This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/l9l4HDCFPpBBz7A4tIcE2v7EJAo.roa
File:                     l9l4HDCFPpBBz7A4tIcE2v7EJAo.roa (raw, json)
Hash identifier:          r01Jvma9tByEXSDH9Xqkw4ab0NExhxA4UlIuCcU9e1A=
Subject key identifier:   97:D9:78:1C:30:85:3E:90:41:CF:B0:38:B4:87:04:DA:FE:C4:24:0A
Certificate issuer:       /CN=dd189621d2fa872166e6a05ee47a7d756243e919
Certificate serial:       019ADEBD704FD176242A694B6C478F092AEA
Authority key identifier: DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/l9l4HDCFPpBBz7A4tIcE2v7EJAo.roa
Signing time:             Tue 02 Dec 2025 11:05:48 +0000
ROA not before:           Tue 02 Dec 2025 11:05:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15751
IP address blocks:        185.51.72.0/22 maxlen: 23
                          212.129.64.0/24 maxlen: 24
                          212.129.66.0/23 maxlen: 23
                          212.129.68.0/22 maxlen: 22
                          212.129.72.0/21 maxlen: 21
                          212.129.80.0/20 maxlen: 20
                          2a01:b340::/29 maxlen: 32
                          2a01:b340::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:de:bd:70:4f:d1:76:24:2a:69:4b:6c:47:8f:09:2a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd189621d2fa872166e6a05ee47a7d756243e919
        Validity
            Not Before: Dec  2 11:05:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=97d9781c30853e9041cfb038b48704dafec4240a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:e2:99:ef:1c:56:68:6e:3f:94:70:4e:f1:
                    3a:6a:ca:e4:3f:a6:2e:23:eb:11:cc:82:2b:c5:84:
                    5e:24:21:2b:67:79:d9:9f:b9:90:64:3b:db:c5:64:
                    ec:fd:af:3c:cc:7b:a8:9d:8e:ee:9a:af:44:d8:54:
                    7b:b6:2f:fa:56:77:26:3c:9c:cb:b7:43:74:04:75:
                    06:92:e7:67:5e:b9:c6:52:9d:45:40:4b:2a:83:aa:
                    60:2f:23:45:46:4a:48:f0:24:24:17:fc:55:3f:f9:
                    55:b0:2a:3d:04:d4:a1:45:92:e6:68:ec:d0:6f:b6:
                    7b:fa:ca:ec:ae:85:b9:e6:ae:99:72:27:a7:5e:9c:
                    4d:42:2c:67:fb:a5:03:40:f7:79:97:1f:50:ca:f8:
                    e4:2c:69:07:b6:3d:5d:90:22:57:43:12:53:d8:7a:
                    46:41:a0:f3:e5:c8:f1:9c:00:41:d6:04:07:35:14:
                    9c:83:13:02:02:e8:7b:e6:fd:d2:09:53:f7:e0:c7:
                    ca:b8:99:9e:40:51:49:51:36:6d:05:50:23:94:82:
                    42:ed:3b:78:3c:e3:dc:70:30:2b:87:72:e9:8d:19:
                    8b:9d:c4:af:ca:d0:1a:33:f6:db:c6:6e:33:77:3b:
                    72:80:37:0c:26:5c:f2:7e:2d:d4:c3:ab:d9:14:30:
                    32:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D9:78:1C:30:85:3E:90:41:CF:B0:38:B4:87:04:DA:FE:C4:24:0A
            X509v3 Authority Key Identifier:
                keyid:DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/l9l4HDCFPpBBz7A4tIcE2v7EJAo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.51.72.0/22
                  212.129.64.0/24
                  212.129.66.0-212.129.95.255
                IPv6:
                  2a01:b340::/29

    Signature Algorithm: sha256WithRSAEncryption
         72:04:bb:be:98:10:7f:fb:65:aa:ae:2a:1b:a4:db:5f:b8:3f:
         4f:bd:1e:d5:9d:ac:d4:dd:3f:8c:9b:3a:f7:fa:df:73:51:1c:
         41:e3:b1:7c:ae:0c:f9:f1:56:19:db:11:86:e1:3c:4d:a7:1a:
         af:a6:c7:c7:a0:17:df:0e:61:6f:19:d8:84:2d:35:86:9a:11:
         e6:c8:5b:bc:e4:44:40:6c:9a:19:e9:44:1d:72:b3:85:1e:dd:
         d0:62:7e:33:a7:98:e9:94:3e:c2:d5:a5:fc:15:92:36:c9:82:
         b2:e3:a4:ab:89:4a:1e:d8:59:a7:2f:79:56:45:23:51:0d:71:
         31:54:ec:39:c5:29:ae:6c:bd:92:7f:81:98:2e:bb:55:47:52:
         b0:18:6b:84:a3:55:50:02:1e:af:42:7d:2b:05:89:70:c2:18:
         5b:9c:ee:f6:a3:aa:4e:3c:93:e7:00:30:c0:84:59:89:3c:fd:
         18:2d:05:a7:73:9c:e3:4b:ce:3c:d4:31:67:38:6e:80:3e:e7:
         e3:51:41:7d:d7:70:52:f3:11:c4:4e:de:90:5c:f7:52:d5:2a:
         4c:b2:0c:24:d5:6d:91:68:81:2e:71:c8:04:01:48:30:1b:55:
         bc:24:5c:e2:eb:d6:80:13:44:9c:0c:84:94:81:96:27:40:e1:
         3a:5b:c3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:17:06 2025 by rpki-client