This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cQVyfZQW3Da3X1hOsMUjjQv_UmE.roa
File:                     cQVyfZQW3Da3X1hOsMUjjQv_UmE.roa (raw, json)
Hash identifier:          jNAKV80xUh8ihzaXHAx9NdXxM/ya3Ioq4STbVfc5yYw=
Subject key identifier:   71:05:72:7D:94:16:DC:36:B7:5F:58:4E:B0:C5:23:8D:0B:FF:52:61
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018E573E4EF518402F9B97DDD495337B6DAB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cQVyfZQW3Da3X1hOsMUjjQv_UmE.roa
Signing time:             Tue 19 Mar 2024 15:04:45 +0000
ROA not before:           Tue 19 Mar 2024 15:04:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
                          2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
                          2001:67c:64:ffff:0:18e:573d:db50/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:57:3e:4e:f5:18:40:2f:9b:97:dd:d4:95:33:7b:6d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Mar 19 15:04:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7105727d9416dc36b75f584eb0c5238d0bff5261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:67:17:71:1b:06:87:77:c3:79:db:22:84:99:
                    fa:1c:14:07:08:39:8a:78:85:e0:0c:17:8c:a3:66:
                    ac:e1:ca:1a:09:97:2b:e6:21:c3:09:c6:ef:c1:2d:
                    2f:eb:f1:3f:b3:7f:46:8f:32:94:a9:5b:c0:98:f5:
                    89:62:8e:f7:b1:aa:8e:0e:a0:53:ed:b4:54:4d:9c:
                    fc:8e:37:76:aa:d4:60:33:aa:0f:6e:22:73:ee:8e:
                    5f:43:f1:c2:6c:5d:ca:f6:d7:34:34:74:45:9d:31:
                    6f:74:c6:7d:a8:d9:ac:aa:13:7d:19:06:78:36:d3:
                    e9:53:74:c3:73:60:29:7d:78:6d:d8:99:0f:b1:31:
                    4c:d6:46:ce:1a:4d:e4:93:7d:a7:af:42:e7:42:73:
                    c0:5c:b1:73:84:e8:50:b6:78:cf:1d:88:11:6c:2a:
                    30:c0:ce:2e:f1:a5:d7:a2:fa:ac:07:a6:97:1e:a6:
                    8b:ef:b2:de:fd:46:f7:9e:e7:e4:3f:70:8d:eb:2d:
                    d2:5f:be:22:d5:3a:92:4c:b1:30:74:d4:2f:2f:27:
                    8b:ca:6a:7d:c1:e5:0f:77:bc:f8:12:79:60:86:37:
                    3d:51:28:fd:4c:77:9e:1f:35:4b:fb:bc:80:f3:fa:
                    32:0b:5a:20:e2:81:5c:f0:f5:43:98:db:fe:b0:ee:
                    32:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:05:72:7D:94:16:DC:36:B7:5F:58:4E:B0:C5:23:8D:0B:FF:52:61
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cQVyfZQW3Da3X1hOsMUjjQv_UmE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:3f:0b:f7:a9:32:bb:43:9c:e4:e0:91:ee:86:d5:8e:32:9b:
         7f:7b:4f:91:90:f5:e2:a0:1b:4c:e8:48:bc:be:c7:12:56:3b:
         06:24:92:31:a7:fd:a4:99:33:90:b6:3c:22:50:95:5a:c0:37:
         a8:c3:8f:e5:02:10:3b:9d:ae:e0:91:95:6f:0c:40:e5:6c:9e:
         78:d6:8f:38:4c:47:5e:44:bf:35:c0:c3:f3:af:9c:e2:57:42:
         95:c0:ae:1e:3d:68:a4:ef:77:a7:f8:06:19:7f:d4:68:de:b5:
         39:12:90:fc:d4:6d:fd:17:6c:70:77:35:5d:6f:4c:79:37:50:
         f5:b1:ee:d8:0e:a4:27:bf:32:34:50:65:ed:99:fe:bd:33:9d:
         6a:84:24:e3:ed:82:fe:6a:00:a7:24:2c:63:e6:fe:5e:0c:27:
         7c:4c:8a:83:34:8b:9a:6a:0c:10:6b:a5:b5:51:28:cb:d3:58:
         0f:d0:b9:00:71:7b:10:2d:66:25:83:8c:ce:f9:14:88:a3:cb:
         0b:0d:be:90:6f:56:75:1d:8a:a1:15:f9:fd:4c:97:77:9d:62:
         83:66:00:cf:14:ef:34:5f:a1:dd:19:36:40:19:50:64:b2:10:
         9c:19:3d:21:1d:80:d7:cc:9c:0b:64:7c:ac:5d:41:e5:68:7a:
         11:13:54:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:47:43 2025 by rpki-client