This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/5e03YIaC_j16VT9LNSRTtsA4HrM.roa
File:                     5e03YIaC_j16VT9LNSRTtsA4HrM.roa (raw, json)
Hash identifier:          3DP3Io+tu8kPREHARQk0Zbwlmj5ukMz+xv4qv2L2XWA=
Subject key identifier:   E5:ED:37:60:86:82:FE:3D:7A:55:3F:4B:35:24:53:B6:C0:38:1E:B3
Certificate issuer:       /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial:       0195D10DB07386298A5DCA43ECF3822DFCB6
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/5e03YIaC_j16VT9LNSRTtsA4HrM.roa
Signing time:             Wed 26 Mar 2025 06:04:50 +0000
ROA not before:           Wed 26 Mar 2025 06:04:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:195:d10d:8b76/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:d1:0d:b0:73:86:29:8a:5d:ca:43:ec:f3:82:2d:fc:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
        Validity
            Not Before: Mar 26 06:04:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e5ed37608682fe3d7a553f4b352453b6c0381eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:da:f8:8a:28:59:01:58:4f:fd:a9:49:2a:
                    dc:b9:bc:b6:00:5d:c1:d3:c4:cf:0a:43:ea:62:b5:
                    da:47:0d:41:60:26:ed:aa:6e:ce:a7:b6:75:47:fc:
                    2d:ae:85:ea:e9:be:45:6e:3b:da:75:8d:32:92:6a:
                    e9:1b:63:4a:5a:c8:d9:05:f3:1a:81:5b:70:f2:e1:
                    85:d3:01:93:c2:55:a3:09:d3:f0:5c:ae:8f:c8:fa:
                    ae:63:86:6e:e0:9b:74:9d:38:7e:15:43:2b:a6:e2:
                    6f:63:82:c8:be:89:68:57:2d:0b:2e:7c:5c:ab:71:
                    da:23:79:b8:7c:f4:4f:52:69:51:5f:5f:ed:f9:99:
                    4d:11:7f:78:9e:32:ab:f8:3e:20:8d:ab:f6:a7:02:
                    d5:26:d0:33:31:5b:48:4b:d5:96:22:03:21:f5:96:
                    a2:e0:02:25:81:94:be:36:13:6d:c3:f3:53:85:4d:
                    1f:5f:36:e8:ca:e4:83:8c:f8:59:f1:1e:51:ee:ae:
                    3f:8d:f7:44:ee:f5:02:47:a2:1e:0c:13:cc:fb:3e:
                    fe:40:7e:6f:11:f8:a4:fb:6b:4e:fa:d4:ff:38:db:
                    08:d3:30:c0:e8:9c:e8:10:88:34:4a:35:39:7a:0d:
                    3d:32:19:38:da:08:92:a1:0b:61:b8:8d:44:9c:8e:
                    08:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:ED:37:60:86:82:FE:3D:7A:55:3F:4B:35:24:53:B6:C0:38:1E:B3
            X509v3 Authority Key Identifier:
                keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/5e03YIaC_j16VT9LNSRTtsA4HrM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:195:d10d:8b76/128

    Signature Algorithm: sha256WithRSAEncryption
         25:c1:6b:80:8c:67:65:16:c3:ac:47:af:ab:a9:94:55:d9:e3:
         26:e3:f2:de:d0:f8:ee:66:b1:d4:8a:ff:de:4f:55:f1:f5:a9:
         b2:7a:ba:a7:9a:00:86:d6:e3:8b:a8:43:79:45:0a:99:47:a1:
         19:b9:98:46:2c:95:e6:f6:91:85:8e:da:ff:7b:2a:54:54:90:
         2a:23:66:4a:ab:34:df:40:32:f8:76:ae:82:e6:b6:93:8c:1b:
         b9:33:04:3f:38:52:98:70:09:be:6c:5c:76:f2:13:49:6c:1d:
         94:da:f8:14:bc:51:6e:5b:60:6d:14:23:4d:6b:d8:7d:7c:bb:
         a6:82:ab:1c:86:1d:51:f1:58:b3:66:de:c9:2b:7d:33:5b:a5:
         47:c1:31:ef:28:79:9f:b3:d6:d6:89:73:1d:f6:b7:b3:e8:57:
         f0:79:84:b6:44:76:61:41:78:91:d5:08:56:1a:d8:d7:62:95:
         a6:10:5d:c4:ca:c6:ff:96:04:9e:cb:7a:05:e9:33:aa:cd:92:
         f6:15:84:5a:04:fc:8f:9e:07:1f:87:dd:2b:20:9d:3b:06:f0:
         d3:60:91:34:9c:6a:a6:ae:0d:9a:74:de:94:6c:2a:92:5a:80:
         70:25:85:b0:4e:ed:f2:66:be:bc:07:ed:21:44:4b:2f:db:33:
         e0:30:63:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Dec 18 09:53:26 2025 by rpki-client