This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/TL3VX8r3b_9VObGrZpDZkFdL4oY.roa
File:                     TL3VX8r3b_9VObGrZpDZkFdL4oY.roa (raw, json)
Hash identifier:          4CXEJwwUm6JkqjsMaJ+zca2ztnjrdeeWLkG7XUIS3y0=
Subject key identifier:   4C:BD:D5:5F:CA:F7:6F:FF:55:39:B1:AB:66:90:D9:90:57:4B:E2:86
Certificate issuer:       /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial:       0195FC00403EFEA7DB9524A689FF87F706F1
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/TL3VX8r3b_9VObGrZpDZkFdL4oY.roa
Signing time:             Thu 03 Apr 2025 14:13:49 +0000
ROA not before:           Thu 03 Apr 2025 14:13:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:fc:00:40:3e:fe:a7:db:95:24:a6:89:ff:87:f7:06:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
        Validity
            Not Before: Apr  3 14:13:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4cbdd55fcaf76fff5539b1ab6690d990574be286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6f:ff:ae:07:88:24:fa:32:99:5e:8e:93:64:
                    f0:2c:ca:04:45:a6:12:20:ed:17:95:2b:28:c8:d9:
                    29:4e:b0:8e:9d:d2:94:2e:53:41:5b:a5:cd:1c:d1:
                    6b:2b:9b:8f:4e:f7:07:24:c2:31:a3:28:b9:5a:55:
                    58:db:93:e4:29:71:6c:e9:d3:82:27:6f:0c:71:48:
                    f6:fa:de:4c:7c:3e:1e:e2:54:5d:00:49:16:11:0e:
                    bc:84:54:bc:08:e7:ce:e0:27:c1:7f:e6:3a:78:a2:
                    6f:ba:4d:d4:8c:77:5f:7f:7a:4b:c3:3f:a3:44:34:
                    a9:7e:23:d2:57:ba:e2:8b:be:5b:9c:7c:67:60:8c:
                    42:01:12:f5:e9:90:fd:b6:1a:87:5f:3c:34:f4:11:
                    2a:db:f4:68:de:b2:78:26:18:72:5d:d3:5c:93:56:
                    77:90:82:3d:93:84:8d:82:13:29:fc:30:c8:03:1a:
                    dc:4e:55:77:a5:4a:04:d5:5b:0c:96:c7:34:82:c8:
                    b0:48:41:43:ac:6b:62:cc:bb:47:70:62:41:cf:79:
                    f8:d2:52:9e:a9:13:10:28:e6:b8:32:5f:13:f3:e2:
                    41:17:12:86:fe:52:46:44:0a:b5:21:01:cf:52:22:
                    be:96:5b:b2:f5:20:0d:f0:21:bf:89:9b:76:5e:88:
                    0c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BD:D5:5F:CA:F7:6F:FF:55:39:B1:AB:66:90:D9:90:57:4B:E2:86
            X509v3 Authority Key Identifier:
                keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/TL3VX8r3b_9VObGrZpDZkFdL4oY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:195:dc6c:d9df/128

    Signature Algorithm: sha256WithRSAEncryption
         15:ee:d6:61:6b:52:09:58:9e:f2:fe:16:a9:a4:86:1e:ec:e2:
         c7:f1:1d:a3:4c:08:38:ef:7a:f2:03:d5:f7:40:9d:af:23:58:
         f0:e2:69:87:dc:18:d2:75:62:48:74:d9:8e:b1:e7:af:b2:fc:
         e4:bb:64:c2:c2:c6:59:98:91:71:7f:0a:b8:b8:fc:39:eb:36:
         67:4b:15:0b:ad:fc:8d:1f:fb:29:d9:15:60:12:62:2c:95:88:
         72:a1:c6:f0:4e:6b:8d:f3:07:f7:59:fd:e2:80:f0:a4:f9:c2:
         ba:2a:25:6b:29:14:5a:a4:4b:b7:34:50:a3:08:85:3c:53:f9:
         84:67:dc:33:34:18:5b:65:80:33:a2:e7:85:a2:e5:1a:0a:7f:
         35:d8:e5:bc:2f:0b:3e:7a:9e:af:4a:7c:00:6a:20:c8:b1:3a:
         5a:2c:25:ee:b5:9a:7d:68:81:4b:80:9e:5b:e1:54:03:94:92:
         3f:d5:69:21:f7:27:ca:36:9b:fc:8c:ee:10:13:37:1d:e5:5f:
         50:f1:19:7f:aa:7e:cf:44:a7:85:09:11:16:8f:fb:e4:1d:46:
         63:7e:0f:6e:1c:90:df:ab:b7:3a:e2:b7:d2:da:63:43:08:63:
         88:dc:fc:c0:ce:1f:fd:3c:2a:b3:18:aa:9f:b4:b4:c7:af:c1:
         5b:8c:a9:d8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 17 09:46:56 2025 by rpki-client