This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-LZ4bfs4q3Efjt0QCDwVFqupRS0.roa
File:                     1-LZ4bfs4q3Efjt0QCDwVFqupRS0.roa (raw, json)
Hash identifier:          zNaKjx6HZPKhMhyowyV5HJErsoWNq4FiMX0aV9l0IcY=
Subject key identifier:   F8:B6:78:6D:FB:38:AB:71:1F:8E:DD:10:08:3C:15:16:AB:A9:45:2D
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       8BF93BAA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-LZ4bfs4q3Efjt0QCDwVFqupRS0.roa
Signing time:             Sun 12 Jun 2022 02:09:18 +0000
ROA not before:           Sun 12 Jun 2022 02:09:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
                          2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2348366762 (0x8bf93baa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun 12 02:09:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f8b6786dfb38ab711f8edd10083c1516aba9452d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:bc:2f:74:3e:78:0b:22:42:89:6e:63:8f:
                    c8:3b:54:b9:ba:63:8d:97:0b:50:1e:c9:25:b0:5e:
                    42:85:23:10:b5:9f:cd:a3:1b:02:d8:f0:a9:e6:0a:
                    5c:e2:24:6e:52:8d:3b:bf:84:db:15:ff:28:f3:0c:
                    92:42:7d:54:6e:e7:e4:2f:85:cb:4f:de:7c:64:f1:
                    6d:98:07:ec:16:b3:72:2e:70:85:61:af:8f:19:ab:
                    02:f4:db:9c:94:49:24:f9:56:97:f4:09:14:f2:94:
                    a0:c9:f9:ac:9f:a4:5a:97:e2:6e:55:5d:fc:32:42:
                    6c:df:54:4e:92:44:eb:79:21:68:d1:18:61:4f:ab:
                    00:63:db:3b:af:c8:b8:04:6c:eb:69:27:21:35:99:
                    da:fc:b9:83:65:ac:8a:47:5a:85:08:aa:b9:48:0b:
                    00:96:85:6a:d3:34:b8:41:16:3d:ec:94:70:2e:65:
                    c9:d9:36:aa:0f:40:b5:c3:86:f1:59:9e:d2:ff:1a:
                    8b:f2:b4:94:98:94:f6:fa:f9:fe:e0:b4:cb:d0:78:
                    cd:de:7a:de:2f:42:1b:1f:d5:e9:fb:cb:34:01:1b:
                    86:f2:88:ff:dd:44:61:b5:8a:19:c4:37:6d:1b:02:
                    58:0d:2e:00:6b:8c:15:83:bd:db:5b:e1:93:94:1c:
                    d4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B6:78:6D:FB:38:AB:71:1F:8E:DD:10:08:3C:15:16:AB:A9:45:2D
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-LZ4bfs4q3Efjt0QCDwVFqupRS0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:46:3a:19:b1:2f:1b:2c:fa:67:81:a4:f5:23:8b:a4:14:44:
         0d:37:11:7c:9f:31:a3:02:18:68:56:31:d5:89:0b:0d:56:df:
         0a:96:8b:0f:6c:95:f2:a0:14:6c:b7:a1:9a:fc:b8:2d:1f:14:
         74:9b:75:ef:69:47:14:ac:11:4c:87:cd:15:10:2f:21:9d:06:
         46:d1:3a:d7:24:64:71:82:c3:da:47:49:01:01:80:68:ca:9f:
         5d:01:31:ad:75:f5:2e:88:8f:b0:2b:8f:43:48:2f:f1:2c:4e:
         3d:6d:7a:67:d1:96:63:69:8f:fc:a2:0c:6f:a1:7e:4d:c2:75:
         8a:5d:6e:61:9f:0f:f2:86:06:7b:44:fd:9d:42:8d:76:8e:47:
         c2:c7:48:d7:02:41:cf:a6:69:7e:53:7c:6c:52:bc:38:62:a1:
         ac:52:16:20:6f:40:4c:9b:80:30:cd:3c:e2:a2:46:ef:fc:cf:
         bf:d9:1d:3b:73:a4:6e:a1:aa:d4:a7:82:82:1d:f5:cb:29:32:
         be:5a:c2:05:19:ec:14:bd:e7:53:fb:50:e5:40:04:89:27:eb:
         36:3f:05:49:a9:28:46:f1:59:f0:6d:00:b1:67:f8:2c:da:db:
         92:2c:2a:c4:b5:79:52:9a:77:eb:e0:f6:ae:9f:b7:d2:5f:43:
         cc:18:48:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:14:58 2025 by rpki-client