This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/e36ls1EV8sd5CmyYeo_QGtD5vCI.roa
File:                     e36ls1EV8sd5CmyYeo_QGtD5vCI.roa (raw, json)
Hash identifier:          3YuB9MrJDvPzD6iHKvuhGIuEuL7gbcrk7UvTg1oKjSQ=
Subject key identifier:   7B:7E:A5:B3:51:15:F2:C7:79:0A:6C:98:7A:8F:D0:1A:D0:F9:BC:22
Certificate issuer:       /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial:       018AF6B751767DFC09B16B0A18F8CB8030A6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/e36ls1EV8sd5CmyYeo_QGtD5vCI.roa
Signing time:             Tue 03 Oct 2023 18:05:23 +0000
ROA not before:           Tue 03 Oct 2023 18:05:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:f6b6:6af3/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f6:b7:51:76:7d:fc:09:b1:6b:0a:18:f8:cb:80:30:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
        Validity
            Not Before: Oct  3 18:05:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7b7ea5b35115f2c7790a6c987a8fd01ad0f9bc22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:45:4d:5f:fd:58:5a:ca:38:aa:52:6f:ea:77:
                    89:ca:99:8b:fd:9c:d3:6d:34:86:8a:e0:35:e9:96:
                    be:ec:e1:d5:4b:2a:2d:4c:ba:0c:ee:c6:ec:cc:00:
                    f6:f5:0e:97:72:f1:58:28:a9:35:79:2e:05:03:c6:
                    86:b1:3f:b3:66:8c:c5:2a:c8:0a:d6:5b:4e:0f:33:
                    51:fb:43:4f:34:39:4e:e0:03:83:01:4d:d5:e3:a1:
                    ca:24:10:36:c3:03:e3:c7:06:67:48:77:4b:f5:02:
                    ff:5f:27:ef:42:3b:33:9a:3a:f8:d4:00:0c:93:43:
                    fc:d2:6a:0c:f5:b3:15:e0:d0:f0:86:bf:1b:de:55:
                    b9:89:d9:e8:30:aa:ff:41:85:9f:a8:83:22:06:de:
                    85:ef:22:ed:33:25:f0:94:9d:02:bd:49:e9:e0:9b:
                    57:99:e9:0f:9e:08:ce:ea:f2:82:83:54:1b:17:a6:
                    29:a4:4d:78:ee:02:52:60:df:bd:05:91:93:8e:8a:
                    43:b4:ee:50:ce:9f:77:53:82:4e:37:4f:08:26:03:
                    ab:93:9e:ed:ca:47:45:b1:be:e1:26:b9:6c:ee:ee:
                    14:42:d6:c3:11:6b:87:25:7d:c4:13:4d:1a:53:cc:
                    4c:80:9d:95:50:87:bb:11:95:a3:45:04:97:bd:8f:
                    34:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7E:A5:B3:51:15:F2:C7:79:0A:6C:98:7A:8F:D0:1A:D0:F9:BC:22
            X509v3 Authority Key Identifier:
                keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/e36ls1EV8sd5CmyYeo_QGtD5vCI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:30:18:b2:cf:bb:5c:83:02:44:e0:3b:c5:b2:8e:c1:fb:4c:
         33:1e:b7:6c:b9:47:2b:72:70:a2:e5:3f:51:00:3e:34:80:d5:
         07:e0:b2:f6:2d:36:41:d9:a9:c3:bf:21:0e:82:cf:30:76:e5:
         98:13:9b:4e:e6:e5:7e:b2:8b:64:03:ba:fc:72:9a:80:1d:25:
         84:de:7b:88:f6:9a:6f:82:5b:2f:bb:8d:a9:37:55:df:e1:92:
         60:18:1e:90:f6:51:38:e1:37:c4:4e:57:dc:b4:a0:57:f2:86:
         8d:14:4e:5f:d9:92:f1:c0:37:c9:c3:c1:8a:a3:3d:6e:27:48:
         66:17:50:8c:85:2e:3d:65:25:0c:8b:69:5a:1b:ec:ea:c4:b5:
         8e:c0:8d:89:ff:4e:9e:cd:f8:3e:d8:fe:ec:cf:40:a6:df:fa:
         f5:4b:18:8b:9b:3d:f6:ae:06:b3:e5:59:84:0c:5b:4f:fb:31:
         15:2b:1c:e9:12:73:52:87:7b:eb:62:71:24:58:55:80:ca:24:
         d1:50:fa:17:fc:51:83:79:ae:39:a2:94:ca:a7:46:fb:a7:dd:
         02:33:cd:93:48:06:c7:e6:c5:d2:1b:4c:e2:da:4e:9d:34:0d:
         d1:78:ae:77:e7:65:bf:1d:66:b4:12:f0:90:15:36:df:d2:0e:
         e8:f8:94:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 10:19:45 2025 by rpki-client