This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/8DkTlraASMCoLZT4sb5RyT_25_8.roa
File:                     8DkTlraASMCoLZT4sb5RyT_25_8.roa (raw, json)
Hash identifier:          bBpN11P80K7Dj+6WYz8wa7YLMazDZ46pCD7YjVEebEg=
Subject key identifier:   F0:39:13:96:B6:80:48:C0:A8:2D:94:F8:B1:BE:51:C9:3F:F6:E7:FF
Certificate issuer:       /CN=a412528c69db5fc5cbaed74cb22e44a2bce445ad
Certificate serial:       0774E3A8
Authority key identifier: A4:12:52:8C:69:DB:5F:C5:CB:AE:D7:4C:B2:2E:44:A2:BC:E4:45:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pBJSjGnbX8XLrtdMsi5EorzkRa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/8DkTlraASMCoLZT4sb5RyT_25_8.roa
Signing time:             Sat 01 Jan 2022 01:59:01 +0000
ROA not before:           Sat 01 Jan 2022 01:59:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34962
IP address blocks:        45.88.200.0/24 maxlen: 24
                          45.88.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125100968 (0x774e3a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a412528c69db5fc5cbaed74cb22e44a2bce445ad
        Validity
            Not Before: Jan  1 01:59:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f0391396b68048c0a82d94f8b1be51c93ff6e7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f7:88:1c:41:6d:32:1e:5d:3b:12:29:e7:fd:
                    53:da:0b:3f:1e:38:19:40:83:09:8f:79:fa:18:09:
                    26:66:29:31:57:d5:cd:7b:53:65:e2:be:cc:a0:56:
                    9f:81:f6:d2:fd:b2:a6:ad:d3:3f:f5:8e:ee:ce:6e:
                    bf:fe:82:2b:12:75:7b:5d:8e:e4:eb:31:da:d3:81:
                    83:56:fb:77:86:08:e1:78:5c:42:8c:13:64:2b:3c:
                    c4:3a:a5:85:80:d5:f2:40:55:78:4c:8b:c8:4f:47:
                    bb:46:1b:a0:fd:12:ff:97:b0:6f:6f:5e:dc:66:dc:
                    18:65:98:d7:f9:19:03:18:53:d7:7e:26:b3:04:36:
                    96:f1:b4:4c:73:6c:ad:13:17:cc:46:50:a2:45:94:
                    8b:7c:59:34:ce:10:7a:f7:b9:dc:a0:11:55:98:44:
                    f9:e4:5e:1f:d5:01:02:6a:0d:d7:ff:39:e1:e9:35:
                    da:c9:5c:74:36:bc:b7:4d:2b:58:09:52:ac:40:1e:
                    d8:07:72:6e:51:89:7e:38:8c:da:6b:a6:ff:4c:e8:
                    ae:a0:b0:ba:06:1e:12:c3:69:e5:43:73:12:50:6b:
                    3f:db:4e:6d:62:2e:30:21:45:9b:03:1e:02:e6:0e:
                    df:2d:4f:d1:79:c3:0c:ae:73:06:76:70:10:24:09:
                    d8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:39:13:96:B6:80:48:C0:A8:2D:94:F8:B1:BE:51:C9:3F:F6:E7:FF
            X509v3 Authority Key Identifier:
                keyid:A4:12:52:8C:69:DB:5F:C5:CB:AE:D7:4C:B2:2E:44:A2:BC:E4:45:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBJSjGnbX8XLrtdMsi5EorzkRa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/8DkTlraASMCoLZT4sb5RyT_25_8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/pBJSjGnbX8XLrtdMsi5EorzkRa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.200.0/24
                  45.88.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:f5:d9:06:33:3f:ab:8c:de:27:03:a1:9c:5d:37:8f:a4:18:
         0e:ec:e5:95:47:a2:c7:98:f1:73:f2:9a:ad:e4:0c:e5:b6:3f:
         29:f5:fd:9d:02:6a:b7:2d:72:3e:6c:54:5a:25:53:c7:aa:fb:
         83:ba:66:11:d4:8d:e8:a8:db:7d:6c:f2:09:06:18:53:c5:45:
         fe:34:7a:60:c2:c4:89:ca:7a:b2:19:db:a9:9f:68:1f:e0:94:
         a5:f7:5f:c3:c6:7c:14:38:21:3e:fc:ba:b5:ea:b3:ea:0d:b0:
         10:7e:f6:9a:71:bc:e3:89:44:a8:96:39:64:7f:a1:2f:9c:4e:
         64:74:6a:de:20:ff:ca:0f:c6:8a:bc:dd:09:58:06:42:1c:4d:
         17:1c:b8:1f:86:6f:d5:4d:43:3a:c7:a3:9d:2f:70:13:ce:51:
         8a:79:70:18:c6:c9:9b:b6:82:83:79:7c:59:27:33:35:2e:b2:
         57:8a:b6:b9:a4:55:ba:27:85:81:49:e8:ac:6e:45:76:ca:7f:
         a1:74:91:a9:f1:90:95:46:ec:79:98:74:a0:2e:4f:dd:0a:19:
         7c:b0:5f:6b:20:f1:7d:0d:d6:dd:6e:ea:cf:2f:7a:d5:30:db:
         40:1a:ea:a8:cb:9e:af:d7:ae:f9:54:89:01:ae:90:0d:af:5f:
         be:2f:8b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 09:30:51 2025 by rpki-client