This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/r8V1zqyZoVVVmlZOlhIsI07ujfg.roa
File:                     r8V1zqyZoVVVmlZOlhIsI07ujfg.roa (raw, json)
Hash identifier:          Vj6C+HdcBe+mCL/R5bZVEyN2LJ0fik1vZKKrwocaj7A=
Subject key identifier:   AF:C5:75:CE:AC:99:A1:55:55:9A:56:4E:96:12:2C:23:4E:EE:8D:F8
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       01918896145B9DEB1B12CF7454E2B0FB8E74
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/r8V1zqyZoVVVmlZOlhIsI07ujfg.roa
Signing time:             Sun 25 Aug 2024 08:10:22 +0000
ROA not before:           Sun 25 Aug 2024 08:10:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:88:96:14:5b:9d:eb:1b:12:cf:74:54:e2:b0:fb:8e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Aug 25 08:10:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=afc575ceac99a155559a564e96122c234eee8df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9e:36:b0:c1:8c:d5:37:97:5f:79:f5:1d:e5:
                    c1:44:9a:30:21:7b:f6:d3:f6:4a:81:69:67:2b:3e:
                    a1:23:39:f5:a5:c6:f6:d8:db:ee:d7:08:49:8c:c7:
                    3b:54:69:cf:4b:7d:84:72:b1:33:c4:53:15:49:41:
                    cd:ae:1a:91:73:9f:30:4b:69:99:2b:02:7e:6a:3c:
                    e8:60:10:0c:0e:02:5e:95:60:6b:59:25:8e:74:5c:
                    18:49:57:7a:e3:6b:a0:f9:df:40:53:72:73:6f:f8:
                    9a:bc:59:3a:ad:27:15:c1:7a:f0:ca:56:da:02:6c:
                    ac:ec:2a:9c:55:1c:5c:6c:7a:38:5f:02:48:90:56:
                    10:42:9d:a3:a8:9d:7e:e0:af:3a:94:ab:07:97:82:
                    97:4f:b2:ee:06:57:0e:43:f8:16:5d:3e:97:51:b9:
                    50:74:35:27:26:6e:0a:83:5f:b3:64:15:29:fe:dd:
                    cc:96:a8:e7:54:e7:93:4c:26:6b:bd:fe:a7:c7:91:
                    83:57:44:82:12:0e:a8:ee:02:a8:01:9d:ba:5f:61:
                    5b:c4:75:a6:e1:fe:ed:e0:96:a0:bd:1d:ed:4a:33:
                    df:bd:36:1b:27:c3:01:08:21:9f:35:a7:c1:ec:5c:
                    42:33:8d:ed:b0:34:1d:1b:37:dd:01:3e:71:8f:dc:
                    69:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C5:75:CE:AC:99:A1:55:55:9A:56:4E:96:12:2C:23:4E:EE:8D:F8
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/r8V1zqyZoVVVmlZOlhIsI07ujfg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:190:fdf2:f302/128

    Signature Algorithm: sha256WithRSAEncryption
         61:75:b1:f6:d0:98:25:94:5e:32:13:4d:48:1f:68:42:dd:a1:
         4f:b6:9b:94:6c:35:3f:b2:e2:55:2d:11:38:61:c8:40:a7:bb:
         fe:b0:e7:48:a1:67:17:ec:ca:38:8b:d9:44:9b:a2:db:85:bb:
         a1:47:8f:85:af:71:84:10:8c:83:68:c8:59:eb:11:31:13:1e:
         85:55:63:40:7c:0b:59:2b:e9:49:e6:e2:bc:f8:a6:20:38:da:
         56:c4:f2:f6:a2:49:58:1f:86:3b:70:ea:41:03:e0:70:06:59:
         4a:fc:c6:74:86:cc:f1:00:10:3e:82:f7:9d:67:dc:bc:86:1c:
         af:98:78:a9:62:ca:08:59:3c:af:f2:5e:55:f7:3f:2c:ea:40:
         1f:c2:81:ac:96:c6:bf:55:77:c3:12:0e:f1:6c:be:cf:07:c9:
         c5:cf:ae:e3:48:57:d5:54:92:b9:11:32:18:e8:08:2f:b0:18:
         5a:1a:2c:fd:31:58:8d:77:4e:42:d4:50:78:7b:f5:ab:5a:4a:
         de:74:46:95:de:d7:61:9d:ae:63:e2:05:8f:71:21:92:c2:8d:
         8b:e3:83:6b:2c:19:6c:1a:9d:71:27:d8:b9:82:d9:6a:a3:15:
         7c:6e:04:ea:a2:49:08:cd:c8:28:4d:c0:aa:b0:c3:45:b6:71:
         59:71:fc:c1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Dec 18 11:57:16 2025 by rpki-client