This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/V4LaIU5t_iieO8Ehl6Xyuwn1ENo.roa
File:                     V4LaIU5t_iieO8Ehl6Xyuwn1ENo.roa (raw, json)
Hash identifier:          GDC0f1eq/wZnItx8fasGszXcEj+spKy75AAK+OijPEU=
Subject key identifier:   57:82:DA:21:4E:6D:FE:28:9E:3B:C1:21:97:A5:F2:BB:09:F5:10:DA
Certificate issuer:       /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial:       01964D4A8087A73D813A8706F1B21A5DEBE2
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/V4LaIU5t_iieO8Ehl6Xyuwn1ENo.roa
Signing time:             Sat 19 Apr 2025 09:04:10 +0000
ROA not before:           Sat 19 Apr 2025 09:04:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:196:4d4a:7093/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:4a:80:87:a7:3d:81:3a:87:06:f1:b2:1a:5d:eb:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
        Validity
            Not Before: Apr 19 09:04:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5782da214e6dfe289e3bc12197a5f2bb09f510da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ad:6f:ea:8a:58:04:db:62:03:11:8c:7c:27:
                    b4:03:f0:87:56:00:58:b4:01:20:41:f2:65:c9:76:
                    95:44:88:4b:1f:1f:a0:90:88:26:44:a1:93:3f:7f:
                    94:25:8e:74:7e:91:0c:0c:c0:46:c9:34:bc:e9:1a:
                    d4:2e:85:ea:d9:15:9d:de:81:0e:09:e9:33:10:f0:
                    5b:a5:54:35:f1:0a:d6:e2:a0:5e:8a:20:bb:59:a4:
                    76:b0:03:21:cf:03:04:a4:d1:19:a8:13:aa:4d:f7:
                    74:8a:38:d3:a2:b8:4f:bf:b9:33:bb:a2:b0:72:a0:
                    2f:96:10:23:d1:44:7b:9f:58:df:a7:a5:87:94:9d:
                    09:ee:ee:e3:14:27:1e:7a:af:89:1f:1b:1f:a5:d3:
                    76:0f:40:6b:4b:c0:10:53:37:4a:d6:00:d8:ef:e2:
                    5f:fd:7f:32:2e:59:a4:02:20:b9:18:8d:ca:b3:9f:
                    97:c2:df:14:03:c1:6d:75:09:fe:d9:31:7b:0f:d2:
                    a7:fc:7c:e0:6b:83:09:df:10:36:84:07:31:64:f9:
                    e3:02:aa:bd:2d:bf:9c:de:b7:33:6c:71:02:bd:2e:
                    5c:ef:84:e8:55:48:84:bf:03:69:bd:da:4a:a9:fc:
                    a3:30:79:4e:49:d1:f1:69:c1:41:1b:1e:77:45:1a:
                    46:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:82:DA:21:4E:6D:FE:28:9E:3B:C1:21:97:A5:F2:BB:09:F5:10:DA
            X509v3 Authority Key Identifier:
                keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/V4LaIU5t_iieO8Ehl6Xyuwn1ENo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:196:4d4a:7093/128

    Signature Algorithm: sha256WithRSAEncryption
         2a:73:64:bb:f6:0b:84:1f:99:31:18:47:da:b8:bd:cf:3b:9d:
         ad:6c:6a:7b:aa:e5:dc:fe:be:2f:30:ff:99:de:fe:78:13:e6:
         77:ad:c8:09:d6:28:4a:66:91:7e:ce:12:ee:c2:88:36:6b:71:
         d5:11:6b:60:f5:cb:a8:46:58:74:d9:bb:9b:01:c7:d8:21:ec:
         a7:4c:f4:83:9f:f2:86:f9:67:7e:7c:8f:a5:b5:e9:e7:87:33:
         cd:28:1c:65:0b:26:c5:93:d6:ed:da:25:ec:59:35:05:ce:41:
         55:6f:9b:a2:45:bd:3a:2d:7c:5e:c5:53:4b:d3:e8:54:5b:cf:
         8d:26:15:f3:e9:c1:00:25:b0:0e:fa:9c:9c:78:3c:9b:69:01:
         37:8b:4f:1e:17:18:a5:50:71:31:2b:e8:72:29:59:dc:4e:e4:
         58:33:12:f5:60:a5:c6:63:3c:ac:cf:90:d3:73:b4:ea:49:18:
         5d:97:b3:08:1b:5a:3d:9a:1f:54:6a:09:da:d0:e6:bc:84:2e:
         95:ea:c8:86:b4:7e:dd:07:f5:bf:a0:b4:58:d7:f2:32:4c:97:
         bb:7f:a2:50:42:a0:6f:40:6f:d7:10:1d:78:94:c0:c7:64:ef:
         71:e2:67:af:71:d2:2b:09:1d:a2:2b:c8:b0:c7:4d:99:a9:fa:
         1e:e6:b4:85
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Dec 22 07:57:00 2025 by rpki-client