This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/AK6mcC_Pw7j8HBM9LNy-34UvgKk.roa
File:                     AK6mcC_Pw7j8HBM9LNy-34UvgKk.roa (raw, json)
Hash identifier:          UK42Ebg040bqeL/gf5uhQwIn4Y7S2fHRPF0kVXQvRzE=
Subject key identifier:   00:AE:A6:70:2F:CF:C3:B8:FC:1C:13:3D:2C:DC:BE:DF:85:2F:80:A9
Certificate issuer:       /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial:       019750BE4B23BDA6E5E9CFB1E7638E30D08C
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/AK6mcC_Pw7j8HBM9LNy-34UvgKk.roa
Signing time:             Sun 08 Jun 2025 18:12:17 +0000
ROA not before:           Sun 08 Jun 2025 18:12:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
                          2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
                          2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
                          2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:be:4b:23:bd:a6:e5:e9:cf:b1:e7:63:8e:30:d0:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
        Validity
            Not Before: Jun  8 18:12:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=00aea6702fcfc3b8fc1c133d2cdcbedf852f80a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:14:0f:d6:f4:7b:86:e2:ff:fd:c4:88:13:cc:
                    8a:99:e8:a0:07:74:d5:d5:2a:95:21:2f:66:68:30:
                    3f:65:6c:31:cd:8a:4b:8f:23:e4:b7:69:17:6c:f5:
                    41:b0:61:0a:46:35:70:de:64:b9:2a:4a:36:6f:5d:
                    37:df:cd:5f:b7:2f:50:3d:2d:70:fe:48:7c:3e:c4:
                    e2:fa:66:17:0f:2d:88:eb:0c:11:87:3c:1f:06:02:
                    15:30:74:54:47:1c:d3:f7:4e:38:1a:05:41:5f:ff:
                    34:13:83:ac:cd:c5:4c:96:b9:a7:81:2d:e9:57:8d:
                    03:ef:c9:a9:3b:cd:21:9a:b1:4f:50:d9:02:ca:64:
                    7f:e3:43:34:a1:cc:e2:06:d1:51:26:6a:7e:52:f8:
                    68:74:4f:34:79:38:bb:62:be:d0:a4:e5:d0:c2:ce:
                    60:41:b6:ae:89:88:86:ec:43:de:26:09:f3:38:02:
                    93:1f:fb:5c:33:6f:11:52:9e:a8:06:f5:30:b7:90:
                    7b:e5:ca:fa:25:11:10:33:af:5d:d7:c1:ee:62:22:
                    86:c6:25:75:c6:dd:87:94:c6:b4:f8:ef:98:02:fa:
                    12:18:ed:02:79:dc:21:c8:fd:37:af:94:3f:6e:33:
                    eb:4b:ac:05:f8:8d:b6:ac:b7:d0:be:35:f8:65:85:
                    a0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AE:A6:70:2F:CF:C3:B8:FC:1C:13:3D:2C:DC:BE:DF:85:2F:80:A9
            X509v3 Authority Key Identifier:
                keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/AK6mcC_Pw7j8HBM9LNy-34UvgKk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:196:ed5d:8c28/128
                  2001:67c:64:ffff:0:197:108e:927e/128
                  2001:67c:64:ffff:0:197:15eb:6226/128
                  2001:67c:64:ffff:0:197:353f:be91/128

    Signature Algorithm: sha256WithRSAEncryption
         6d:af:78:ed:1a:32:4e:17:c8:18:bd:f0:60:1d:d1:e3:ff:1a:
         43:dd:07:ca:8b:5b:05:0a:43:4b:f2:bf:48:52:97:25:a1:4f:
         08:28:f8:fb:52:8c:87:91:07:c9:9b:7f:79:2b:91:44:f8:77:
         d6:86:31:11:e3:45:0a:17:60:49:bc:1d:81:59:27:1d:49:e9:
         02:fd:39:f0:78:1b:75:07:eb:05:f9:89:d3:8a:6f:68:8f:b4:
         28:e5:97:98:19:4d:fe:82:19:ed:32:e4:e3:b8:75:09:7b:83:
         ed:69:8d:27:65:75:cf:cd:cf:46:85:fd:84:9a:e1:e8:44:1f:
         11:cf:70:1b:54:61:a7:d6:ae:67:ea:03:30:76:5e:94:97:36:
         29:6c:9d:d8:ef:7e:35:bd:20:12:9b:55:bd:a6:74:ff:61:0f:
         a3:e7:d2:57:84:f5:99:99:20:b7:46:bf:ee:4d:08:61:19:45:
         c9:75:f8:0c:47:74:e8:87:1e:5f:ce:28:34:1b:4d:c5:96:5b:
         89:34:32:f0:91:0c:3e:57:19:58:d1:99:33:50:f7:f4:27:b2:
         50:6b:63:21:eb:fd:2e:0e:7a:23:7b:81:9e:ed:64:f9:de:d5:
         f5:43:cd:e7:38:21:2b:85:4c:86:7e:ee:e2:e1:dd:23:14:d2:
         4d:72:01:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 10:37:31 2025 by rpki-client