This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/BycEiD3wFPFl3Xdep0JY_05KWDk.roa
File:                     BycEiD3wFPFl3Xdep0JY_05KWDk.roa (raw, json)
Hash identifier:          tpuPgPV6Y2CeeRdyVrNdWspiLUUU1noh0+dGxM9q92s=
Subject key identifier:   07:27:04:88:3D:F0:14:F1:65:DD:77:5E:A7:42:58:FF:4E:4A:58:39
Certificate issuer:       /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial:       019AE03B36D6FDDF1FA42401250F5F8D53FA
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/BycEiD3wFPFl3Xdep0JY_05KWDk.roa
Signing time:             Tue 02 Dec 2025 18:02:48 +0000
ROA not before:           Tue 02 Dec 2025 18:02:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     42375
IP address blocks:        2a0a:c380::/29 maxlen: 29
                          2a0a:f580::/32 maxlen: 32
                          2a0a:f581::/32 maxlen: 32
                          2a0e:7f40::/32 maxlen: 32
                          2a0e:7f41::/32 maxlen: 32
                          2a0e:7f42::/32 maxlen: 32
                          2a11:4640::/29 maxlen: 29
                          2a11:5880::/29 maxlen: 29
                          2a11:8440::/32 maxlen: 32
                          2a11:8441::/32 maxlen: 32
                          2a11:85c0::/29 maxlen: 29
                          2a11:8f80::/32 maxlen: 32
                          2a11:8f81::/32 maxlen: 32
                          2a11:8f82::/32 maxlen: 32
                          2a11:9fc0::/29 maxlen: 29
                          2a11:acc0::/29 maxlen: 29
                          2a11:be80::/29 maxlen: 29
                          2a11:c100::/32 maxlen: 32
                          2a11:c101::/32 maxlen: 32
                          2a11:c440::/29 maxlen: 29
                          2a11:c540::/29 maxlen: 29
                          2a11:c700::/29 maxlen: 29
                          2a11:d081::/32 maxlen: 32
                          2a11:d082::/32 maxlen: 32
                          2a11:e540::/29 maxlen: 29
                          2a11:e7c0::/29 maxlen: 29
                          2a11:f180::/32 maxlen: 32
                          2a11:f181::/32 maxlen: 32
                          2a11:f182::/32 maxlen: 32
                          2a11:fec0::/29 maxlen: 29
                          2a12:10c0::/29 maxlen: 29
                          2a12:1142::/32 maxlen: 32
                          2a12:1143::/32 maxlen: 32
                          2a12:1144::/32 maxlen: 32
                          2a12:1145::/32 maxlen: 32
                          2a12:15c0::/29 maxlen: 29
                          2a12:1800::/32 maxlen: 32
                          2a12:1801::/32 maxlen: 32
                          2a12:1802::/32 maxlen: 32
                          2a12:1940::/29 maxlen: 29
                          2a12:1cc0::/32 maxlen: 32
                          2a12:1cc1::/32 maxlen: 32
                          2a12:25c0::/29 maxlen: 29
                          2a12:2c40::/29 maxlen: 29
                          2a12:34c0::/29 maxlen: 29
                          2a12:3ac0::/29 maxlen: 29
                          2a12:3b40::/32 maxlen: 32
                          2a12:3b41::/32 maxlen: 32
                          2a12:3b42::/32 maxlen: 32
                          2a12:4240::/29 maxlen: 29
                          2a12:4500::/29 maxlen: 29
                          2a12:4c00::/29 maxlen: 29
                          2a12:5580::/29 maxlen: 29
                          2a12:7980::/29 maxlen: 29
                          2a12:8800::/29 maxlen: 29
                          2a12:9700::/29 maxlen: 29
                          2a12:c180::/29 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e0:3b:36:d6:fd:df:1f:a4:24:01:25:0f:5f:8d:53:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
        Validity
            Not Before: Dec  2 18:02:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=072704883df014f165dd775ea74258ff4e4a5839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b8:31:7f:a5:79:3b:81:2b:9b:4e:f8:3c:4d:
                    d8:f7:7e:36:f1:ea:1e:2c:58:e6:40:9f:8f:e5:5f:
                    3b:ee:c4:51:01:96:55:95:f5:39:db:8e:03:78:f4:
                    a4:ea:1d:66:65:d4:04:19:6a:7e:f9:75:c8:ce:5d:
                    ea:99:df:89:df:bb:2f:05:7c:e0:e8:10:ff:78:92:
                    63:50:c7:29:00:07:c4:ea:98:c6:8a:39:27:02:56:
                    76:66:ff:41:bd:46:16:60:17:9b:b3:37:4c:f6:d8:
                    3f:af:0e:e4:12:48:a7:41:e5:88:4f:f6:d7:01:86:
                    36:28:a8:c3:5e:c5:c9:ff:ed:50:c9:d5:90:3e:b1:
                    8d:5b:73:d7:f2:c2:e9:7a:98:a6:72:1d:c8:ca:8d:
                    3a:4e:44:65:75:8d:68:1d:4e:4a:22:cf:ae:79:37:
                    28:f0:db:82:d2:63:b6:20:93:35:d9:1b:c0:58:23:
                    bd:e4:5b:8c:c4:9f:9e:6d:da:4d:b6:90:a5:77:af:
                    90:ac:52:55:c7:e5:b7:b2:6f:b2:38:f9:74:6e:71:
                    66:88:08:9d:9c:f5:68:31:83:d7:3b:45:bc:1e:c2:
                    80:55:f3:a4:75:c5:0a:68:90:81:4c:d7:ed:87:3a:
                    fc:82:03:8b:c1:47:57:03:75:a2:d2:73:b7:df:4f:
                    b7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:27:04:88:3D:F0:14:F1:65:DD:77:5E:A7:42:58:FF:4E:4A:58:39
            X509v3 Authority Key Identifier:
                keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/BycEiD3wFPFl3Xdep0JY_05KWDk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:c380::/29
                  2a0a:f580::/31
                  2a0e:7f40::-2a0e:7f42:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:4640::/29
                  2a11:5880::/29
                  2a11:8440::/31
                  2a11:85c0::/29
                  2a11:8f80::-2a11:8f82:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:9fc0::/29
                  2a11:acc0::/29
                  2a11:be80::/29
                  2a11:c100::/31
                  2a11:c440::/29
                  2a11:c540::/29
                  2a11:c700::/29
                  2a11:d081::-2a11:d082:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:e540::/29
                  2a11:e7c0::/29
                  2a11:f180::-2a11:f182:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:fec0::/29
                  2a12:10c0::/29
                  2a12:1142::-2a12:1145:ffff:ffff:ffff:ffff:ffff:ffff
                  2a12:15c0::/29
                  2a12:1800::-2a12:1802:ffff:ffff:ffff:ffff:ffff:ffff
                  2a12:1940::/29
                  2a12:1cc0::/31
                  2a12:25c0::/29
                  2a12:2c40::/29
                  2a12:34c0::/29
                  2a12:3ac0::/29
                  2a12:3b40::-2a12:3b42:ffff:ffff:ffff:ffff:ffff:ffff
                  2a12:4240::/29
                  2a12:4500::/29
                  2a12:4c00::/29
                  2a12:5580::/29
                  2a12:7980::/29
                  2a12:8800::/29
                  2a12:9700::/29
                  2a12:c180::/29

    Signature Algorithm: sha256WithRSAEncryption
         39:c7:b5:38:b3:df:00:83:6f:18:12:be:cb:d6:99:d8:1d:8e:
         65:23:48:35:c5:70:c5:13:05:71:51:1b:8d:68:78:b7:23:d1:
         48:54:4f:32:b2:9a:ff:18:8d:ea:c0:38:69:92:31:4f:0a:29:
         6a:cb:fe:f5:1e:91:77:de:12:db:9c:88:7b:a8:7b:90:47:73:
         8a:a4:23:71:16:26:ae:26:b0:1d:20:b9:b5:36:71:2c:45:01:
         3b:a5:9d:1d:46:8b:dc:61:03:80:22:57:6d:03:04:f0:4c:5f:
         fb:83:f1:71:1a:ff:c7:12:c1:1f:52:32:54:d4:5e:9b:93:42:
         cc:f6:22:aa:4a:fc:fb:43:42:30:95:be:4a:49:b6:8c:4d:6d:
         e8:e3:3c:2d:95:4d:44:e6:10:29:d4:72:6e:26:88:a2:73:f8:
         a5:88:5f:44:4c:11:01:8e:91:0f:ac:7c:da:39:01:79:79:09:
         79:22:52:44:9d:c5:be:97:ce:c1:6b:3e:90:e3:4e:c1:94:b4:
         1c:21:25:f1:f6:bc:5b:56:72:69:84:b0:7a:a4:62:cf:74:1f:
         a7:d0:dd:92:62:93:e2:06:ab:f1:72:03:88:ab:95:09:29:12:
         af:47:76:d4:97:b6:b6:37:a2:58:73:85:0e:52:6b:29:fc:72:
         fd:ab:83:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:55:43 2025 by rpki-client