This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-3uz1cCfeMafD0IENq2YxF05Dh8.roa
File:                     1-3uz1cCfeMafD0IENq2YxF05Dh8.roa (raw, json)
Hash identifier:          bZHi9YnF4jUMFDtV5FmzG/F6vG5K6VpQ4T9NphFSlM8=
Subject key identifier:   FB:7B:B3:D5:C0:9F:78:C6:9F:0F:42:04:36:AD:98:C4:5D:39:0E:1F
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018869FDDDE93E04D0C9032980B443E48855
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-3uz1cCfeMafD0IENq2YxF05Dh8.roa
Signing time:             Tue 30 May 2023 00:10:25 +0000
ROA not before:           Tue 30 May 2023 00:10:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:69:fd:dd:e9:3e:04:d0:c9:03:29:80:b4:43:e4:88:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 30 00:10:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fb7bb3d5c09f78c69f0f420436ad98c45d390e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1c:18:ca:a5:d2:61:00:53:ab:03:33:25:51:
                    14:cc:78:59:44:01:3a:ac:92:15:ad:63:0b:d3:eb:
                    29:40:c1:0b:66:d8:e6:9b:7f:b3:d5:15:e7:f1:58:
                    d9:5e:84:5e:e8:8e:8e:38:d8:28:53:13:cb:e0:bd:
                    5e:bb:dd:a0:43:77:e5:aa:cd:58:80:c0:4c:4e:bc:
                    28:ba:1b:e1:3c:28:a7:b3:5f:51:fb:f0:ae:67:8d:
                    3e:db:13:d7:b6:c4:8a:ee:0e:6c:d3:bd:a4:6d:6b:
                    a0:ae:35:ec:22:b3:2c:95:da:08:d0:55:e9:5b:ba:
                    fa:13:83:7e:09:78:5d:12:87:2e:31:4a:4c:d2:ec:
                    36:90:e3:32:a0:27:71:44:91:84:8c:20:02:a1:d0:
                    95:98:8e:98:28:ad:01:fb:27:58:26:e1:c6:d2:8c:
                    2c:6b:4a:a5:24:b4:c3:36:6d:67:99:76:02:2c:55:
                    fe:25:48:37:0c:2f:80:da:4e:3e:11:9b:61:d8:60:
                    47:41:31:6d:8f:2b:9a:9b:2e:ad:09:8e:11:3c:76:
                    c0:4f:a8:fe:68:9f:49:76:ca:74:c1:48:e3:65:8c:
                    e1:12:a5:b9:f2:3e:87:33:dd:d6:80:8b:e5:00:44:
                    0b:94:57:0a:ac:34:ce:5b:db:86:eb:cc:8e:ea:0f:
                    8d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7B:B3:D5:C0:9F:78:C6:9F:0F:42:04:36:AD:98:C4:5D:39:0E:1F
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-3uz1cCfeMafD0IENq2YxF05Dh8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:9b:05:b7:da:24:e7:62:f5:ea:30:d2:f3:66:c0:df:fc:c4:
         07:64:75:3f:73:ad:31:fe:57:ea:87:a6:ed:58:1c:25:5e:51:
         e4:44:bc:4f:dd:c4:5c:ee:b7:43:f0:e1:6a:c0:98:d6:2d:d9:
         8e:10:5b:ce:9c:ab:32:a8:7a:3b:1d:86:1f:c7:68:5c:0b:af:
         ad:50:c7:84:70:69:9f:6d:6f:8d:f1:87:2a:0f:bc:24:c2:b5:
         aa:7b:e8:fd:15:a9:a7:95:aa:3d:b4:e8:48:b8:d1:9e:2b:de:
         aa:ba:cb:9e:ff:b9:36:ec:22:b0:65:c7:bc:0d:f9:7c:b1:fa:
         5e:33:03:06:12:d9:2e:ed:d1:76:c1:5d:85:db:ae:04:e4:f4:
         45:01:00:f4:8d:33:10:a3:ca:bb:17:44:4f:7d:14:e6:57:7c:
         49:3e:94:ee:82:28:3b:d8:ac:af:8a:f4:6e:43:b3:6a:b7:f3:
         f8:26:12:b1:4c:8d:9d:4f:10:6a:04:0c:3c:5f:66:07:e2:85:
         4a:8b:39:f1:0d:43:4e:6c:db:77:42:7e:20:79:e3:c4:a3:54:
         7e:96:11:ad:c1:c7:e8:da:5d:85:74:96:23:48:d8:a2:d6:f9:
         a5:ab:d4:03:27:1a:2b:36:a4:e5:07:30:d0:df:ba:b2:1c:fd:
         47:d0:d7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:14:14 2025 by rpki-client