This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/iGNSD7p51f3XYStvVK-qYYoyETA.roa
File:                     iGNSD7p51f3XYStvVK-qYYoyETA.roa (raw, json)
Hash identifier:          waZVvj3cWD7o2WOARyuskpdxMpygUCfaGyqMFJdANdQ=
Subject key identifier:   88:63:52:0F:BA:79:D5:FD:D7:61:2B:6F:54:AF:AA:61:8A:32:11:30
Certificate issuer:       /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial:       019754CAABB3522814DDDFE51DAB8E8C7489
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/iGNSD7p51f3XYStvVK-qYYoyETA.roa
Signing time:             Mon 09 Jun 2025 13:04:17 +0000
ROA not before:           Mon 09 Jun 2025 13:04:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
                          2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
                          2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
                          2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
                          2001:67c:64:ffff:0:197:54ca:9179/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:ca:ab:b3:52:28:14:dd:df:e5:1d:ab:8e:8c:74:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
        Validity
            Not Before: Jun  9 13:04:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8863520fba79d5fdd7612b6f54afaa618a321130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a6:f8:48:bf:0f:34:04:e2:52:b7:d7:1f:5f:
                    9a:d4:e1:3f:f3:c8:43:33:af:65:02:64:a0:00:a2:
                    d5:84:67:31:0b:d2:31:66:58:bd:93:47:01:e1:76:
                    62:fd:7f:54:3c:65:15:fc:42:e0:97:81:71:9a:aa:
                    d4:ff:63:1b:60:f4:c2:6b:bf:4a:7c:83:c5:90:b3:
                    9b:aa:82:b4:1a:db:c0:c2:b5:b7:52:e8:fd:60:f8:
                    4e:a0:c7:25:aa:1a:93:6a:46:4c:2c:23:98:51:83:
                    0d:ca:c6:94:c9:11:c3:13:0b:88:e7:97:ab:d9:10:
                    a9:3a:4e:e5:96:8f:4e:de:03:65:78:10:14:54:8f:
                    fd:d5:b9:f0:4d:97:45:de:50:e4:1b:31:67:49:c6:
                    51:ca:c8:57:f5:39:05:d7:a8:a2:40:7e:a1:96:6f:
                    b4:c2:78:a4:86:88:77:83:12:cb:3a:4f:39:98:df:
                    b0:6a:de:b6:f1:8e:af:e6:03:96:ce:e4:a8:fa:63:
                    42:77:33:3c:fd:f8:b3:7a:b8:15:28:1c:97:fd:3a:
                    92:58:69:00:b0:49:68:2d:dd:c6:44:2e:c1:b5:35:
                    19:51:6e:7b:4e:c8:2b:3a:06:e8:1d:2d:6a:ba:dd:
                    d4:90:d2:0d:15:ec:d3:2a:41:8c:a0:29:37:13:2e:
                    01:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:63:52:0F:BA:79:D5:FD:D7:61:2B:6F:54:AF:AA:61:8A:32:11:30
            X509v3 Authority Key Identifier:
                keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/iGNSD7p51f3XYStvVK-qYYoyETA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:196:ed5d:8c28/128
                  2001:67c:64:ffff:0:197:108e:927e/128
                  2001:67c:64:ffff:0:197:15eb:6226/128
                  2001:67c:64:ffff:0:197:353f:be91/128
                  2001:67c:64:ffff:0:197:54ca:9179/128

    Signature Algorithm: sha256WithRSAEncryption
         13:28:90:6d:4f:3e:4d:d0:9c:dc:6a:5c:c9:bf:c2:af:08:aa:
         06:97:1b:0a:e7:92:4f:d7:34:e3:36:22:d0:cf:cd:cc:75:f3:
         a3:b2:3c:31:36:bb:a9:94:55:81:29:57:27:cc:79:61:96:65:
         aa:8e:7a:03:c0:19:51:d1:3b:13:af:ae:95:a0:a2:cb:37:fa:
         d7:ea:59:63:59:86:c8:a4:72:96:54:a4:5f:88:22:5a:3b:b1:
         e5:93:25:32:a2:10:8b:05:36:c9:b2:ed:66:ed:60:56:db:60:
         a9:a9:b2:4d:71:1e:ee:9f:d4:b0:b7:f2:80:db:19:a0:6c:75:
         a7:fa:5a:86:fc:bc:75:c9:83:b2:d2:3d:c9:7b:02:82:b0:60:
         1a:2d:01:10:31:86:3f:d7:62:c4:26:62:29:61:1a:22:96:8b:
         32:a0:99:1d:67:7c:77:8d:87:2c:79:b2:cd:1c:f8:1a:d2:83:
         a9:94:0a:6d:64:5c:35:01:16:36:5b:a1:17:54:61:44:cd:84:
         ac:a1:92:92:7c:4f:f1:0d:40:78:10:8a:77:7c:5e:0b:07:86:
         0e:70:ac:8f:d9:b3:d9:f2:e8:0b:d4:c1:2a:85:0d:9a:ce:2b:
         6d:91:39:ba:df:0c:7a:f8:4d:37:f9:53:96:93:1b:c1:ae:9c:
         34:9c:96:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:59:31 2025 by rpki-client