c3:6c:78:72:93:aa:cf:8d:
                    7d:02:18:da:6e:eb:24:c2:98:a3:00:af:ef:71:69:
                    a0:64:43:32:ce:73:44:5b:a6:5b:a4:a2:b7:9b:b7:
                    40:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7E:36:CA:3B:7B:C4:22:64:5C:D3:3C:15:3D:66:C8:3E:44:EE:0C
            X509v3 Authority Key Identifier:
                keyid:9F:73:AD:B2:A9:09:C6:81:FF:FD:6C:DB:1A:C3:72:57:39:F6:E8:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3OtsqkJxoH__WzbGsNyVzn26Gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ec326d-849f-409c-8933-19cca912d827/1/tX42yjt7xCJkXNM8FT1myD5E7gw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ec326d-849f-409c-8933-19cca912d827/1/n3OtsqkJxoH__WzbGsNyVzn26Gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.128.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:83:6c:0a:3c:e9:52:d3:82:8b:0a:7f:62:a2:e4:ab:80:37:
         1c:95:22:40:a4:6e:a3:17:3a:3c:26:55:1c:c4:06:9b:f9:36:
         f6:21:3d:c7:75:35:7a:1b:4c:75:2b:63:ec:8d:75:88:0d:0c:
         b4:b3:e1:5b:e6:ed:4c:4c:34:74:4a:7a:5b:5b:e0:9d:7f:c2:
         da:26:74:00:61:74:33:f8:09:90:79:2f:e0:c1:31:d1:ed:45:
         48:2c:22:13:6c:cc:98:f1:66:a4:6b:d0:74:79:6a:a3:e6:5c:
         6f:1a:eb:a6:12:40:d1:13:01:d6:df:ef:fa:7a:4f:c9:1c:b8:
         3c:b1:42:bc:68:6e:37:3a:a7:04:7f:1c:20:09:bf:e9:03:dd:
         dc:f3:65:1c:8f:8c:6e:f3:2a:0a:2e:e1:5c:a9:2e:dc:52:fc:
         18:6f:f7:a0:d5:07:d0:d4:da:fd:da:e0:45:9d:aa:84:a3:bb:
         74:ce:a0:f8:c8:67:e0:d0:cc:e2:ed:d0:ad:7b:6f:fb:43:e9:
         ec:a7:0c:76:9f:fd:0d:ff:90:01:c3:97:07:34:23:90:8a:1c:
         9d:a4:c4:ce:de:c7:2a:43:31:38:d2:40:2b:e3:85:c5:b2:73:
         7b:c2:23:5f:99:60:9c:8e:fb:48:c0:a2:6f:cb:33:fa:c8:e8:
         f0:1b:67:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 14:41:07 2025 by rpki-client