This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-HASppMM8l61v8pcUZ7hILXbg40.roa
File:                     1-HASppMM8l61v8pcUZ7hILXbg40.roa (raw, json)
Hash identifier:          TB6StEIzmr4lXb7UP3XyT6gF4IfMqK3Vudujpg8QLiE=
Subject key identifier:   F8:70:12:A6:93:0C:F2:5E:B5:BF:CA:5C:51:9E:E1:20:B5:DB:83:8D
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018728FFDC70B0CCEECE9379E5ACCE0011C0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-HASppMM8l61v8pcUZ7hILXbg40.roa
Signing time:             Tue 28 Mar 2023 16:14:29 +0000
ROA not before:           Tue 28 Mar 2023 16:14:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:28:ff:dc:70:b0:cc:ee:ce:93:79:e5:ac:ce:00:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 28 16:14:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f87012a6930cf25eb5bfca5c519ee120b5db838d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:53:be:4d:dd:6c:4b:b4:7c:d3:e3:db:c5:23:
                    18:51:92:42:77:98:13:e2:16:32:74:af:86:79:5a:
                    4f:a7:fa:b8:52:b4:70:60:2d:33:ce:07:cc:1c:e3:
                    41:61:be:b0:8f:77:90:5e:e0:9a:3f:b5:21:bf:4e:
                    6e:ed:b4:fd:13:82:63:13:95:2a:4b:86:09:9f:bf:
                    47:f3:be:fe:3b:7d:43:33:9d:95:5c:8a:d9:cd:04:
                    92:6e:ea:7e:10:8b:68:e7:82:39:59:e2:9c:a8:b2:
                    4b:ae:6e:98:df:aa:6a:97:4c:90:65:b0:49:04:fd:
                    66:af:fd:bc:f6:c9:50:4f:d8:d4:39:2b:06:8a:ce:
                    b8:66:57:d0:7d:b5:df:ea:95:03:c8:42:aa:d3:cb:
                    2b:c5:27:84:f8:be:65:78:41:d2:ec:73:cd:97:27:
                    fa:f7:6c:1d:84:61:b6:d7:00:45:3a:9f:78:f0:d5:
                    f1:b6:67:12:53:fa:6c:d6:1d:46:28:0b:18:96:d0:
                    cd:34:e1:b3:e9:cf:f1:36:3a:c3:d4:5b:b3:9c:5c:
                    82:8d:a7:41:6a:71:96:44:d3:26:c8:3c:5b:27:2f:
                    17:5c:07:ed:78:4e:47:25:ad:6b:39:15:b6:29:d9:
                    38:23:ff:66:d7:09:52:a3:ed:55:5b:7e:ce:e4:33:
                    49:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:70:12:A6:93:0C:F2:5E:B5:BF:CA:5C:51:9E:E1:20:B5:DB:83:8D
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-HASppMM8l61v8pcUZ7hILXbg40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:b8:13:a5:f8:9e:6e:42:0e:ea:41:a8:74:96:af:e0:82:34:
         b7:58:92:00:7e:08:d4:ff:e6:81:af:ea:be:1c:0e:e4:a5:fd:
         8a:6b:fd:c2:92:45:79:7a:80:ba:b4:da:51:60:95:78:7d:0d:
         e8:e2:86:e9:29:83:48:91:65:8b:a2:b3:17:65:7e:a8:07:9e:
         fd:8c:2f:22:06:da:85:dd:90:6f:f4:fa:23:96:d8:e0:73:18:
         c5:1d:a0:57:a1:67:0b:32:a1:fd:1d:0b:b0:5e:a3:0e:00:a1:
         d9:08:63:f0:1a:b7:ab:90:e0:eb:0b:98:b2:d2:9b:da:c9:04:
         e9:08:9b:a7:d8:3c:d0:53:f0:1b:5f:ea:90:b1:72:c9:f9:a0:
         87:1e:77:34:c5:6a:db:7f:19:6e:48:de:8f:38:ee:10:d2:de:
         0f:42:b5:d5:db:7e:2d:45:0f:a1:c5:d4:fe:5c:80:4e:a5:f4:
         6c:c7:a1:5b:a6:e5:85:4d:8d:b6:8b:be:9f:3b:41:41:03:e1:
         49:37:30:87:78:67:9b:0d:c0:4e:e1:59:ab:31:ce:18:1d:0a:
         73:c3:3f:b6:6c:5d:13:1b:f7:84:ba:d5:d2:c7:e3:16:a1:df:
         e4:f6:7b:87:8a:f2:02:1b:86:e6:10:0b:93:31:4d:dd:3e:15:
         3d:c5:fd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 16:56:32 2025 by rpki-client