This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/e33g6GZZLt9MCIs0GfMV_WzJSz4.roa
File:                     e33g6GZZLt9MCIs0GfMV_WzJSz4.roa (raw, json)
Hash identifier:          2BdxJ0T1s2f6yeTyliPJoBxedv9hYDTvxySogF+vH3Y=
Subject key identifier:   7B:7D:E0:E8:66:59:2E:DF:4C:08:8B:34:19:F3:15:FD:6C:C9:4B:3E
Certificate issuer:       /CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Certificate serial:       019B237F1506EF3F3D57AC858722409A3A32
Authority key identifier: 75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/e33g6GZZLt9MCIs0GfMV_WzJSz4.roa
Signing time:             Mon 15 Dec 2025 19:31:29 +0000
ROA not before:           Mon 15 Dec 2025 19:31:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     42375
IP address blocks:        2a0f:9c00::/32 maxlen: 32
                          2a0f:9c01::/32 maxlen: 32
                          2a0f:9c02::/32 maxlen: 32
                          2a11:1480::/29 maxlen: 29
                          2a11:1f00::/29 maxlen: 29
                          2a11:3440::/29 maxlen: 29
                          2a11:5180::/32 maxlen: 32
                          2a11:5181::/32 maxlen: 32
                          2a11:5182::/32 maxlen: 32
                          2a11:6300::/29 maxlen: 29
                          2a11:68c0::/32 maxlen: 32
                          2a11:68c2::/32 maxlen: 32
                          2a11:68c4::/32 maxlen: 32
                          2a11:8940::/32 maxlen: 32
                          2a11:8941::/32 maxlen: 32
                          2a11:8942::/32 maxlen: 32
                          2a11:9380::/29 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:23:7f:15:06:ef:3f:3d:57:ac:85:87:22:40:9a:3a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=757cefe36b3fcc68a42c0aff81d144980f32777f
        Validity
            Not Before: Dec 15 19:31:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7b7de0e866592edf4c088b3419f315fd6cc94b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6f:8e:53:31:13:39:d3:90:af:66:ce:80:ec:
                    60:32:29:1e:dc:56:83:bf:78:ec:e4:85:e3:e7:7c:
                    cd:93:35:3b:e7:3d:e4:84:07:c6:4a:ed:07:7a:d5:
                    48:1d:67:43:a5:86:43:68:4a:7d:00:b8:5e:34:ed:
                    45:b5:34:21:eb:e3:60:25:cc:3c:33:c4:78:18:f8:
                    06:88:8c:6b:a0:df:83:73:3b:4f:09:32:d6:9d:7b:
                    68:e1:31:a2:82:73:cd:23:14:34:c1:58:80:df:35:
                    ca:dc:e8:e8:7f:46:b3:cf:b9:06:be:53:4c:e0:bc:
                    58:b3:a6:8f:ff:0b:c7:da:1f:86:0f:cf:43:02:30:
                    0f:3b:8e:a6:36:39:44:8a:d8:5f:b4:54:85:dc:71:
                    82:10:b9:cd:f9:88:ed:43:45:4a:e4:b6:f6:8e:35:
                    68:f1:7c:cb:67:a8:2a:d8:ab:a8:a9:43:a3:b4:ba:
                    ab:ac:53:19:8d:d6:28:09:23:4c:76:e7:ad:0e:f1:
                    7a:ab:63:9c:3e:bd:06:63:d4:df:51:3a:75:6b:70:
                    88:b6:ba:30:06:fa:1a:b4:d6:07:e5:77:03:c8:3f:
                    d7:73:30:4d:93:68:7a:b4:1a:08:db:a6:3e:f4:73:
                    a4:c1:29:e7:c3:2f:df:c3:16:3e:97:ad:cd:93:d9:
                    1d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7D:E0:E8:66:59:2E:DF:4C:08:8B:34:19:F3:15:FD:6C:C9:4B:3E
            X509v3 Authority Key Identifier:
                keyid:75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/e33g6GZZLt9MCIs0GfMV_WzJSz4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:9c00::-2a0f:9c02:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:1480::/29
                  2a11:1f00::/29
                  2a11:3440::/29
                  2a11:5180::-2a11:5182:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:6300::/29
                  2a11:68c0::/32
                  2a11:68c2::/32
                  2a11:68c4::/32
                  2a11:8940::-2a11:8942:ffff:ffff:ffff:ffff:ffff:ffff
                  2a11:9380::/29

    Signature Algorithm: sha256WithRSAEncryption
         1c:5a:f1:77:8d:e2:6e:c3:8b:4d:a9:34:01:8d:84:05:b8:52:
         72:ec:f4:a4:0f:2f:75:31:6a:3b:f7:63:8a:86:c9:50:87:35:
         e2:14:91:3f:ef:13:b5:7d:ad:67:73:93:9d:d2:35:2a:16:91:
         7a:af:5f:c8:78:8b:08:22:cb:43:5e:f1:b1:2b:1f:5f:3f:39:
         37:38:20:f4:56:23:86:e5:cf:36:47:39:19:80:fb:af:8c:15:
         d3:8f:5c:0f:98:39:38:c2:d1:5f:d0:c3:8b:99:18:a6:41:b9:
         a3:59:8c:f2:f8:04:36:ae:93:f6:2c:59:22:c1:12:d6:90:b2:
         a5:0a:d6:8d:39:cb:1d:cf:3b:b6:92:b8:14:88:f0:28:53:6d:
         d4:44:a8:0f:7b:0d:79:25:28:ab:2e:27:5c:19:f8:43:67:91:
         9f:8a:4e:11:6c:83:36:6a:08:8e:4a:68:31:85:14:d4:03:01:
         b4:96:fb:34:81:fe:30:39:f7:b8:85:78:8c:c9:0c:20:48:5e:
         d2:18:95:6f:85:bb:ff:8c:08:3f:06:c5:35:ea:fc:6b:36:b6:
         d8:e5:23:ca:1e:2a:dd:38:da:65:69:39:d9:b0:c9:0a:b8:9f:
         85:12:a4:0d:1f:ad:ad:4a:80:14:37:bd:f3:af:3b:5e:cd:40:
         08:73:8a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:29:33 2025 by rpki-client