This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/uQDmavpzDb3oBeyolHFdH9TlNQE.roa
File:                     uQDmavpzDb3oBeyolHFdH9TlNQE.roa (raw, json)
Hash identifier:          fEJKqanFzf59BsY+6lQ8ELqXxaPEdNYFlF9+fOZq1+w=
Subject key identifier:   B9:00:E6:6A:FA:73:0D:BD:E8:05:EC:A8:94:71:5D:1F:D4:E5:35:01
Certificate issuer:       /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial:       019AE3A206F27F86341D09DDCD7E81939552
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/uQDmavpzDb3oBeyolHFdH9TlNQE.roa
Signing time:             Wed 03 Dec 2025 09:53:57 +0000
ROA not before:           Wed 03 Dec 2025 09:53:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8400
IP address blocks:        62.108.96.0/19 maxlen: 24
                          62.193.128.0/19 maxlen: 24
                          91.148.64.0/18 maxlen: 24
                          178.20.205.0/24 maxlen: 24
                          185.47.208.0/22 maxlen: 24
                          194.106.160.0/19 maxlen: 24
                          195.252.64.0/18 maxlen: 24
                          213.244.228.0/22 maxlen: 24
                          213.244.232.0/21 maxlen: 24
                          217.26.64.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e3:a2:06:f2:7f:86:34:1d:09:dd:cd:7e:81:93:95:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
        Validity
            Not Before: Dec  3 09:53:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b900e66afa730dbde805eca894715d1fd4e53501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b0:b2:5f:04:83:96:87:8e:4c:f8:cf:d3:92:
                    34:9b:89:ea:8d:fc:55:71:6a:8a:ac:b2:2d:d8:6f:
                    ff:41:ae:db:ef:12:41:7d:55:7c:31:ef:a8:2d:de:
                    31:bb:68:71:af:9a:6c:a4:98:af:a1:40:a1:0e:cd:
                    15:e9:1c:e1:08:df:27:db:0d:98:7e:06:63:65:0b:
                    cf:40:23:2b:1b:56:6b:d3:f8:ee:be:a6:65:fc:1a:
                    ce:92:4e:7c:0a:df:94:a7:a3:80:aa:1a:62:33:bf:
                    8a:8b:85:14:ff:71:48:3c:57:e5:58:89:72:04:b9:
                    75:b1:a0:c9:95:f1:00:02:2e:35:44:74:e5:b5:b2:
                    56:4c:a4:23:d4:c3:b1:b3:f7:28:3f:f5:bf:4d:51:
                    d8:30:21:69:cb:5e:2f:5a:76:56:ce:72:3a:8c:a8:
                    e5:55:59:38:6c:30:ad:a2:48:54:3a:03:c0:86:e1:
                    8a:d5:be:32:70:68:63:56:55:a5:bf:2b:e0:da:93:
                    15:a2:ef:3d:e9:27:50:62:83:fb:d7:3e:99:46:b9:
                    09:48:e8:4f:57:bf:19:e1:31:5e:44:e9:c6:4e:43:
                    c1:25:06:68:3a:bc:71:4f:1e:56:15:b0:15:a0:c8:
                    1c:75:32:fc:2a:b5:be:cb:86:f5:a3:f9:87:bd:ce:
                    b4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:00:E6:6A:FA:73:0D:BD:E8:05:EC:A8:94:71:5D:1F:D4:E5:35:01
            X509v3 Authority Key Identifier:
                keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/uQDmavpzDb3oBeyolHFdH9TlNQE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.108.96.0/19
                  62.193.128.0/19
                  91.148.64.0/18
                  178.20.205.0/24
                  185.47.208.0/22
                  194.106.160.0/19
                  195.252.64.0/18
                  213.244.228.0-213.244.239.255
                  217.26.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:bd:1f:29:0c:3b:cd:79:f7:4f:3a:13:a2:dc:c7:7e:3d:d9:
         e4:3f:2d:b6:24:d8:dc:23:6f:3a:c4:5e:d3:ef:a5:65:06:2c:
         cc:35:9f:56:12:93:3c:a2:0f:d0:49:19:3d:52:fe:b1:8a:ef:
         f0:b3:84:9f:95:f8:45:ca:8f:ba:c1:0e:a4:0a:b4:dc:09:02:
         96:92:40:fa:21:7d:bd:20:e5:56:f8:07:02:ba:79:e3:be:1f:
         c2:da:5a:78:b4:77:59:52:d1:70:8d:54:e3:fa:b4:45:01:aa:
         fa:a0:e6:84:01:a1:bb:66:bb:74:b5:bc:d5:2f:6a:65:8f:48:
         8e:a8:c0:c9:84:bc:41:82:ac:f6:17:64:39:bf:7c:fd:82:47:
         e9:e8:34:86:f2:72:0e:86:e1:0a:e9:4c:26:d6:fe:60:e8:89:
         c5:56:69:67:4d:40:11:66:3a:c5:a7:00:bf:63:2c:ac:d2:1f:
         03:d0:bb:6e:b6:cf:0b:ec:92:69:5e:cb:f6:77:8d:34:d4:76:
         54:df:b8:fa:21:cb:10:e9:9c:0a:1b:f2:70:c0:c9:4d:dd:07:
         ac:79:da:eb:f8:84:fb:d0:ba:a8:e3:b7:ac:6d:df:82:e9:72:
         f6:42:20:48:b7:cb:ee:39:f6:eb:e6:c1:ce:ef:aa:a0:1c:7b:
         af:c2:c7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:30:15 2025 by rpki-client