This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/YYvJEN3FiH93QGFRmjiD2MV9-jY.roa
File:                     YYvJEN3FiH93QGFRmjiD2MV9-jY.roa (raw, json)
Hash identifier:          NBcWBH9rO+bxk26RD75i0lsAXoDY1RJKABKAkRyMN0U=
Subject key identifier:   61:8B:C9:10:DD:C5:88:7F:77:40:61:51:9A:38:83:D8:C5:7D:FA:36
Certificate issuer:       /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial:       0196F1A90E4CEAD648437A6EED23F9919DB7
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/YYvJEN3FiH93QGFRmjiD2MV9-jY.roa
Signing time:             Wed 21 May 2025 07:05:10 +0000
ROA not before:           Wed 21 May 2025 07:05:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
                          2001:67c:64:ffff:0:196:f1a8:474b/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:f1:a9:0e:4c:ea:d6:48:43:7a:6e:ed:23:f9:91:9d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
        Validity
            Not Before: May 21 07:05:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=618bc910ddc5887f774061519a3883d8c57dfa36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:01:73:36:5c:8f:30:62:e4:d2:de:86:e2:
                    dd:30:18:a6:ff:67:a3:b0:bd:10:a9:1c:2b:14:be:
                    cc:fc:69:38:77:1f:7b:24:f0:0f:81:2d:d7:98:d5:
                    3a:1b:01:af:0b:a5:9f:42:7c:0c:2b:6f:c3:c2:13:
                    da:e9:37:84:aa:6a:64:6f:56:62:ed:32:27:88:b9:
                    a2:05:1f:de:33:7d:71:7c:6e:2b:87:18:f6:d3:5e:
                    7e:01:7e:6f:8f:be:83:79:df:56:97:c5:f7:d6:ef:
                    6e:44:4f:a9:5f:1d:ee:bd:34:dc:28:de:5c:1c:14:
                    e7:f8:93:52:77:dc:e2:15:02:9a:9a:2d:0a:5e:55:
                    12:3b:ca:f2:0a:0e:21:cc:a7:0d:fc:05:52:a2:b2:
                    73:e1:c1:e0:77:78:bb:f4:1f:35:32:46:9a:f7:53:
                    42:d8:1c:94:0b:2e:15:c2:55:1c:86:c9:d6:8f:ea:
                    7e:ba:f7:c7:3a:ee:56:a9:f2:d6:0e:04:db:c3:7f:
                    2a:91:66:d4:6c:2c:84:72:9b:19:24:9b:e0:9e:5f:
                    07:8a:f8:1d:28:78:ba:37:35:f9:e4:f5:f3:ca:50:
                    55:ca:e9:b6:33:2a:90:f1:5d:da:1f:87:2f:c1:fb:
                    42:03:4c:2a:5a:3f:42:60:4e:22:82:cf:5c:b2:44:
                    fe:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8B:C9:10:DD:C5:88:7F:77:40:61:51:9A:38:83:D8:C5:7D:FA:36
            X509v3 Authority Key Identifier:
                keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/YYvJEN3FiH93QGFRmjiD2MV9-jY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:196:ed5d:8c28/128
                  2001:67c:64:ffff:0:196:f1a8:474b/128

    Signature Algorithm: sha256WithRSAEncryption
         5c:64:47:f4:82:93:59:ff:f9:cb:9b:12:12:f6:e6:8a:07:cb:
         cd:aa:9b:37:25:c5:08:89:0c:50:76:b6:9c:e2:14:57:7e:67:
         5e:17:c7:55:81:f5:19:77:29:91:e5:37:b1:81:92:63:da:80:
         3b:8b:fd:b1:35:de:03:90:06:cf:ff:90:fb:9c:f1:1e:90:44:
         26:c6:0e:33:2f:d8:df:87:76:84:74:f0:e0:f7:7a:71:a3:d5:
         39:6f:7b:bc:cd:f5:41:b4:36:2b:8c:8c:ff:f7:57:10:d6:f0:
         10:ea:00:6f:5a:ae:ec:94:1b:f0:fb:2c:40:cb:83:16:9d:71:
         8c:14:8c:58:5b:d1:94:02:f7:f3:78:0c:26:79:00:68:2f:f8:
         59:05:6f:4c:79:cb:2f:c5:d3:95:7e:dc:18:9d:41:93:92:ac:
         04:2a:e1:60:c9:d4:a8:c6:6b:c5:9f:1a:bb:b8:5c:c5:0b:ed:
         dc:17:2a:ba:70:80:d1:a6:60:66:4e:5f:7f:9e:20:50:c7:2f:
         79:69:a5:2b:a5:18:70:b5:fa:7a:00:81:50:46:1a:d6:70:36:
         f8:50:1b:de:21:8c:eb:18:4a:0f:ef:77:bb:2d:b0:0b:9b:00:
         e5:5a:11:29:8a:5a:a2:3c:8c:39:b0:78:1c:8c:2e:54:cc:38:
         9b:1d:17:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 23:12:13 2025 by rpki-client