This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/SnaaVOucUwiyuVXFihAjOHxfuAY.roa
File:                     SnaaVOucUwiyuVXFihAjOHxfuAY.roa (raw, json)
Hash identifier:          0LEcqUOh+2QTlJnOZ8TeXldHsw9yiiwINMpt5wjrAB4=
Subject key identifier:   4A:76:9A:54:EB:9C:53:08:B2:B9:55:C5:8A:10:23:38:7C:5F:B8:06
Certificate issuer:       /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial:       0195FCDB0FF9F0418EDC6FB75B51AC79FF96
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/SnaaVOucUwiyuVXFihAjOHxfuAY.roa
Signing time:             Thu 03 Apr 2025 18:12:49 +0000
ROA not before:           Thu 03 Apr 2025 18:12:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:fc:db:0f:f9:f0:41:8e:dc:6f:b7:5b:51:ac:79:ff:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
        Validity
            Not Before: Apr  3 18:12:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4a769a54eb9c5308b2b955c58a1023387c5fb806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:34:5c:18:74:71:6d:73:7b:0c:bd:5b:fc:38:
                    d3:58:7c:8c:0a:35:7c:9f:a3:74:51:ac:3e:56:15:
                    ef:bb:c8:9b:a2:3d:c1:37:9d:71:b9:45:13:79:e3:
                    f5:82:a3:53:f3:49:64:b4:18:73:b4:58:50:0b:1a:
                    ae:51:c6:d3:d1:36:10:67:7f:0c:70:7c:18:9a:67:
                    d9:31:e9:b5:3b:b2:03:60:1e:7f:3e:bf:c6:2a:6c:
                    04:e9:dd:4a:dc:34:3f:f9:d8:cd:65:3e:f9:b7:06:
                    f5:c1:55:fc:66:a2:4e:87:d1:61:4a:1f:ce:5f:09:
                    90:5f:88:90:3d:30:7d:87:b9:10:52:95:92:0f:26:
                    9d:8c:fc:1c:5c:7a:03:1a:c2:eb:ba:5e:52:94:b0:
                    36:35:89:06:9e:72:e1:8b:3f:b0:c3:19:1c:d5:89:
                    ba:67:02:d2:c9:63:5e:d1:65:27:35:4d:cd:a1:92:
                    34:82:6b:2b:d0:b5:03:15:cb:da:14:96:0d:60:56:
                    f5:f7:e9:54:20:9a:e9:6f:67:70:1b:d6:e0:e2:08:
                    d0:95:d2:29:89:d0:c3:49:6b:b8:e2:ff:07:68:33:
                    6f:b3:c0:3c:a1:33:cb:f4:3b:d2:8b:1f:bb:08:3e:
                    9f:f7:7f:32:bf:66:b1:fe:ea:4f:f6:ef:dc:08:de:
                    e1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:76:9A:54:EB:9C:53:08:B2:B9:55:C5:8A:10:23:38:7C:5F:B8:06
            X509v3 Authority Key Identifier:
                keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/SnaaVOucUwiyuVXFihAjOHxfuAY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:195:dc6c:d9df/128

    Signature Algorithm: sha256WithRSAEncryption
         95:46:e9:4a:18:3e:72:ef:36:39:8f:49:f7:ce:f0:a5:63:72:
         4d:70:95:6e:1c:0d:a8:8c:74:dd:af:66:6b:38:7c:e2:41:2b:
         1e:ea:e8:e6:b5:f9:62:c8:e2:6b:a4:13:e0:5e:a8:e3:0e:9d:
         a8:bf:4a:52:c2:79:67:d2:f7:2a:01:60:f4:4f:04:b9:e3:28:
         01:33:82:5c:db:47:da:d4:1e:40:f5:53:9d:d5:b9:dc:b7:97:
         79:ea:0d:43:38:6c:62:a9:52:fc:ab:ad:54:b4:52:2f:33:80:
         1f:b2:13:46:85:a7:3d:9b:d7:93:8c:e8:62:5d:c2:7d:f4:d1:
         57:a3:a8:bd:25:e2:85:2b:52:42:4a:60:0e:05:a5:84:74:ea:
         f1:9e:be:a0:a5:ad:b6:ee:85:aa:27:5a:47:89:ff:65:e2:41:
         de:02:96:1b:d4:e5:28:43:c1:8b:c5:cc:5b:00:9e:e9:23:ad:
         72:7f:ea:50:88:77:71:0f:75:10:25:e1:0c:88:4d:82:07:fb:
         99:fc:e7:8e:03:5a:d2:4a:d2:ea:b1:f6:75:97:a6:bf:7b:49:
         5b:6e:8e:f2:42:ca:b8:45:9a:71:cc:1f:7c:40:d6:47:ea:83:
         57:3f:39:84:86:29:f7:c5:f1:f0:df:77:fa:17:98:56:8a:c5:
         3a:c7:17:fe
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZX82w/58EGO3G+3W1Gsef+WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj
MTFhMmQwHhcNMjUwNDAzMTgxMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTc2OWE1NGViOWM1MzA4YjJiOTU1YzU4YTEwMjMzODdjNWZiODA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDRcGHRxbXN7DL1b/DjTWHyMCjV8
n6N0Uaw+VhXvu8iboj3BN51xuUUTeeP1gqNT80lktBhztFhQCxquUcbT0TYQZ38M
cHwYmmfZMem1O7IDYB5/Pr/GKmwE6d1K3DQ/+djNZT75twb1wVX8ZqJOh9FhSh/O
XwmQX4iQPTB9h7kQUpWSDyadjPwcXHoDGsLrul5SlLA2NYkGnnLhiz+wwxkc1Ym6
ZwLSyWNe0WUnNU3NoZI0gmsr0LUDFcvaFJYNYFb19+lUIJrpb2dwG9bg4gjQldIp
idDDSWu44v8HaDNvs8A8oTPL9DvSix+7CD6f938yv2ax/upP9u/cCN7h7wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFEp2mlTrnFMIsrlVxYoQIzh8X7gGMB8GA1UdIwQY
MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt
MDNhYTU1MTFhNzVmLzEvU25hYVZPdWNVd2l5dVZYRmloQWpPSHhmdUFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm
LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGV3GzZ3zANBgkqhkiG9w0BAQsFAAOCAQEAlUbpShg+cu82OY9J987wpWNy
TXCVbhwNqIx03a9mazh84kErHuro5rX5Ysjia6QT4F6o4w6dqL9KUsJ5Z9L3KgFg
9E8EueMoATOCXNtH2tQeQPVTndW53LeXeeoNQzhsYqlS/KutVLRSLzOAH7ITRoWn
PZvXk4zoYl3CffTRV6OovSXihStSQkpgDgWlhHTq8Z6+oKWttu6FqidaR4n/ZeJB
3gKWG9TlKEPBi8XMWwCe6SOtcn/qUIh3cQ91ECXhDIhNggf7mfznjgNa0krS6rH2
dZemv3tJW26O8kLKuEWaccwffEDWR+qDVz85hIYp98Xx8N93+heYVorFOscX/g==
-----END CERTIFICATE-----
Generated at Wed Dec 17 20:48:38 2025 by rpki-client