This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LK93OBS1AIv1e-_I382T1jSOpz4.roa
File:                     LK93OBS1AIv1e-_I382T1jSOpz4.roa (raw, json)
Hash identifier:          ZmWlbC4CrbUvvrJ97ZPVirwH5QHTOnPK6fEY33w23wc=
Subject key identifier:   2C:AF:77:38:14:B5:00:8B:F5:7B:EF:C8:DF:CD:93:D6:34:8E:A7:3E
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       0193AF2B2D94250A2FB0C572B023EEF0DBE5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LK93OBS1AIv1e-_I382T1jSOpz4.roa
Signing time:             Tue 10 Dec 2024 06:04:22 +0000
ROA not before:           Tue 10 Dec 2024 06:04:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:193:af2b:27cc/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:af:2b:2d:94:25:0a:2f:b0:c5:72:b0:23:ee:f0:db:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Dec 10 06:04:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2caf773814b5008bf57befc8dfcd93d6348ea73e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9a:9f:32:f3:44:b8:09:26:fa:25:c6:d6:51:
                    4d:2b:38:0a:22:27:ab:5f:40:62:89:d6:de:d4:c3:
                    8c:4a:97:bf:49:d7:58:db:b0:43:fa:8b:30:3e:ac:
                    c3:12:21:3a:20:46:5c:f9:6e:62:db:2d:c2:c5:4c:
                    02:b6:a2:de:01:02:a0:a7:f4:07:88:dd:1a:38:d5:
                    e9:0f:3a:69:7c:61:ed:45:18:75:4b:f8:83:7b:81:
                    b0:4d:97:77:44:af:32:f9:aa:06:50:01:3c:e0:10:
                    c1:c3:82:ad:de:87:7b:37:7a:90:5f:80:4c:4a:b4:
                    ff:a7:6e:18:ca:d6:69:98:e0:3f:e1:29:00:d7:93:
                    ff:6f:4e:69:25:b7:3d:34:6a:49:c3:4c:10:e5:12:
                    f1:3a:bb:00:72:42:39:0f:36:42:46:95:46:0a:ff:
                    85:af:8f:45:66:29:16:1d:d7:24:b1:c1:0e:32:62:
                    dc:2b:56:19:50:de:23:39:02:db:b7:34:76:aa:60:
                    05:7c:e1:8f:31:ff:7c:2f:18:6d:aa:35:49:ce:9a:
                    0b:b2:95:91:43:8c:2c:bf:72:8b:75:4f:18:6d:7e:
                    92:fa:4b:9d:7a:9e:b7:ca:8b:c6:11:ce:f7:20:b0:
                    46:0b:c2:8e:f4:45:41:ba:03:ae:8b:1c:59:65:c1:
                    68:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AF:77:38:14:B5:00:8B:F5:7B:EF:C8:DF:CD:93:D6:34:8E:A7:3E
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LK93OBS1AIv1e-_I382T1jSOpz4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:193:af2b:27cc/128

    Signature Algorithm: sha256WithRSAEncryption
         3f:aa:f2:f1:ee:b2:a7:08:9d:d1:56:72:ca:d4:a2:ac:9e:d0:
         b2:58:7c:bd:95:a9:2a:71:0d:56:64:97:59:f2:80:ec:f7:8e:
         c7:df:98:ab:1f:4a:24:4a:9b:5c:70:2f:df:0f:6c:04:cc:b5:
         d1:63:cc:7f:c4:d0:21:ea:a8:4c:29:c4:3b:df:1c:77:73:ea:
         0d:05:9c:67:6e:55:1e:9f:80:e1:f3:4d:15:c3:c3:86:2c:f5:
         9a:b2:2f:e8:f0:c0:28:a0:ad:8e:d2:90:1c:5c:ce:65:60:92:
         12:c9:31:9b:0b:e0:ac:9f:24:81:a6:b1:78:1e:12:ba:e7:0f:
         a4:27:e8:40:0c:fb:84:ab:25:45:6b:b1:94:80:cc:2a:3a:c9:
         ea:6c:6d:3a:a6:70:08:d3:0a:5d:f4:6d:4a:48:d3:c4:5d:51:
         5f:52:3a:f1:d2:95:a5:e9:76:3b:33:09:e4:26:f6:da:18:bb:
         41:ab:86:b1:c9:41:bd:a1:0e:d1:6c:e5:70:23:4b:40:8e:49:
         9c:3a:7b:80:9f:c5:4b:03:0a:08:a3:f8:4f:e9:45:39:1b:03:
         c0:15:f4:aa:93:1e:52:03:1c:a0:bd:2d:0f:0f:66:f6:14:59:
         2b:5b:57:61:0d:6f:fd:45:6a:36:ed:ef:5a:74:0d:9b:8c:35:
         8b:63:2b:8c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Dec 16 04:41:22 2025 by rpki-client