This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/66e60a-e25d-4353-a500-338d29ee147a/1/n1FEoz2snxoGhQxSX-iz_8jdCdw.roa
File:                     n1FEoz2snxoGhQxSX-iz_8jdCdw.roa (raw, json)
Hash identifier:          qD6XNtNhAHZ+9olAUMZSVhYU1s86km9BFrLB+jwvYx4=
Subject key identifier:   9F:51:44:A3:3D:AC:9F:1A:06:85:0C:52:5F:E8:B3:FF:C8:DD:09:DC
Certificate issuer:       /CN=514ef1a8c367e7052a3f2d736b1b457da6966496
Certificate serial:       0194BD3A1105321BFBCE343E3B1077461BBB
Authority key identifier: 51:4E:F1:A8:C3:67:E7:05:2A:3F:2D:73:6B:1B:45:7D:A6:96:64:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UU7xqMNn5wUqPy1zaxtFfaaWZJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/66e60a-e25d-4353-a500-338d29ee147a/1/n1FEoz2snxoGhQxSX-iz_8jdCdw.roa
Signing time:             Fri 31 Jan 2025 16:38:06 +0000
ROA not before:           Fri 31 Jan 2025 16:38:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     60781
IP address blocks:        185.113.88.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:3a:11:05:32:1b:fb:ce:34:3e:3b:10:77:46:1b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514ef1a8c367e7052a3f2d736b1b457da6966496
        Validity
            Not Before: Jan 31 16:38:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9f5144a33dac9f1a06850c525fe8b3ffc8dd09dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:63:51:52:21:02:2a:e7:24:83:87:30:82:2c:
                    c0:5f:94:6b:a4:68:50:5b:5b:c2:2b:1c:38:18:88:
                    d7:5b:c2:37:7b:f9:ea:d0:9b:eb:02:b7:bc:c9:35:
                    bd:83:73:e4:44:97:65:e2:93:9a:93:33:f7:01:46:
                    83:2f:9d:2e:dc:c3:a7:83:51:b1:3f:72:65:ef:bc:
                    73:00:64:99:5c:ed:f7:66:10:ac:af:62:d3:3d:f2:
                    ea:5e:e4:0b:9e:b0:90:08:3b:05:85:c9:a2:53:74:
                    db:62:01:53:5e:05:61:17:ab:3b:8a:ac:d4:6e:37:
                    59:6c:11:3b:c8:ff:ff:e1:3f:af:10:27:6e:55:4d:
                    1b:37:92:51:6d:9e:26:c7:57:ff:6b:a4:1c:d5:ac:
                    08:67:37:22:da:9a:7d:93:fe:0c:06:d2:d2:45:1a:
                    cc:de:46:9d:07:13:ee:a7:6c:a6:b6:0c:d0:0c:03:
                    a5:07:8d:98:27:98:dc:ef:bb:82:ec:25:f5:f1:e9:
                    6e:06:41:8a:50:24:c5:a3:1a:ea:e9:3e:3f:5a:0a:
                    04:00:55:1b:eb:6e:d8:72:42:ce:28:34:29:70:57:
                    ad:c1:d9:51:5f:cb:c7:6b:48:77:c0:e7:7c:84:06:
                    90:6d:7d:74:fa:42:90:74:59:7d:43:ee:e4:2e:57:
                    7d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:51:44:A3:3D:AC:9F:1A:06:85:0C:52:5F:E8:B3:FF:C8:DD:09:DC
            X509v3 Authority Key Identifier:
                keyid:51:4E:F1:A8:C3:67:E7:05:2A:3F:2D:73:6B:1B:45:7D:A6:96:64:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UU7xqMNn5wUqPy1zaxtFfaaWZJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/66e60a-e25d-4353-a500-338d29ee147a/1/n1FEoz2snxoGhQxSX-iz_8jdCdw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/66e60a-e25d-4353-a500-338d29ee147a/1/UU7xqMNn5wUqPy1zaxtFfaaWZJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.113.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:07:a2:69:e4:b0:8a:ba:e2:e8:fd:70:34:f4:78:d5:ff:3d:
         0a:c1:28:5f:5c:44:7d:0f:2e:b8:fb:8d:48:3b:1d:d0:ef:9e:
         e2:1a:09:d5:5b:8e:1e:f5:5c:78:3f:a3:de:c4:98:e7:95:ff:
         48:2a:ed:85:f4:0a:58:e8:6e:b3:6f:f3:12:3b:cf:26:b5:5d:
         ba:96:3d:a7:6b:13:66:8c:0d:cd:25:c9:ad:57:a0:74:1c:ff:
         89:18:22:b0:1e:ee:2e:c4:d2:89:5a:ec:3b:0f:e2:07:71:55:
         81:6f:bc:d3:ff:07:28:a0:15:9d:b6:5a:fa:6c:b6:d0:a0:32:
         e9:d4:7e:3f:74:e4:7e:be:7f:f6:a6:85:ef:7b:bc:52:5f:b2:
         b7:fc:d3:10:d3:07:8d:c6:16:d1:03:36:06:03:12:79:51:e7:
         d4:97:ce:67:67:82:6b:47:7c:48:32:27:cc:20:a3:f9:8d:8a:
         cd:5a:6b:66:9d:20:c6:bd:ab:e9:7b:2a:d2:65:3c:1d:35:7c:
         fe:83:e1:77:bd:2a:8f:3a:7b:1d:95:f0:66:0c:d8:82:c9:7e:
         f6:9b:2f:7a:bf:b6:a4:9a:fc:66:98:51:04:e4:49:1a:3b:50:
         ad:62:52:3a:53:81:63:7a:fc:16:16:17:cd:99:d8:3b:1e:64:
         fa:b9:0d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 20:30:57 2025 by rpki-client