This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/38352e3131372e3232392e302f32342d3234203d3e20383334.roa
File:                     38352e3131372e3232392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          u4SYtAZbi541CMcOnP4uVSYrRQ2HcRThPIe7HQF4UN4=
Subject key identifier:   6A:5F:96:83:49:FB:5A:1C:4F:0A:46:AD:AE:8A:B1:CA:B3:67:3E:6C
Certificate issuer:       /CN=5871b653f352bf45ca47d3e6ef8b5980437fa96e
Certificate serial:       55BC69DB65CD6B083AE95503818D6E0A2239092D
Authority key identifier: 58:71:B6:53:F3:52:BF:45:CA:47:D3:E6:EF:8B:59:80:43:7F:A9:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WHG2U_NSv0XKR9Pm74tZgEN_qW4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/38352e3131372e3232392e302f32342d3234203d3e20383334.roa
Signing time:             Thu 09 Jan 2025 18:51:42 +0000
ROA not before:           Thu 09 Jan 2025 18:46:42 +0000
ROA not after:            Thu 08 Jan 2026 18:51:42 +0000
asID:                     834
IP address blocks:        85.117.229.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bc:69:db:65:cd:6b:08:3a:e9:55:03:81:8d:6e:0a:22:39:09:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5871b653f352bf45ca47d3e6ef8b5980437fa96e
        Validity
            Not Before: Jan  9 18:46:42 2025 GMT
            Not After : Jan  8 18:51:42 2026 GMT
        Subject: CN=6A5F968349FB5A1C4F0A46ADAE8AB1CAB3673E6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bc:b6:77:aa:91:bc:00:90:dd:aa:80:13:27:
                    df:b5:da:d1:3a:21:24:49:7d:f9:34:2b:18:c3:ef:
                    f8:a3:43:28:e1:c2:6d:2f:7f:92:11:aa:1c:14:ae:
                    b5:73:45:c3:3a:4a:56:e7:4e:ae:d8:fd:de:ba:06:
                    a8:8c:ae:ff:08:ee:38:99:99:6d:7d:28:31:64:4f:
                    ce:d2:83:92:32:f6:14:a5:bc:4a:96:45:ef:bd:5d:
                    ed:6b:62:ae:5a:4b:4d:5d:82:fc:1c:7f:8d:3a:0c:
                    a2:83:b2:78:15:9b:7a:4e:7b:f8:30:0e:ca:36:98:
                    3e:3c:66:46:37:37:0a:24:54:e7:10:e0:f7:c3:d2:
                    27:cf:f3:cd:cb:45:95:fc:79:05:f2:32:46:11:7d:
                    30:0e:36:2c:c5:f0:11:3e:d0:9f:ae:16:a0:a2:93:
                    69:42:3c:ae:49:8c:cc:dd:e5:ae:12:0d:4b:bf:af:
                    58:18:a8:ed:5f:26:c8:7d:0e:b3:93:46:bf:0f:cc:
                    0c:0b:3f:be:31:43:b3:af:1f:c1:9a:ef:56:9a:f0:
                    44:40:28:52:7b:43:7c:10:bf:fb:c6:23:56:30:dd:
                    ef:43:e1:dc:ec:c4:20:fe:9a:7e:02:a4:96:de:30:
                    61:ea:6a:7c:e7:5e:2c:98:90:95:62:b1:1e:c5:8f:
                    5f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5F:96:83:49:FB:5A:1C:4F:0A:46:AD:AE:8A:B1:CA:B3:67:3E:6C
            X509v3 Authority Key Identifier:
                keyid:58:71:B6:53:F3:52:BF:45:CA:47:D3:E6:EF:8B:59:80:43:7F:A9:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/5871B653F352BF45CA47D3E6EF8B5980437FA96E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHG2U_NSv0XKR9Pm74tZgEN_qW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/38352e3131372e3232392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.117.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:5a:d2:ed:e0:ed:70:61:86:21:e0:8d:ea:0f:c4:74:97:fd:
         be:da:72:84:bf:f2:24:50:92:cd:3b:9d:05:8d:c3:a0:95:5b:
         15:60:b4:06:c4:55:f4:4f:bf:51:81:68:60:5a:e8:59:97:c7:
         20:a5:ad:e4:ad:36:a7:ad:3e:30:0a:4c:a9:7b:b1:ce:49:ee:
         4b:79:60:2d:a1:88:a7:9a:2e:65:03:95:d9:e3:81:ee:f6:05:
         ac:97:6a:90:a7:1c:c6:94:cc:01:a6:80:68:69:2f:3e:6b:3b:
         48:f1:09:2e:71:bd:7b:a0:f9:bf:93:16:1a:cd:08:9d:d5:4d:
         db:7e:f2:c0:d1:33:d1:82:c0:4d:4d:d5:37:4f:8e:3a:72:df:
         6d:72:12:83:97:76:41:68:a5:31:60:44:44:15:4c:a9:4f:71:
         18:d7:8f:83:66:8d:77:98:40:56:51:3d:bf:9e:d1:c8:2d:77:
         9e:b3:2e:38:91:f7:d1:78:e1:f4:49:c1:53:84:cf:d0:b1:08:
         12:21:be:78:66:c6:9f:a1:85:f2:e0:48:e3:86:44:ef:9c:24:
         99:68:0e:2b:59:d8:58:97:19:8f:ce:27:ee:7e:e3:ec:87:ce:
         26:26:ac:01:16:41:f7:9e:1c:5b:98:b1:2c:6e:03:1b:90:02:
         9c:0a:22:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 11:11:20 2025 by rpki-client