This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/HWmtxp7zG7eaAfxfuczgTcxXvXU.roa
File:                     HWmtxp7zG7eaAfxfuczgTcxXvXU.roa (raw, json)
Hash identifier:          UuI/hk3ZDVARWlBvrhn8CTTMflzACbNXvtNsX2CqgRQ=
Subject key identifier:   1D:69:AD:C6:9E:F3:1B:B7:9A:01:FC:5F:B9:CC:E0:4D:CC:57:BD:75
Certificate issuer:       /CN=905deafea3bad9248217b1629e42cffc7e491bd9
Certificate serial:       019A9282CFDE9F8D2717DAB59DFCBEDEB717
Authority key identifier: 90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/HWmtxp7zG7eaAfxfuczgTcxXvXU.roa
Signing time:             Mon 17 Nov 2025 15:50:37 +0000
ROA not before:           Mon 17 Nov 2025 15:50:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     211481
IP address blocks:        45.92.68.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:92:82:cf:de:9f:8d:27:17:da:b5:9d:fc:be:de:b7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905deafea3bad9248217b1629e42cffc7e491bd9
        Validity
            Not Before: Nov 17 15:50:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1d69adc69ef31bb79a01fc5fb9cce04dcc57bd75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3a:43:f1:62:27:f6:16:00:79:f2:8b:69:4b:
                    02:6d:ae:89:e0:3f:cc:56:a1:c7:53:44:47:7d:2c:
                    d0:0a:7f:3b:f2:60:e7:b4:78:1e:48:43:00:14:cd:
                    9c:7f:0b:6c:4a:16:85:3b:c2:2f:39:ec:d0:bb:cd:
                    be:94:01:7d:3c:f9:d9:bc:93:79:6c:c9:ea:e5:c5:
                    ad:d3:61:4b:8f:8c:35:75:92:de:a3:a0:9b:ac:af:
                    d9:23:36:73:ab:85:fa:b0:29:d4:b4:92:c8:60:ca:
                    f1:e3:a9:bc:43:60:34:c5:80:3b:c9:67:6c:50:16:
                    c1:3f:d7:95:e8:97:9b:dc:3d:fd:a0:1b:a7:0b:af:
                    4c:fd:dd:cc:b9:01:b4:07:e7:ee:b3:c2:75:32:44:
                    12:c0:4d:0c:d6:c8:60:67:b8:e7:4e:5d:08:c6:f9:
                    d7:b1:7f:fd:1b:25:f5:8e:06:36:12:36:d0:90:b8:
                    38:25:05:d7:e0:b7:3b:90:3f:ca:52:0a:fa:f2:3b:
                    75:92:5e:34:67:cf:c6:99:92:88:74:81:78:bb:d9:
                    e4:1d:b9:b3:e4:79:b7:c1:31:e7:30:36:67:c5:e2:
                    e8:d5:b1:13:9f:75:99:88:0d:1f:49:12:01:ab:60:
                    27:cb:82:8e:da:b7:31:28:d9:25:31:7e:34:1f:67:
                    e7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:69:AD:C6:9E:F3:1B:B7:9A:01:FC:5F:B9:CC:E0:4D:CC:57:BD:75
            X509v3 Authority Key Identifier:
                keyid:90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/HWmtxp7zG7eaAfxfuczgTcxXvXU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:dd:54:0b:d4:eb:59:44:51:ba:a1:9f:b6:84:d3:77:23:75:
         46:ec:20:25:57:f3:88:11:d0:5c:65:eb:2c:10:9c:f6:19:44:
         ac:a9:88:54:f5:eb:55:39:29:14:b1:80:72:34:66:b6:4a:8b:
         bc:35:dc:08:23:cb:3f:9e:ca:88:9b:d9:c9:49:12:4f:9b:77:
         af:f8:a3:21:5b:ec:2a:36:22:14:32:c9:0d:60:03:0f:70:ed:
         6e:f3:32:0a:0c:c1:9e:40:af:24:45:56:19:3f:e4:42:ac:e6:
         4c:09:68:dc:02:a3:2b:ef:92:46:7b:65:5e:c8:e6:33:85:b8:
         86:ff:3c:f2:f4:70:11:86:63:cf:be:5a:e0:a7:e2:d3:04:85:
         64:ef:cd:ee:f0:b3:e0:d8:ac:c0:82:9b:84:69:a0:3f:84:3c:
         86:ac:35:d5:09:c3:5f:11:eb:d7:b4:07:f1:66:5a:7c:67:b5:
         86:af:5f:76:a4:67:ce:86:d8:ff:4b:31:dc:d4:15:c6:55:ff:
         df:55:30:0c:12:d4:84:64:06:b6:e0:7a:82:b5:df:f7:0f:4f:
         b7:62:a7:71:4d:67:0b:d8:df:ba:36:42:46:9e:39:c6:0e:93:
         87:e4:a1:12:46:35:12:d2:92:37:6b:83:f8:4b:2a:6c:e1:6e:
         67:66:9f:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZqSgs/en40nF9q1nfy+3rcXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNWRlYWZlYTNiYWQ5MjQ4MjE3YjE2MjllNDJjZmZjN2U0
OTFiZDkwHhcNMjUxMTE3MTU1MDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDY5YWRjNjllZjMxYmI3OWEwMWZjNWZiOWNjZTA0ZGNjNTdiZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzpD8WIn9hYAefKLaUsCba6J4D/M
VqHHU0RHfSzQCn878mDntHgeSEMAFM2cfwtsShaFO8IvOezQu82+lAF9PPnZvJN5
bMnq5cWt02FLj4w1dZLeo6CbrK/ZIzZzq4X6sCnUtJLIYMrx46m8Q2A0xYA7yWds
UBbBP9eV6Jeb3D39oBunC69M/d3MuQG0B+fus8J1MkQSwE0M1shgZ7jnTl0IxvnX
sX/9GyX1jgY2EjbQkLg4JQXX4Lc7kD/KUgr68jt1kl40Z8/GmZKIdIF4u9nkHbmz
5Hm3wTHnMDZnxeLo1bETn3WZiA0fSRIBq2Any4KO2rcxKNklMX40H2fn0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB1prcae8xu3mgH8X7nM4E3MV711MB8GA1UdIwQY
MBaAFJBd6v6jutkkghexYp5Cz/x+SRvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0YzcV9xTzYyU1NDRjdGaW5rTFBfSDVKRzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi85YTBlZjctZGQzNC00NjcxLWJmNTEt
NWYyYzEwNTAzNzVkLzEvSFdtdHhwN3pHN2VhQWZ4ZnVjemdUY3hYdlhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi85YTBlZjctZGQzNC00NjcxLWJmNTEtNWYyYzEwNTAzNzVk
LzEva0YzcV9xTzYyU1NDRjdGaW5rTFBfSDVKRzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVxEMA0G
CSqGSIb3DQEBCwUAA4IBAQCt3VQL1OtZRFG6oZ+2hNN3I3VG7CAlV/OIEdBcZess
EJz2GUSsqYhU9etVOSkUsYByNGa2Sou8NdwII8s/nsqIm9nJSRJPm3ev+KMhW+wq
NiIUMskNYAMPcO1u8zIKDMGeQK8kRVYZP+RCrOZMCWjcAqMr75JGe2VeyOYzhbiG
/zzy9HARhmPPvlrgp+LTBIVk783u8LPg2KzAgpuEaaA/hDyGrDXVCcNfEevXtAfx
Zlp8Z7WGr192pGfOhtj/SzHc1BXGVf/fVTAMEtSEZAa24HqCtd/3D0+3YqdxTWcL
2N+6NkJGnjnGDpOH5KESRjUS0pI3a4P4Syps4W5nZp9k
-----END CERTIFICATE-----
Generated at Wed Dec 17 22:21:27 2025 by rpki-client