This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WSJSqwXv_IgLmSZyPhqFPlMhzxs.roa
File:                     WSJSqwXv_IgLmSZyPhqFPlMhzxs.roa (raw, json)
Hash identifier:          kucwfoT+qAWYShEWjZO5un5U2vdS5gz0Pvyp4DbWQJo=
Subject key identifier:   59:22:52:AB:05:EF:FC:88:0B:99:26:72:3E:1A:85:3E:53:21:CF:1B
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018D0552106B482564ED9B2CE12B5E04D11C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WSJSqwXv_IgLmSZyPhqFPlMhzxs.roa
Signing time:             Sun 14 Jan 2024 00:14:40 +0000
ROA not before:           Sun 14 Jan 2024 00:14:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:05:52:10:6b:48:25:64:ed:9b:2c:e1:2b:5e:04:d1:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan 14 00:14:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=592252ab05effc880b9926723e1a853e5321cf1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:10:31:b2:85:73:22:2a:30:96:ea:f8:63:59:
                    c6:21:ba:3b:bd:b6:a9:c2:86:11:a3:e0:6b:53:6b:
                    94:91:88:8e:a1:b8:86:14:81:92:26:a3:c7:50:9b:
                    1b:a0:76:d3:c3:51:03:b8:b2:95:86:3f:9f:d3:a1:
                    5c:04:cd:1e:50:c6:d9:7b:ca:55:a5:26:68:89:26:
                    99:0b:5d:c7:85:18:9c:11:27:b9:24:b7:02:d9:bf:
                    2e:fa:50:a3:80:00:33:44:07:f0:8f:51:11:05:b8:
                    6c:a2:81:09:dd:6b:60:78:c5:fc:a2:e5:28:d4:65:
                    88:70:fd:d1:06:f7:9d:a8:9e:20:fe:1b:e9:43:b3:
                    db:83:61:b1:e0:73:46:d1:cf:db:22:36:63:ee:68:
                    ed:ae:aa:01:04:4e:91:af:7a:63:ae:0a:01:80:3e:
                    2a:7e:4c:b4:28:24:25:af:5e:89:a4:d6:4a:c4:8c:
                    a2:88:0b:cc:37:e3:8a:0e:f4:bd:46:c8:fd:95:5c:
                    de:2b:08:e7:12:ee:9c:77:d4:dc:ed:e1:e4:21:df:
                    60:0a:b9:6d:cc:d7:51:9f:b2:01:ee:13:c5:77:fb:
                    3f:8c:b2:66:d3:4d:97:32:5e:fe:13:e6:fe:c7:1c:
                    7b:cc:5e:3b:b5:a8:e0:ec:99:9c:84:08:d9:00:9f:
                    9a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:22:52:AB:05:EF:FC:88:0B:99:26:72:3E:1A:85:3E:53:21:CF:1B
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WSJSqwXv_IgLmSZyPhqFPlMhzxs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:7a:66:06:67:cf:14:9f:e5:a1:4a:18:c6:05:76:6d:30:67:
         37:d2:72:77:a6:18:86:f2:41:00:0e:fe:4c:19:c4:7c:ba:5e:
         23:c9:94:1d:4d:c2:dd:83:d9:b9:14:76:03:8c:82:24:08:ff:
         13:52:1c:24:cd:38:53:29:52:17:11:43:5d:0e:ae:f1:1a:27:
         61:16:4c:5a:47:bd:dd:9a:61:6a:4e:cb:a6:23:34:d4:77:10:
         d8:78:33:b6:e7:b7:2e:7b:18:10:48:10:d5:44:87:88:cc:0c:
         13:0f:ce:44:b5:14:68:e5:5a:42:72:23:8e:a9:9d:76:3f:f6:
         09:86:06:2e:e9:e6:10:34:0b:1c:58:c7:53:fc:3b:58:26:31:
         d6:84:cf:98:53:22:5f:9e:0d:2d:01:e2:0a:0d:05:e4:9b:ef:
         22:a4:50:85:4c:68:b3:41:f1:0b:b8:9c:19:3b:94:f8:26:ee:
         5b:f6:e9:e1:be:1f:54:4a:27:3f:a1:e5:ca:46:54:b0:aa:a0:
         16:ee:8e:74:3b:ff:3b:76:7b:88:f1:6f:84:f7:12:03:65:df:
         6f:d0:a1:a3:87:cc:88:63:aa:41:41:16:c4:ea:76:ba:51:eb:
         a1:04:ae:99:2d:f7:7b:50:a1:d0:6c:44:89:5a:f9:98:a8:b2:
         6f:61:1b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:54:20 2025 by rpki-client