This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-CFEv6L1LImz0MNyAXsVTu7vr94.roa
File:                     1-CFEv6L1LImz0MNyAXsVTu7vr94.roa (raw, json)
Hash identifier:          +dFveaj4rtpZn84FckijiGn83ZIhhc0SfOAYb5eVnAw=
Subject key identifier:   F8:21:44:BF:A2:F5:2C:89:B3:D0:C3:72:01:7B:15:4E:EE:EF:AF:DE
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0184120F22DA890193F2AB50EDBE49AA68DE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-CFEv6L1LImz0MNyAXsVTu7vr94.roa
Signing time:             Wed 26 Oct 2022 02:11:32 +0000
ROA not before:           Wed 26 Oct 2022 02:11:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:12:0f:22:da:89:01:93:f2:ab:50:ed:be:49:aa:68:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Oct 26 02:11:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f82144bfa2f52c89b3d0c372017b154eeeefafde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:55:27:16:20:c7:b0:f4:e4:a2:42:6d:1e:29:
                    57:e1:1e:3a:18:30:49:71:9c:18:97:32:c3:45:5f:
                    f2:bb:d9:10:b3:3f:60:73:ea:5b:d0:77:7a:99:97:
                    28:a1:25:bd:5f:bf:08:6b:22:9d:55:7f:cd:6a:f0:
                    88:88:64:a6:2a:e6:2f:b7:27:1a:d5:4e:77:63:80:
                    ce:05:87:b5:b1:67:72:12:e7:7a:bc:63:1d:62:86:
                    9c:37:16:6a:07:1e:d8:d6:ed:19:52:a8:31:ef:0a:
                    f5:0f:0d:58:6e:dc:e8:b1:4d:d6:58:a9:87:b5:d7:
                    d1:c4:a1:9a:3f:c2:98:06:12:b6:55:6f:32:2d:c5:
                    d2:de:69:ec:fd:c7:50:84:53:1e:1b:b9:47:b9:c2:
                    31:34:b9:ba:8e:70:29:76:66:d3:27:8e:be:68:21:
                    6c:36:22:cb:da:70:78:99:3c:78:e3:56:21:f9:71:
                    6f:f9:77:77:67:87:da:d9:2c:09:79:cd:e1:74:38:
                    84:bd:b8:b8:fb:61:75:9f:31:21:4b:1c:10:8b:30:
                    2a:3c:45:f8:5f:a1:18:b1:f6:6f:f0:00:a4:e1:14:
                    f5:b2:42:9c:06:c2:68:4c:61:31:56:79:f1:71:c4:
                    a2:39:c0:84:bf:fb:ee:92:e8:70:1d:f1:91:82:dd:
                    e6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:21:44:BF:A2:F5:2C:89:B3:D0:C3:72:01:7B:15:4E:EE:EF:AF:DE
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-CFEv6L1LImz0MNyAXsVTu7vr94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:eb:b8:4f:78:a1:ed:c6:f7:08:29:0d:0d:48:4f:28:64:a4:
         f0:b4:73:a7:a0:dc:36:42:07:82:71:e9:c2:61:bf:1b:b3:2f:
         c0:32:68:ba:5e:83:82:e5:63:41:4a:94:a2:52:6d:a6:10:0b:
         74:fa:a7:5c:93:de:8e:7c:39:47:30:ed:9c:7e:9b:63:1e:a0:
         2b:4d:1e:02:60:de:6f:39:de:2e:0a:d5:94:ae:d4:75:56:c7:
         88:f8:cf:5e:46:1a:76:04:83:b0:1e:2a:42:8a:a4:db:ec:c1:
         38:30:02:6f:52:51:5a:1f:22:3c:ca:ad:7d:9d:e9:3b:c6:0b:
         9b:25:3c:dc:ac:d8:57:49:bc:e9:ba:9a:65:63:73:d1:20:5d:
         4a:a3:f9:70:92:7d:84:7b:a0:74:71:3d:3a:8b:91:75:da:27:
         f7:0f:2f:a0:06:f2:24:95:01:ed:7a:20:8a:0f:0b:12:ab:d9:
         b6:85:8a:c7:45:f1:a0:7c:cf:87:ab:bf:b0:7c:90:8b:e0:f9:
         61:7e:69:c7:a5:47:d5:a7:9a:86:ab:ee:58:62:af:77:a7:42:
         c8:35:42:53:bd:11:31:7e:69:41:f1:65:7f:b6:c7:cf:85:23:
         f8:2a:3f:81:03:85:ec:e0:61:6e:2f:da:73:1c:93:78:9c:41:
         e5:18:c0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 06:45:56 2025 by rpki-client