This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/EY9FFQrWZh_OqH5zSWSPyWvn9Ks.roa
File:                     EY9FFQrWZh_OqH5zSWSPyWvn9Ks.roa (raw, json)
Hash identifier:          EttvDO6gZB/1AZecog3ywT0oWAkzsJ7ClGLailJJK2Y=
Subject key identifier:   11:8F:45:15:0A:D6:66:1F:CE:A8:7E:73:49:64:8F:C9:6B:E7:F4:AB
Certificate issuer:       /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial:       01974DF344F300DC90CE8FA708C5C1F846A4
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/EY9FFQrWZh_OqH5zSWSPyWvn9Ks.roa
Signing time:             Sun 08 Jun 2025 05:11:17 +0000
ROA not before:           Sun 08 Jun 2025 05:11:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
                          2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
                          2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
                          2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:f3:44:f3:00:dc:90:ce:8f:a7:08:c5:c1:f8:46:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
        Validity
            Not Before: Jun  8 05:11:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=118f45150ad6661fcea87e7349648fc96be7f4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:33:04:97:4a:5b:12:e8:22:5f:fa:e4:90:
                    9a:bd:0b:8d:49:a1:78:21:3e:6f:3a:22:27:ff:7f:
                    0f:21:02:65:bf:55:e0:2a:e2:15:7e:57:e0:c4:6a:
                    9d:f6:72:da:d9:a6:b2:1d:df:7a:1e:5b:3a:e3:5d:
                    e2:6c:68:aa:2a:22:7a:15:0b:ac:ab:86:07:c0:ae:
                    18:6b:72:a8:7e:a6:77:93:37:c4:2c:e0:86:f8:00:
                    70:5d:b5:c2:3b:b4:32:cf:5d:08:c6:f3:16:c4:d7:
                    64:ae:00:40:3c:39:85:0f:1f:07:3e:76:c7:78:7e:
                    a0:31:af:c9:b0:a0:ef:e0:d2:dc:d2:ce:e2:f0:37:
                    9a:02:9d:11:4e:b7:8b:30:92:3d:8d:ec:a2:10:59:
                    a7:54:b0:3d:bc:48:70:43:5f:47:ba:fb:bd:13:b3:
                    a0:0f:99:19:3a:16:bc:94:b3:96:c0:5b:19:0a:ba:
                    ce:0f:1e:d2:c2:9f:c0:69:ea:1e:19:60:c8:bd:dd:
                    8b:b7:17:31:db:5d:74:1f:db:58:4e:02:cf:a8:82:
                    2e:12:57:ce:86:69:51:69:88:11:3b:e4:8f:04:0b:
                    76:f1:be:5a:08:4f:d3:db:5f:3e:c3:f1:24:c4:28:
                    f6:43:59:63:19:2e:93:af:61:a3:a7:86:77:98:c3:
                    c9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8F:45:15:0A:D6:66:1F:CE:A8:7E:73:49:64:8F:C9:6B:E7:F4:AB
            X509v3 Authority Key Identifier:
                keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/EY9FFQrWZh_OqH5zSWSPyWvn9Ks.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:196:ed5d:8c28/128
                  2001:67c:64:ffff:0:197:108e:927e/128
                  2001:67c:64:ffff:0:197:15eb:6226/128
                  2001:67c:64:ffff:0:197:353f:be91/128

    Signature Algorithm: sha256WithRSAEncryption
         c5:81:a1:3b:5d:fa:c8:f2:12:1e:93:23:84:61:71:97:fc:f2:
         d2:23:b7:0a:44:d5:3b:af:67:a9:7a:97:36:ac:13:8c:18:da:
         bd:8c:73:32:0e:cb:71:c0:89:e1:a3:75:10:65:d3:67:22:a5:
         de:04:7b:93:62:59:c7:4c:f4:ca:e6:8d:7f:f1:f0:35:02:8c:
         21:e1:22:4f:bb:7b:d6:19:5b:36:de:fd:4a:29:8d:1e:e9:95:
         b1:3c:c2:b1:36:41:2b:c7:25:e1:b9:5b:d1:5c:36:f7:47:e7:
         bf:01:1d:e4:89:e1:2d:87:2b:79:ca:38:2e:85:b1:36:3b:55:
         13:38:f6:03:6b:5d:c8:25:b5:e6:a3:21:bf:c2:f0:a0:5a:0e:
         2b:46:9f:91:95:45:13:20:24:f4:79:ca:a1:85:95:d1:d0:65:
         3f:66:e2:d6:d3:7c:0e:e0:25:98:83:bc:80:49:42:69:e6:48:
         49:37:50:26:8e:20:4f:08:83:b6:dd:65:c7:7f:68:7a:9b:65:
         a6:cd:eb:89:65:9f:2a:b0:b9:68:79:1d:7b:ee:b4:65:f0:54:
         43:8d:15:f6:8d:2b:b6:17:98:42:d9:08:69:c6:d0:3a:c8:4f:
         80:1f:75:d0:68:93:72:cc:74:c6:af:11:72:c4:a7:5d:cf:df:
         a1:27:fb:6a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAZdN80TzANyQzo+nCMXB+EakMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNjA4MDUxMTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMThmNDUxNTBhZDY2NjFmY2VhODdlNzM0OTY0OGZjOTZiZTdmNGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJMzBJdKWxLoIl/65JCavQuNSaF4
IT5vOiIn/38PIQJlv1XgKuIVflfgxGqd9nLa2aayHd96Hls6413ibGiqKiJ6FQus
q4YHwK4Ya3KofqZ3kzfELOCG+ABwXbXCO7Qyz10IxvMWxNdkrgBAPDmFDx8HPnbH
eH6gMa/JsKDv4NLc0s7i8DeaAp0RTreLMJI9jeyiEFmnVLA9vEhwQ19Huvu9E7Og
D5kZOha8lLOWwFsZCrrODx7Swp/AaeoeGWDIvd2Ltxcx2110H9tYTgLPqIIuElfO
hmlRaYgRO+SPBAt28b5aCE/T218+w/EkxCj2Q1ljGS6Tr2Gjp4Z3mMPJmQIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFBGPRRUK1mYfzqh+c0lkj8lr5/SrMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvRVk5RkZRcldaaF9PcUg1elNXU1B5V3ZuOUtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAAjBMAxEAIAEGfABk
//8AAAGW7V2MKAMRACABBnwAZP//AAABlxCOkn4DEQAgAQZ8AGT//wAAAZcV62Im
AxEAIAEGfABk//8AAAGXNT++kTANBgkqhkiG9w0BAQsFAAOCAQEAxYGhO136yPIS
HpMjhGFxl/zy0iO3CkTVO69nqXqXNqwTjBjavYxzMg7LccCJ4aN1EGXTZyKl3gR7
k2JZx0z0yuaNf/HwNQKMIeEiT7t71hlbNt79SimNHumVsTzCsTZBK8cl4blb0Vw2
90fnvwEd5InhLYcreco4LoWxNjtVEzj2A2tdyCW15qMhv8LwoFoOK0afkZVFEyAk
9HnKoYWV0dBlP2bi1tN8DuAlmIO8gElCaeZISTdQJo4gTwiDtt1lx39oeptlps3r
iWWfKrC5aHkde+60ZfBUQ40V9o0rtheYQtkIacbQOshPgB910GiTcsx0xq8RcsSn
Xc/foSf7ag==
-----END CERTIFICATE-----
Generated at Sun Dec 21 00:24:44 2025 by rpki-client