This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9reZue4oDtthgzwXhipLyxx3YLs.roa
File:                     9reZue4oDtthgzwXhipLyxx3YLs.roa (raw, json)
Hash identifier:          0BU1OZ5fEOt6cCHqdwFzAdwXUoCT/Ene6s+0gIaUSWk=
Subject key identifier:   F6:B7:99:B9:EE:28:0E:DB:61:83:3C:17:86:2A:4B:CB:1C:77:60:BB
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F0F90F43AC48E3EDC36FF461072D80A8C
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9reZue4oDtthgzwXhipLyxx3YLs.roa
Signing time:             Wed 24 Apr 2024 10:05:08 +0000
ROA not before:           Wed 24 Apr 2024 10:05:08 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
                          2001:67c:64:ffff:0:18f:f90:1a28/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:0f:90:f4:3a:c4:8e:3e:dc:36:ff:46:10:72:d8:0a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: Apr 24 10:05:08 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f6b799b9ee280edb61833c17862a4bcb1c7760bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:82:0d:f0:eb:d3:af:20:08:cc:4c:07:14:34:
                    89:2c:5d:55:a1:1c:20:b0:9a:8c:58:dd:ae:92:58:
                    9b:29:da:01:49:0c:a8:05:aa:07:81:ae:07:79:4b:
                    c8:54:bd:49:de:5c:91:2e:de:40:75:a2:67:d7:35:
                    d6:24:28:c6:1e:f4:fc:81:09:83:7b:55:80:a3:04:
                    48:75:34:a2:ce:20:5a:35:7a:83:ea:e7:9d:d1:11:
                    ad:2e:f2:c4:c7:d5:4b:84:0c:53:15:47:7b:37:a7:
                    43:26:ca:64:83:94:12:ba:3b:54:b0:33:32:42:41:
                    a6:a9:2c:43:d1:a4:d0:aa:d1:8a:38:b0:87:73:db:
                    5d:84:39:f0:9d:dd:7e:fe:6b:58:b2:09:69:72:6e:
                    b6:5d:3a:75:e4:da:43:8e:2f:df:86:6c:b1:b9:e5:
                    4d:ee:7a:3d:9e:43:62:a3:62:ba:16:5e:a6:70:74:
                    d7:1f:92:9a:c1:f7:f2:1c:ce:27:6a:1e:1f:08:d0:
                    36:ea:c3:bc:56:6a:45:bd:d6:03:52:e9:5c:27:7e:
                    d4:91:8e:6f:89:28:1a:6a:85:42:37:d6:4a:da:0d:
                    ed:38:68:84:5f:66:5b:42:64:62:b5:45:51:a5:0c:
                    b5:25:cd:ff:7e:ac:67:3c:90:0d:3f:17:1b:8c:a0:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B7:99:B9:EE:28:0E:DB:61:83:3C:17:86:2A:4B:CB:1C:77:60:BB
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9reZue4oDtthgzwXhipLyxx3YLs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64:ffff:0:18f:543:9e41/128
                  2001:67c:64:ffff:0:18f:f90:1a28/128

    Signature Algorithm: sha256WithRSAEncryption
         80:4a:fc:67:b7:f2:c2:ca:9e:17:43:0f:b9:db:03:01:e5:d6:
         33:21:25:05:59:7f:dd:8d:f7:9c:10:46:eb:cc:3a:fc:b5:cb:
         18:e3:21:48:87:a7:33:2f:05:ad:71:1a:2b:68:cf:db:7c:22:
         25:57:c2:a4:ee:11:f7:d7:49:b6:c4:b8:f6:67:21:35:69:65:
         f8:f8:fe:29:95:65:4c:d1:b5:3e:f7:fa:86:84:09:41:87:87:
         46:fc:c8:5c:10:d7:db:46:f1:3c:83:00:a7:f3:a2:57:ef:61:
         68:54:c0:2a:b4:87:d5:88:78:13:8b:ae:48:71:f7:06:a2:69:
         16:58:14:08:ea:d1:3f:4e:58:06:84:e4:2b:74:d2:14:c6:ff:
         49:07:24:f9:31:0d:da:3c:16:9e:80:d8:fa:99:15:51:89:ed:
         cf:f7:08:9c:a1:8a:b6:10:4a:e0:6f:11:1a:50:8d:e1:26:02:
         48:55:45:ec:29:84:f2:75:44:9c:5a:bd:27:9d:cf:a7:98:57:
         e7:e2:97:fc:35:39:6e:9a:7d:ea:b6:df:d8:cc:17:00:98:67:
         0b:60:e7:7d:78:89:ef:c1:8a:8a:7a:3e:b3:02:13:c2:18:3b:
         0f:ba:02:38:b7:2b:96:58:12:28:69:c9:21:83:37:c7:79:c9:
         c0:95:58:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 00:03:51 2025 by rpki-client