This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6dKRihl7ji1sTU7QlOkrn9lR_hg.roa
File:                     6dKRihl7ji1sTU7QlOkrn9lR_hg.roa (raw, json)
Hash identifier:          mk7JwGaZoerADbT5i+UxgAwQ20V9aZvYsb5HNWE/jpM=
Subject key identifier:   E9:D2:91:8A:19:7B:8E:2D:6C:4D:4E:D0:94:E9:2B:9F:D9:51:FE:18
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       01921A0D1736B8E4FE3D01938019C0E33C70
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6dKRihl7ji1sTU7QlOkrn9lR_hg.roa
Signing time:             Sun 22 Sep 2024 14:05:18 +0000
ROA not before:           Sun 22 Sep 2024 14:05:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:192:1a0c:6935/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:1a:0d:17:36:b8:e4:fe:3d:01:93:80:19:c0:e3:3c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Sep 22 14:05:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e9d2918a197b8e2d6c4d4ed094e92b9fd951fe18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:98:76:1d:7b:e3:48:3a:a0:78:c7:53:9a:41:
                    09:69:87:f7:aa:3d:1c:e4:07:03:eb:83:5b:d0:64:
                    80:f6:10:ba:0b:86:73:79:d1:d0:3c:12:68:0c:05:
                    e8:8e:8a:90:7b:52:e0:1a:d0:f2:ab:54:4b:e1:c9:
                    c3:57:19:2e:83:6c:6e:13:25:03:d9:c5:19:df:81:
                    8f:38:76:47:e4:1b:63:66:03:f9:4b:e3:6e:25:c8:
                    31:21:f9:c5:cf:73:c2:20:f7:2e:88:1c:2d:3f:61:
                    a9:fb:bd:cd:09:c0:0a:0a:e5:8f:c6:1f:3f:78:55:
                    fd:da:91:9d:ab:bf:e6:16:c5:54:43:43:67:da:07:
                    f0:16:90:cb:18:14:30:a7:13:2d:56:e8:4c:c7:65:
                    f7:a2:56:b1:68:bf:9c:bd:13:52:5c:a9:f6:c3:a6:
                    05:2a:73:1f:2f:86:ec:d3:cc:4e:b5:f9:9e:ba:bb:
                    0a:e1:ea:08:4a:5c:e1:58:e0:5b:e6:c5:b7:7a:4a:
                    23:58:64:d6:4b:78:69:d8:a8:35:cb:8b:be:a7:2f:
                    d2:f7:63:bf:47:a7:90:87:05:89:d3:39:df:39:87:
                    42:94:41:c6:47:73:0a:ae:4f:65:b2:3a:22:46:2a:
                    b3:ee:09:f8:c8:8b:75:62:28:0a:75:65:99:f4:0b:
                    55:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D2:91:8A:19:7B:8E:2D:6C:4D:4E:D0:94:E9:2B:9F:D9:51:FE:18
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6dKRihl7ji1sTU7QlOkrn9lR_hg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:192:1a0c:6935/128

    Signature Algorithm: sha256WithRSAEncryption
         29:92:4e:f2:c8:46:7d:02:c4:6e:b6:ff:05:01:2d:03:11:6d:
         b4:b0:e7:4e:f0:30:0d:26:14:e0:b4:ad:79:52:1c:88:f2:b4:
         b7:5a:44:d9:63:d9:d4:9b:5e:f0:f6:8c:18:e3:45:0e:2f:2e:
         93:17:11:61:c5:94:69:0c:66:8d:2e:c5:70:a6:1e:4e:a3:44:
         88:96:2d:99:fc:8d:5c:94:a4:ef:4c:73:7c:f9:f6:e2:8f:b4:
         1c:db:a1:f6:84:70:2b:bc:8d:8c:f4:06:11:47:a9:99:c0:f6:
         d1:6a:be:c9:14:df:a3:76:b7:e2:3c:7f:fb:2a:d7:90:4a:41:
         c0:93:39:2f:dd:b0:9c:f3:8b:e1:19:79:4e:45:a3:50:cd:cc:
         ec:53:62:aa:67:5c:c9:3d:bf:d6:3a:5b:3a:65:33:5d:ae:f8:
         fb:b8:36:3e:07:2a:10:53:2d:9b:6a:06:8f:7a:9e:34:ef:d5:
         c1:94:84:2c:b9:65:00:b3:6d:bf:41:fa:67:fb:11:92:56:de:
         38:a7:97:fc:10:e0:1b:e9:ac:23:55:29:c6:be:1d:8b:2d:87:
         bf:ed:00:48:71:c8:9d:1f:18:51:57:80:af:ef:b3:75:15:7c:
         12:0e:8e:b1:de:d5:3e:6c:db:f3:a4:31:e7:1d:37:fa:5f:5e:
         9c:df:6f:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Dec 19 08:25:29 2025 by rpki-client