This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8VP1UQyUVlC_-WZjk6rjpCXW0C8.roa
File:                     8VP1UQyUVlC_-WZjk6rjpCXW0C8.roa (raw, json)
Hash identifier:          HLLTgX3danTARVDa5Z9byi613d1I+7yZRmnGE5undKI=
Subject key identifier:   F1:53:F5:51:0C:94:56:50:BF:F9:66:63:93:AA:E3:A4:25:D6:D0:2F
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018E4A277A99993BF24E8D0D4CB842BF8447
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8VP1UQyUVlC_-WZjk6rjpCXW0C8.roa
Signing time:             Sun 17 Mar 2024 02:04:44 +0000
ROA not before:           Sun 17 Mar 2024 02:04:44 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
                          2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
                          2001:67c:64:ffff:0:18e:4a27:3c1/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:4a:27:7a:99:99:3b:f2:4e:8d:0d:4c:b8:42:bf:84:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Mar 17 02:04:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f153f5510c945650bff9666393aae3a425d6d02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:06:e9:61:54:cb:27:0e:6b:34:e2:c6:fd:8f:
                    21:2b:eb:30:cd:c2:36:78:45:81:44:5f:e3:b1:13:
                    a7:1b:19:cb:ba:1b:af:a0:03:d6:42:07:7b:f6:d1:
                    f0:9a:01:02:6f:5f:87:a4:33:bb:96:7e:04:7b:7c:
                    f3:51:ed:7a:91:4e:a7:e6:3b:9f:34:72:a3:02:98:
                    4e:f0:3b:01:ed:4a:c2:3c:fc:24:15:dd:bf:d3:5b:
                    00:20:63:e5:6f:27:1c:b8:ad:fd:28:1b:53:b0:08:
                    19:49:56:90:e1:29:b7:26:ef:4a:8b:bd:4a:dc:c1:
                    f4:f5:b5:36:ba:b0:11:0d:65:bb:79:7e:fb:9a:7a:
                    d7:c9:cc:31:f9:be:41:d6:db:a0:38:47:3d:d5:55:
                    be:3a:47:ff:e9:5d:37:19:83:ce:62:b2:1e:fd:b9:
                    19:16:4f:f9:dd:13:f9:8f:7d:53:c2:f0:3e:56:d6:
                    db:37:23:d8:ee:4a:70:fa:55:75:fb:ce:84:a2:d8:
                    46:20:08:3a:fb:29:90:a6:35:fb:e7:84:6c:0e:a4:
                    1d:cb:7d:e5:1f:bb:5e:43:d5:0a:ab:43:1d:14:6a:
                    cd:37:20:80:23:34:e8:3f:e2:d2:f1:14:c1:bc:6a:
                    6c:43:bb:8f:78:f8:da:0b:78:5a:5a:8f:0d:70:e0:
                    03:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:53:F5:51:0C:94:56:50:BF:F9:66:63:93:AA:E3:A4:25:D6:D0:2F
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8VP1UQyUVlC_-WZjk6rjpCXW0C8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:4d:56:cf:0d:93:ac:1a:65:e7:bc:12:ed:df:f1:86:f2:63:
         03:63:69:6e:d9:66:7e:b5:e9:42:8e:cd:b0:c4:f9:2c:21:e8:
         7c:24:5e:10:2c:a4:d5:d4:91:a5:b6:64:e7:b7:64:f9:2d:5e:
         d8:cf:92:8d:c8:31:d5:94:57:44:b1:47:9c:d5:f8:1e:df:10:
         45:5d:86:cd:0a:67:e7:97:5f:1d:d4:01:df:67:17:35:6c:34:
         0b:8b:0b:62:a2:73:35:a9:54:e8:69:99:b1:49:c1:10:42:eb:
         96:14:3e:a9:f2:fa:f4:1b:1e:91:30:3a:19:ac:35:3c:67:3a:
         53:bf:9a:07:c4:5b:e3:e8:91:ea:f3:d4:02:32:dc:1c:90:0b:
         83:34:44:60:2c:9e:f6:5b:22:cc:1c:bf:39:62:e2:78:ba:15:
         48:02:81:cf:ed:e4:0d:4c:90:66:49:3a:65:ce:d9:95:5b:88:
         c8:29:6f:b9:18:3b:1a:48:33:57:95:1d:f8:b8:a8:e8:4a:0d:
         b6:f5:e5:bf:d8:db:07:12:07:b5:87:65:1f:db:b8:af:47:bd:
         db:d8:42:6b:20:ea:11:56:3d:40:1e:ed:71:f3:6c:ca:20:87:
         63:7a:cb:0d:f9:7f:e7:0f:f8:77:2c:a3:dc:b9:81:e3:6b:0c:
         2f:fc:a4:b9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5KJ3qZmTvyTo0NTLhCv4RHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzE3MDIwNDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTUzZjU1MTBjOTQ1NjUwYmZmOTY2NjM5M2FhZTNhNDI1ZDZkMDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAbpYVTLJw5rNOLG/Y8hK+swzcI2
eEWBRF/jsROnGxnLuhuvoAPWQgd79tHwmgECb1+HpDO7ln4Ee3zzUe16kU6n5juf
NHKjAphO8DsB7UrCPPwkFd2/01sAIGPlbyccuK39KBtTsAgZSVaQ4Sm3Ju9Ki71K
3MH09bU2urARDWW7eX77mnrXycwx+b5B1tugOEc91VW+Okf/6V03GYPOYrIe/bkZ
Fk/53RP5j31TwvA+VtbbNyPY7kpw+lV1+86EothGIAg6+ymQpjX754RsDqQdy33l
H7teQ9UKq0MdFGrNNyCAIzToP+LS8RTBvGpsQ7uPePjaC3haWo8NcOAD0QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPFT9VEMlFZQv/lmY5Oq46Ql1tAvMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvOFZQMVVReVVWbENfLVdaams2cmpwQ1hXMEM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGhNVs8Nk6waZee8Eu3f
8YbyYwNjaW7ZZn616UKOzbDE+Swh6HwkXhAspNXUkaW2ZOe3ZPktXtjPko3IMdWU
V0SxR5zV+B7fEEVdhs0KZ+eXXx3UAd9nFzVsNAuLC2KiczWpVOhpmbFJwRBC65YU
Pqny+vQbHpEwOhmsNTxnOlO/mgfEW+Pokerz1AIy3ByQC4M0RGAsnvZbIswcvzli
4ni6FUgCgc/t5A1MkGZJOmXO2ZVbiMgpb7kYOxpIM1eVHfi4qOhKDbb15b/Y2wcS
B7WHZR/buK9HvdvYQmsg6hFWPUAe7XHzbMogh2N6yw35f+cP+Hcso9y5geNrDC/8
pLk=
-----END CERTIFICATE-----
Generated at Sun Dec 28 20:29:14 2025 by rpki-client