This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0xcnmOlFO2yVNFj4IUrzETLWQyg.roa
File:                     0xcnmOlFO2yVNFj4IUrzETLWQyg.roa (raw, json)
Hash identifier:          ZztNfzHzlI3WKuqsRFUBqUQqeUgE+2L8dBfopdv15Kc=
Subject key identifier:   D3:17:27:98:E9:45:3B:6C:95:34:58:F8:21:4A:F3:11:32:D6:43:28
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0188198818A874479CF367655FE1FE565C1C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0xcnmOlFO2yVNFj4IUrzETLWQyg.roa
Signing time:             Sun 14 May 2023 09:12:09 +0000
ROA not before:           Sun 14 May 2023 09:12:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:19:88:18:a8:74:47:9c:f3:67:65:5f:e1:fe:56:5c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 14 09:12:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d3172798e9453b6c953458f8214af31132d64328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4a:f2:71:6b:70:8f:04:a2:3d:49:b6:ce:15:
                    fc:cb:f1:aa:9f:e3:37:1e:cb:54:db:95:4c:5f:0f:
                    a9:52:53:ec:d3:0d:5a:10:7b:e5:58:dd:29:88:a6:
                    cf:d1:a5:28:77:bb:51:8a:56:3d:6f:42:cc:e8:d7:
                    a5:22:8a:8e:09:05:4b:75:f7:a3:77:9b:b9:07:6e:
                    f0:d6:0f:59:40:45:92:f7:68:ab:c3:c2:41:98:9d:
                    63:86:9e:7d:a9:8f:37:8f:51:31:ca:0f:23:5b:48:
                    3a:44:f7:cb:89:2f:fb:10:9d:a9:42:33:ea:01:d8:
                    f7:b2:90:70:6f:d2:58:33:4e:83:d1:19:51:91:37:
                    65:5b:4b:f9:2e:83:cf:46:97:36:5d:39:4c:df:1f:
                    3b:17:47:3a:c2:c0:02:67:27:68:ad:78:33:34:53:
                    b3:a9:19:8a:b8:5e:3b:2d:7b:3e:d2:5a:2b:08:6a:
                    5c:38:35:53:00:9c:e8:c9:f6:74:e3:e4:ab:4f:03:
                    93:cd:34:16:a5:cc:d4:e2:fe:4c:59:28:3d:b8:9b:
                    a5:3c:8f:02:45:84:38:7f:4d:00:de:24:4d:78:81:
                    eb:41:56:ed:66:09:a1:c8:20:70:ab:b2:1a:ba:1f:
                    0b:76:90:4c:81:10:6c:53:c1:ca:b5:e2:6d:01:e8:
                    20:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:17:27:98:E9:45:3B:6C:95:34:58:F8:21:4A:F3:11:32:D6:43:28
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0xcnmOlFO2yVNFj4IUrzETLWQyg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:b1:95:4e:f8:cb:e8:dd:02:92:53:51:e8:14:0d:29:da:64:
         67:0f:eb:47:6a:24:bf:fd:33:d2:53:f0:f4:24:10:71:f0:29:
         e3:fd:f6:e0:2c:a7:3c:47:c8:ca:50:fa:8d:bd:27:c0:19:5e:
         4c:d4:0c:5f:35:57:f4:1b:5b:0f:7a:89:e4:cb:cc:f6:35:af:
         59:f0:69:cc:86:70:b0:29:3d:1b:5b:20:ea:cc:5d:54:89:d9:
         de:21:9a:26:fd:d9:de:05:14:9f:28:d9:ea:aa:18:f8:2f:b4:
         a1:8e:8c:2e:e8:17:11:04:3b:9e:83:3a:f5:9d:c7:9c:26:cb:
         b8:2b:71:7e:d3:88:e3:21:aa:d0:6a:d0:e3:e4:53:61:23:b1:
         0c:1c:fe:bf:44:19:97:3a:9c:88:48:d2:2a:af:a8:35:2b:e8:
         7b:ec:83:f5:ad:a7:42:80:d1:77:b5:f2:b5:49:fd:73:d6:97:
         b2:a9:d3:7e:b9:7c:7d:5d:2d:ce:54:76:fb:ea:b1:c0:b7:ff:
         02:04:7c:47:ea:88:29:36:67:0d:6f:5a:d6:b5:51:d9:7b:1e:
         99:25:9b:fd:10:9b:01:9d:0a:0d:6d:ff:15:08:26:81:e3:e0:
         01:dc:4d:31:86:31:9b:95:e0:01:76:74:8c:7b:f6:cf:27:11:
         df:23:4d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:48:46 2025 by rpki-client