This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1F0ZGP0oElunfggx8rkkK4ySqGA.roa
File:                     1F0ZGP0oElunfggx8rkkK4ySqGA.roa (raw, json)
Hash identifier:          WigJghTwt8fpUMOntbE5dm5lVOWM82TF3UoL6isOEwE=
Subject key identifier:   D4:5D:19:18:FD:28:12:5B:A7:7E:08:31:F2:B9:24:2B:8C:92:A8:60
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018751C1984EF24767B4A06E085FBCF8F41C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1F0ZGP0oElunfggx8rkkK4ySqGA.roa
Signing time:             Wed 05 Apr 2023 14:10:54 +0000
ROA not before:           Wed 05 Apr 2023 14:10:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:51:c1:98:4e:f2:47:67:b4:a0:6e:08:5f:bc:f8:f4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr  5 14:10:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d45d1918fd28125ba77e0831f2b9242b8c92a860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ef:f1:f2:2a:14:05:4f:66:cd:ba:78:1d:5d:
                    8d:ac:75:44:d2:d7:59:fc:44:57:14:be:df:e4:4d:
                    1a:f6:4b:1d:ad:6b:ba:f4:c8:41:fa:04:d6:10:8c:
                    a9:8a:f4:be:5f:98:4f:0a:71:7d:2b:f2:ff:29:ba:
                    5b:7c:63:0d:43:d6:6b:af:3b:ea:f7:69:19:30:7e:
                    3c:de:c7:4b:dc:c4:77:4a:29:16:c3:34:cb:13:b7:
                    09:14:c9:16:da:ba:07:b2:14:04:db:84:5b:04:fe:
                    7d:a0:e2:6d:e1:0d:ef:3a:e8:26:85:b7:f7:a7:d0:
                    7f:5e:92:19:b2:cd:c6:42:a1:21:88:05:07:54:28:
                    72:f4:79:94:fa:6f:5a:c5:b5:fa:6a:e7:22:cf:5b:
                    0a:f2:1a:19:48:53:00:80:ba:ed:de:8c:d2:44:88:
                    a6:58:e6:8b:45:e2:dd:f5:47:1f:54:80:09:5a:52:
                    c9:3b:29:ef:9c:95:4c:a1:82:c7:f2:8d:3f:83:38:
                    bb:6f:30:05:68:3a:1d:d6:c0:5d:9a:34:a2:d3:07:
                    ad:73:b1:ee:1f:d6:8c:9d:10:62:69:cd:cb:ba:69:
                    b5:03:20:ee:0d:83:d4:7d:9a:4b:a3:18:59:b5:50:
                    31:a7:35:aa:3e:fe:1a:56:27:4a:6c:b0:74:45:a7:
                    46:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5D:19:18:FD:28:12:5B:A7:7E:08:31:F2:B9:24:2B:8C:92:A8:60
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1F0ZGP0oElunfggx8rkkK4ySqGA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:dc:e8:e3:13:e4:be:e0:db:ca:82:2a:b9:f7:a2:18:37:0d:
         bc:0b:65:ca:e1:ba:fb:33:b6:d9:d6:dd:b8:18:00:5c:70:8c:
         41:22:18:fb:9a:6a:aa:ed:f5:f1:fb:1c:0a:cd:3c:6c:73:43:
         53:24:29:04:ea:9c:02:15:70:2f:6c:d7:76:c9:06:be:f2:ae:
         68:d6:ab:be:b4:fb:65:27:ad:14:37:1c:6c:17:ff:b6:51:0f:
         a4:9a:1e:0a:1b:fa:fe:ee:46:7a:26:db:18:77:53:b5:ef:6d:
         04:10:44:d9:13:28:11:9e:5f:93:3f:c9:17:e3:f0:25:83:11:
         26:53:79:41:17:ba:8b:1e:9a:65:b4:6c:72:0b:92:3e:44:32:
         81:1c:e8:cd:1c:b7:b9:ef:ac:5b:a4:c2:63:16:06:30:79:d0:
         4b:9c:8f:45:ad:99:9d:8f:fb:7b:3b:2a:6b:e5:cb:42:16:45:
         00:7c:b1:31:ca:ad:90:aa:8e:68:83:35:01:f9:0a:33:70:d2:
         b5:ef:e5:16:2c:e6:a1:f5:fa:71:8b:b7:bd:71:1a:47:5c:fa:
         61:56:fc:82:f4:de:09:5a:7e:d1:76:73:75:fb:bc:8d:44:2a:
         34:ee:85:0e:5d:63:1b:a6:f0:b2:8d:14:7c:b6:a0:1f:9b:37:
         1e:8e:21:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 04:02:14 2025 by rpki-client