This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/SkaqzqU2SlKfb4wddiqtveRcDEE.roa
File:                     SkaqzqU2SlKfb4wddiqtveRcDEE.roa (raw, json)
Hash identifier:          f99zWM25Z2bu8V61EQapCo1K+2OCp1Twh9BY4nCTqbw=
Subject key identifier:   4A:46:AA:CE:A5:36:4A:52:9F:6F:8C:1D:76:2A:AD:BD:E4:5C:0C:41
Certificate issuer:       /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial:       01975BEC3D4451A7FCF6AEC3092A0A2788C0
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/SkaqzqU2SlKfb4wddiqtveRcDEE.roa
Signing time:             Tue 10 Jun 2025 22:18:18 +0000
ROA not before:           Tue 10 Jun 2025 22:18:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
                          2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
                          2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
                          2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:ec:3d:44:51:a7:fc:f6:ae:c3:09:2a:0a:27:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
        Validity
            Not Before: Jun 10 22:18:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4a46aacea5364a529f6f8c1d762aadbde45c0c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ef:f6:fd:01:d3:27:80:39:a0:b7:03:8c:67:
                    3e:45:98:7c:4e:53:f4:46:81:65:ba:8e:4b:c0:b3:
                    82:7f:92:bb:91:ab:3d:4a:55:d2:5b:a1:c7:3a:b3:
                    c4:f5:36:e8:29:92:0a:1d:4a:70:42:82:38:e5:c2:
                    1c:be:dd:55:36:17:e2:af:62:1e:f7:50:09:17:c0:
                    d3:5f:c0:30:00:f5:ce:f2:ce:9e:20:9f:6d:c3:4f:
                    d1:47:d4:02:12:a9:c0:29:69:c2:73:7e:28:e7:e0:
                    10:aa:a3:05:33:7c:f1:a4:1b:bf:0d:67:ca:22:6f:
                    f4:3a:0a:5b:71:57:ac:65:27:3e:8c:fd:4a:f2:5e:
                    20:95:86:e6:23:88:09:89:3c:d4:1d:7b:9c:d3:50:
                    77:38:75:eb:85:5b:b8:f8:4a:15:66:fe:cb:c8:bb:
                    95:19:cb:2e:a8:80:82:aa:79:83:75:c0:29:b2:cf:
                    15:e5:46:01:c0:3a:f5:0a:f0:17:b4:0f:a8:99:90:
                    37:b3:44:36:c9:97:53:49:06:e6:c2:dd:a2:23:bd:
                    fd:3b:c4:1c:eb:bf:e9:fe:ea:6c:c2:43:92:a6:01:
                    a5:88:3e:89:b9:37:2a:e4:cb:de:95:c8:a4:31:a5:
                    48:97:b5:eb:e3:6f:2c:ed:1b:1a:64:34:0b:4d:e2:
                    f5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:46:AA:CE:A5:36:4A:52:9F:6F:8C:1D:76:2A:AD:BD:E4:5C:0C:41
            X509v3 Authority Key Identifier:
                keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/SkaqzqU2SlKfb4wddiqtveRcDEE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:196:ed5d:8c28/128
                  2001:67c:64:ffff:0:197:108e:927e/128
                  2001:67c:64:ffff:0:197:15eb:6226/128
                  2001:67c:64:ffff:0:197:353f:be91/128

    Signature Algorithm: sha256WithRSAEncryption
         b8:23:e2:eb:ee:fd:93:f7:64:7e:f6:bc:f0:58:51:1f:b2:ee:
         ff:57:cf:ca:63:99:75:36:f9:3e:30:92:19:46:85:cb:7a:76:
         46:b6:82:34:62:bb:0e:6f:83:3d:e4:bc:0a:2c:21:c7:20:e4:
         4b:09:24:2a:2e:71:aa:8c:1b:ba:9f:37:6d:56:ba:4c:b1:1d:
         ed:19:dc:d6:8f:ab:fb:25:11:0f:20:ba:7e:7a:5a:4e:b4:cd:
         70:40:83:2f:92:3d:15:a1:f6:f1:38:c6:d0:cb:d0:fd:f6:5f:
         36:70:17:5e:24:7b:1f:69:15:16:23:5f:7f:a5:46:72:bc:b2:
         17:4c:1a:be:74:73:2f:fc:40:a2:fc:9f:de:80:4c:9d:98:f8:
         97:b2:09:18:76:e3:96:f4:c8:da:d2:db:46:f9:c0:5b:1c:f1:
         c4:e1:4d:06:de:cf:17:09:00:7f:9f:ba:ac:2c:6a:24:5f:c1:
         d0:f9:44:0b:94:97:c0:af:94:45:d9:9f:fb:81:a6:a5:02:8a:
         5b:db:85:de:5e:d6:ff:fd:d6:fe:e1:d9:6f:fe:01:50:89:12:
         83:d8:c0:e9:8d:2f:1f:50:17:fd:03:9a:68:52:0e:43:28:24:
         74:17:24:ca:5f:d3:93:74:87:d4:08:17:ea:98:3c:66:c4:22:
         99:17:bc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:21:38 2025 by rpki-client