This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/ew7rfBDCBJWG2dpeinrenLXi2cg.roa
File:                     ew7rfBDCBJWG2dpeinrenLXi2cg.roa (raw, json)
Hash identifier:          gNrrDz6quqW6k2kjjr3++w6jbBF11hQXwTViaEZVncI=
Subject key identifier:   7B:0E:EB:7C:10:C2:04:95:86:D9:DA:5E:8A:7A:DE:9C:B5:E2:D9:C8
Certificate issuer:       /CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
Certificate serial:       0195EE0E9C3AEDF5478470C4998D91F89550
Authority key identifier: 60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/ew7rfBDCBJWG2dpeinrenLXi2cg.roa
Signing time:             Mon 31 Mar 2025 21:14:49 +0000
ROA not before:           Mon 31 Mar 2025 21:14:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:195:dc6c:d9df/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:ee:0e:9c:3a:ed:f5:47:84:70:c4:99:8d:91:f8:95:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6091160984cbc991ebc9ca0a857007d1f2c11a2d
        Validity
            Not Before: Mar 31 21:14:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7b0eeb7c10c2049586d9da5e8a7ade9cb5e2d9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2a:f0:56:71:de:58:6c:45:e6:e0:36:43:01:
                    14:d7:6f:90:9a:0e:fd:aa:7f:72:06:1b:84:40:ef:
                    02:ae:36:b1:12:b0:28:a2:be:c0:ef:3a:e2:12:e9:
                    56:81:c1:d9:3d:7a:97:72:91:56:d0:a9:01:76:0f:
                    ff:dd:35:9d:2c:9c:4b:68:62:8d:eb:a7:50:4e:c0:
                    7f:b7:88:18:c0:f2:13:37:b7:13:5f:d6:91:b1:29:
                    c2:c3:bd:eb:14:b2:a6:eb:cd:10:f3:ba:99:67:98:
                    13:75:1a:c2:48:f2:f7:98:58:71:e8:6f:49:8e:dd:
                    c1:60:e1:0a:d5:74:1a:c9:66:65:b8:b6:68:32:77:
                    73:57:e8:cd:58:21:68:c8:83:4e:e0:fc:08:36:6e:
                    e8:0d:7c:42:c0:62:63:ec:39:0b:c1:2e:6b:87:f0:
                    84:c5:b5:f0:3e:43:d9:a6:69:8b:e3:76:13:f5:4b:
                    80:2a:41:46:d0:dd:4f:7a:f3:e5:7d:44:bf:2e:18:
                    eb:72:52:45:ba:41:93:37:fc:24:be:eb:e6:83:20:
                    b2:55:86:59:91:3b:cb:1a:1f:41:07:3c:0c:75:f3:
                    85:10:3f:4f:26:3a:9c:b8:c0:be:54:59:a2:9c:eb:
                    9d:e7:0b:9f:81:16:ce:02:3d:f4:dc:8a:dc:81:05:
                    69:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0E:EB:7C:10:C2:04:95:86:D9:DA:5E:8A:7A:DE:9C:B5:E2:D9:C8
            X509v3 Authority Key Identifier:
                keyid:60:91:16:09:84:CB:C9:91:EB:C9:CA:0A:85:70:07:D1:F2:C1:1A:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJEWCYTLyZHrycoKhXAH0fLBGi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/ew7rfBDCBJWG2dpeinrenLXi2cg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/bcd829-3f3d-4e5a-adaf-03aa5511a75f/1/YJEWCYTLyZHrycoKhXAH0fLBGi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:195:dc6c:d9df/128

    Signature Algorithm: sha256WithRSAEncryption
         6c:6b:c8:3b:79:31:39:63:fd:96:6c:d1:72:c0:44:18:ea:4f:
         81:a0:6b:ca:11:d1:fa:a7:f9:01:8f:ff:74:5b:da:3c:f0:16:
         da:cb:33:2b:20:4d:cd:a1:f3:77:58:09:02:ba:b8:5e:68:b7:
         fb:b2:31:18:bd:63:ba:54:e1:5d:82:ff:6e:6d:6c:46:0b:88:
         fd:71:23:4a:18:3b:ed:7f:14:2e:d2:0e:3d:55:8e:52:cf:4f:
         45:03:6f:4d:55:5c:75:86:c5:43:fc:bb:36:c7:a9:30:81:fb:
         75:16:0d:e5:ea:ff:09:89:e8:4a:83:4d:eb:ed:6f:b4:28:b2:
         36:96:fe:47:c7:c4:91:8b:a1:18:48:ab:dd:ef:e7:e6:c8:86:
         b0:d2:8f:17:e2:9d:86:b2:bf:84:3d:b5:1b:7a:2d:26:f5:1f:
         82:50:13:cc:e8:fe:da:f9:01:9a:4e:76:27:c4:da:5d:ec:b9:
         02:59:78:a3:8e:18:41:f5:4e:83:c5:16:af:25:cd:9f:07:5a:
         53:87:38:f6:8e:4e:55:26:cb:85:e7:04:55:a4:9b:89:8e:44:
         d0:9d:05:70:36:16:7e:bb:cf:1b:40:26:23:01:8c:bf:33:d2:
         5b:d1:79:c7:3f:d5:ed:db:2c:55:48:5d:86:11:0f:de:b8:f5:
         c6:de:4a:30
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZXuDpw67fVHhHDEmY2R+JVQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTExNjA5ODRjYmM5OTFlYmM5Y2EwYTg1NzAwN2QxZjJj
MTFhMmQwHhcNMjUwMzMxMjExNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjBlZWI3YzEwYzIwNDk1ODZkOWRhNWU4YTdhZGU5Y2I1ZTJkOWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCrwVnHeWGxF5uA2QwEU12+Qmg79
qn9yBhuEQO8CrjaxErAoor7A7zriEulWgcHZPXqXcpFW0KkBdg//3TWdLJxLaGKN
66dQTsB/t4gYwPITN7cTX9aRsSnCw73rFLKm680Q87qZZ5gTdRrCSPL3mFhx6G9J
jt3BYOEK1XQayWZluLZoMndzV+jNWCFoyINO4PwINm7oDXxCwGJj7DkLwS5rh/CE
xbXwPkPZpmmL43YT9UuAKkFG0N1PevPlfUS/LhjrclJFukGTN/wkvuvmgyCyVYZZ
kTvLGh9BBzwMdfOFED9PJjqcuMC+VFminOud5wufgRbOAj303IrcgQVpQwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFHsO63wQwgSVhtnaXop63py14tnIMB8GA1UdIwQY
MBaAFGCRFgmEy8mR68nKCoVwB9HywRotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYt
MDNhYTU1MTFhNzVmLzEvZXc3cmZCRENCSldHMmRwZWlucmVuTFhpMmNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9iY2Q4MjktM2YzZC00ZTVhLWFkYWYtMDNhYTU1MTFhNzVm
LzEvWUpFV0NZVEx5WkhyeWNvS2hYQUgwZkxCR2kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGV3GzZ3zANBgkqhkiG9w0BAQsFAAOCAQEAbGvIO3kxOWP9lmzRcsBEGOpP
gaBryhHR+qf5AY//dFvaPPAW2sszKyBNzaHzd1gJArq4Xmi3+7IxGL1julThXYL/
bm1sRguI/XEjShg77X8ULtIOPVWOUs9PRQNvTVVcdYbFQ/y7NsepMIH7dRYN5er/
CYnoSoNN6+1vtCiyNpb+R8fEkYuhGEir3e/n5siGsNKPF+KdhrK/hD21G3otJvUf
glATzOj+2vkBmk52J8TaXey5All4o44YQfVOg8UWryXNnwdaU4c49o5OVSbLhecE
VaSbiY5E0J0FcDYWfrvPG0AmIwGMvzPSW9F5xz/V7dssVUhdhhEP3rj1xt5KMA==
-----END CERTIFICATE-----
Generated at Wed Dec 17 15:17:14 2025 by rpki-client