This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/eVDtIzuzdOPYhZvEYyL9-WgDW4Y.roa
File:                     eVDtIzuzdOPYhZvEYyL9-WgDW4Y.roa (raw, json)
Hash identifier:          y4dXZzTz1hA2z7KxNgQohCRb2HRVBxo1aEJ7Mm1zNG0=
Subject key identifier:   79:50:ED:23:3B:B3:74:E3:D8:85:9B:C4:63:22:FD:F9:68:03:5B:86
Certificate issuer:       /CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
Certificate serial:       019B26ECFE97E3CAFB38842CD66F60943A72
Authority key identifier: 65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/eVDtIzuzdOPYhZvEYyL9-WgDW4Y.roa
Signing time:             Tue 16 Dec 2025 11:30:24 +0000
ROA not before:           Tue 16 Dec 2025 11:30:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     42184
IP address blocks:        2a06:b600::/29 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:26:ec:fe:97:e3:ca:fb:38:84:2c:d6:6f:60:94:3a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
        Validity
            Not Before: Dec 16 11:30:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7950ed233bb374e3d8859bc46322fdf968035b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fc:2b:73:ee:30:91:7a:84:b6:85:c4:a6:6a:
                    b3:b8:da:02:f4:91:80:60:80:bb:70:0c:6a:5b:bc:
                    eb:84:91:89:24:d7:42:83:93:a7:92:48:ad:a3:01:
                    17:ea:9d:fa:cb:c3:4b:88:ed:62:8c:36:6a:35:bd:
                    1a:12:53:56:a4:8b:96:c9:26:58:56:5d:d9:21:a3:
                    60:b6:33:08:2c:25:15:f5:51:46:a5:55:47:5f:52:
                    96:b6:09:b9:e8:fd:b0:7c:66:89:10:29:ef:2a:2f:
                    68:24:0a:ea:b6:19:f0:01:22:b9:33:d9:dc:83:84:
                    ee:d4:97:ab:09:3b:88:8c:ab:14:6d:b5:96:63:2e:
                    3d:28:27:77:17:8b:39:12:33:e7:01:3b:06:79:99:
                    38:d9:dd:59:b1:34:59:58:b2:bd:72:53:9a:c7:c8:
                    64:63:97:d9:9c:4b:aa:49:f1:ba:c0:d7:80:64:45:
                    a0:1e:0c:3a:79:36:ed:2f:3f:4a:10:93:b6:0a:f5:
                    12:25:e1:1e:49:24:9d:d8:5d:9c:7b:29:95:00:5a:
                    ab:79:fd:e1:bd:db:69:e2:b8:63:2d:fb:bd:c4:61:
                    71:82:2e:c4:08:6d:83:5b:89:f3:22:f8:4d:41:c7:
                    3f:b3:a9:cf:1d:06:1e:df:e0:49:12:8c:57:a2:b0:
                    e2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:50:ED:23:3B:B3:74:E3:D8:85:9B:C4:63:22:FD:F9:68:03:5B:86
            X509v3 Authority Key Identifier:
                keyid:65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/eVDtIzuzdOPYhZvEYyL9-WgDW4Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:b600::/29

    Signature Algorithm: sha256WithRSAEncryption
         23:9e:84:db:0c:b2:8b:d7:5d:8c:e4:a8:2f:e7:02:b4:f1:31:
         e6:77:73:b1:0d:8d:29:50:e2:a3:76:92:7d:15:54:66:65:f5:
         be:b1:5b:ec:df:e9:ae:bc:14:6e:86:40:62:c5:c7:01:c9:b6:
         87:37:ba:a6:2c:81:30:cf:f4:85:e4:27:cb:80:e2:4c:b4:0f:
         0d:d8:3a:e6:59:1f:3a:69:ef:77:51:6c:3f:56:66:01:05:77:
         10:44:75:88:49:07:70:db:cd:23:cc:fe:34:0d:01:14:73:56:
         c0:7d:3d:2c:fd:9f:8f:fe:66:4c:63:45:c9:16:53:11:4f:df:
         2e:66:a9:ff:90:c9:e2:71:36:d5:ca:eb:6f:b4:54:ec:2a:7e:
         0d:af:d0:b1:e3:83:84:3a:db:af:b1:c9:bf:47:9a:19:de:1b:
         49:a6:83:51:12:98:ac:ec:05:03:97:03:e7:a2:0d:e8:74:9d:
         62:ed:0e:e0:0a:54:7a:34:79:4f:41:8c:08:bb:16:a9:28:8a:
         bc:a1:bf:71:17:48:24:eb:ac:f7:ce:09:38:d1:6d:a7:5e:11:
         a9:ab:d2:d4:29:65:d3:a5:29:6b:2c:c4:df:ed:d4:38:19:dc:
         9b:b1:ba:22:ba:2a:19:2a:86:a7:0f:2f:28:7d:90:e5:4e:a7:
         ae:51:7c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 10:56:34 2025 by rpki-client