This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/hNQBPaT3Mjbm_F5mv66oAR4WGQM.roa
File:                     hNQBPaT3Mjbm_F5mv66oAR4WGQM.roa (raw, json)
Hash identifier:          2XCj9y5WAdeqWKrbiODHzOKE14I0Xk7chdCHcEOmtT4=
Subject key identifier:   84:D4:01:3D:A4:F7:32:36:E6:FC:5E:66:BF:AE:A8:01:1E:16:19:03
Certificate issuer:       /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial:       019A6E136ADAF3E3F371DEE6E42786B89F16
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/hNQBPaT3Mjbm_F5mv66oAR4WGQM.roa
Signing time:             Mon 10 Nov 2025 14:02:37 +0000
ROA not before:           Mon 10 Nov 2025 14:02:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        45.149.60.0/23 maxlen: 23
                          45.149.62.0/24 maxlen: 24
                          194.50.1.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:6e:13:6a:da:f3:e3:f3:71:de:e6:e4:27:86:b8:9f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
        Validity
            Not Before: Nov 10 14:02:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=84d4013da4f73236e6fc5e66bfaea8011e161903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e1:0e:32:c5:b2:c4:5f:25:c5:f1:b2:fe:1c:
                    02:98:28:de:5f:2b:d8:66:5d:6a:27:d0:a5:ca:3d:
                    bc:3d:53:12:36:3b:e4:b1:f3:0c:67:50:25:5d:af:
                    13:74:c8:3a:cc:7d:4f:b9:9b:a3:b5:f9:13:28:89:
                    4f:09:5c:3f:2a:d3:b3:19:29:33:e4:49:07:b4:b8:
                    4f:cb:1c:b0:12:34:20:f8:0a:dc:b2:3a:b7:ef:08:
                    b5:3f:f4:68:38:ee:37:72:01:e9:76:69:96:a7:d9:
                    86:a7:ce:e1:a9:2a:82:00:ba:02:1e:28:b4:b9:70:
                    6b:01:86:a6:bf:5a:5a:97:11:4c:ad:77:08:1c:7d:
                    a4:04:9f:6f:f2:33:7e:60:be:2a:bd:c2:be:0e:6e:
                    b6:00:a2:71:5d:a1:60:b5:b3:75:2d:25:fe:ba:36:
                    2c:1d:ea:b8:3b:43:f2:b0:b1:3f:2b:bb:b6:de:bb:
                    b9:3f:b6:b3:a9:14:09:3e:8c:65:64:84:4a:2a:5b:
                    1f:2c:d6:2c:51:a1:f5:29:ba:d3:47:3b:46:6c:f3:
                    52:e4:a2:1f:5a:b9:d4:90:49:24:23:b9:3a:76:5d:
                    ee:b1:cf:9a:02:a1:7a:54:02:bb:d1:9a:ac:1b:c9:
                    64:3e:8b:6c:cb:8a:50:29:64:1c:67:d8:5b:e8:16:
                    a5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D4:01:3D:A4:F7:32:36:E6:FC:5E:66:BF:AE:A8:01:1E:16:19:03
            X509v3 Authority Key Identifier:
                keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/hNQBPaT3Mjbm_F5mv66oAR4WGQM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.60.0-45.149.62.255
                  194.50.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:2c:34:2e:5e:a3:bf:be:9c:48:c3:fb:3a:10:a9:3c:d4:4b:
         57:12:09:58:4e:11:a8:44:64:c2:c1:d1:9c:99:4c:b7:80:ad:
         68:50:6a:cd:93:78:09:18:6b:35:42:5e:a5:c8:10:d5:3e:d7:
         4a:2e:bd:9f:5c:e2:12:75:48:ae:96:fe:15:7c:e2:1b:17:41:
         3c:e1:5d:0b:67:91:7c:3b:68:5f:cc:b6:44:7b:cb:f0:6e:c0:
         af:f6:74:18:06:30:65:f9:01:02:2f:bf:3b:db:d6:95:60:10:
         e5:23:52:99:df:0b:e7:06:5e:4b:a5:d3:60:30:ca:75:22:f2:
         09:bd:1f:32:3d:0a:e6:2f:33:a1:c9:4c:5c:08:e1:55:2a:6c:
         9f:79:89:13:fd:1f:33:ff:11:94:c8:22:ca:50:6c:7a:0f:54:
         58:54:e6:56:02:04:2c:78:99:3a:02:4c:7a:bc:b7:26:e5:b0:
         e8:cd:45:0a:bd:cf:b7:b2:c6:28:8c:19:72:f2:51:29:98:87:
         1e:4f:5d:94:c5:e6:af:37:2f:41:c2:1d:aa:35:99:8b:d3:7f:
         a9:ae:39:30:0b:91:c8:c7:d2:6e:b4:44:34:b1:9d:a7:e4:5a:
         8a:74:8d:39:b5:0e:69:70:cc:57:14:ca:cb:50:b4:01:eb:c8:
         7d:74:ab:de
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Dec 8 03:01:05 2025 by rpki-client