This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/IH1wPVRrxLLbQ5wJPMd0RXIVafM.roa
File:                     IH1wPVRrxLLbQ5wJPMd0RXIVafM.roa (raw, json)
Hash identifier:          vX36qWO8krfuMbSSLBI97omo8lGeMVPUUQ3kBDiPFTg=
Subject key identifier:   20:7D:70:3D:54:6B:C4:B2:DB:43:9C:09:3C:C7:74:45:72:15:69:F3
Certificate issuer:       /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial:       01970754E9F86A652F2B6D42691EF71C39D5
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/IH1wPVRrxLLbQ5wJPMd0RXIVafM.roa
Signing time:             Sun 25 May 2025 12:04:54 +0000
ROA not before:           Sun 25 May 2025 12:04:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
                          2001:67c:64:ffff:0:197:754:430d/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:07:54:e9:f8:6a:65:2f:2b:6d:42:69:1e:f7:1c:39:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
        Validity
            Not Before: May 25 12:04:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=207d703d546bc4b2db439c093cc77445721569f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b6:da:5d:2d:e9:fb:55:3b:90:b1:f7:6d:f3:
                    d9:b1:b5:61:fa:19:d5:15:c5:87:eb:5d:7a:a3:6e:
                    85:b4:c6:7a:7c:c1:11:32:09:40:a4:56:23:d3:0b:
                    d3:ef:c8:b8:ee:a6:75:5e:0e:00:d1:ff:7d:e5:70:
                    a8:a4:d1:95:d7:0b:6b:68:a6:d2:c2:fb:aa:dd:51:
                    d0:c3:4b:eb:5d:81:fa:08:ec:5b:67:59:6f:53:c4:
                    22:e7:49:83:4b:b9:d1:fb:b0:f5:fd:4b:c4:49:3d:
                    47:e1:0e:dc:b3:a3:d0:08:5e:96:cf:f7:ab:d0:1a:
                    0a:67:06:80:8a:cc:1d:9c:17:ff:2c:00:0f:f0:91:
                    03:e4:b2:bc:5d:69:5e:5e:56:6b:f1:3d:b5:1e:84:
                    1b:eb:c7:68:bb:51:f3:73:a1:ed:e5:64:2f:ec:a0:
                    b3:7b:3f:92:c0:b8:88:82:88:6a:ee:6d:9e:67:16:
                    3e:ae:7e:68:55:0b:4e:8b:42:32:be:00:71:fa:f1:
                    2a:38:84:b3:56:2f:83:27:6b:fc:78:71:31:44:5b:
                    2d:63:d9:e5:6c:d9:54:d5:ce:10:29:86:94:ed:10:
                    66:61:28:97:c8:bd:18:b7:5c:f1:1d:83:3a:e0:2c:
                    17:03:fe:1a:ed:a6:d5:08:0d:be:ad:d1:7c:95:95:
                    cc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7D:70:3D:54:6B:C4:B2:DB:43:9C:09:3C:C7:74:45:72:15:69:F3
            X509v3 Authority Key Identifier:
                keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/IH1wPVRrxLLbQ5wJPMd0RXIVafM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:196:ed5d:8c28/128
                  2001:67c:64:ffff:0:197:754:430d/128

    Signature Algorithm: sha256WithRSAEncryption
         17:03:da:a8:c1:6a:89:68:ba:f6:54:31:a3:5b:b5:55:df:c1:
         b6:a7:0e:ea:f8:6a:77:17:28:5e:a3:2e:ca:d2:ad:39:78:67:
         9b:19:bd:0e:44:6a:63:8f:6a:23:00:76:09:8a:02:a5:3b:83:
         86:da:cd:b3:a8:15:f3:ed:64:7c:39:53:76:fb:13:a1:a5:54:
         9f:d3:9a:51:15:79:d5:53:03:ac:63:3f:98:b0:68:76:e3:5f:
         39:97:af:dd:c8:02:50:fc:30:ae:17:00:91:41:77:b7:c6:17:
         73:74:bf:ba:f6:67:51:8a:de:6e:df:ec:bd:c9:f7:c1:55:84:
         33:b4:69:40:7e:db:b5:e2:e7:ff:97:c1:20:de:36:f9:27:20:
         2f:17:8e:34:8a:c9:ff:fd:6d:97:dd:c6:08:eb:1a:d9:f2:9d:
         ec:56:b8:85:2f:9b:30:3a:ec:c6:7f:fc:a4:48:9a:2e:04:15:
         44:37:13:a5:51:ae:3e:74:4e:bf:b3:08:e2:bd:5b:52:1c:56:
         3d:b0:d9:0a:bc:6c:25:09:8d:64:09:f6:51:75:83:2a:53:32:
         52:da:d9:7a:1b:e9:95:e9:c2:bb:53:7c:16:45:ac:b2:82:54:
         68:45:79:bf:13:70:1f:bd:32:ff:ab:19:91:69:23:5d:5c:e8:
         cd:ec:6a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 14:34:34 2025 by rpki-client