This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1bodyD47l9sDPVm4LIQemX5gN60.roa
File:                     1bodyD47l9sDPVm4LIQemX5gN60.roa (raw, json)
Hash identifier:          JIv9lfdz/9Vkssb3XrJ8Ts2q+aSye0SjUullXfkoVSo=
Subject key identifier:   D5:BA:1D:C8:3E:3B:97:DB:03:3D:59:B8:2C:84:1E:99:7E:60:37:AD
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018445203683FDE5FB158CB67FA99B82C56C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1bodyD47l9sDPVm4LIQemX5gN60.roa
Signing time:             Sat 05 Nov 2022 00:10:49 +0000
ROA not before:           Sat 05 Nov 2022 00:10:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:45:20:36:83:fd:e5:fb:15:8c:b6:7f:a9:9b:82:c5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Nov  5 00:10:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d5ba1dc83e3b97db033d59b82c841e997e6037ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ad:b3:5d:70:11:4b:b3:d1:56:4e:c0:fc:60:
                    67:a0:76:5c:eb:bf:48:a9:b2:7d:06:a7:ce:f2:f8:
                    3b:e9:4a:dc:f3:f1:30:70:78:e2:de:e1:1f:43:bd:
                    f4:81:15:49:30:20:1a:f4:8a:5a:9d:9f:85:1d:70:
                    f6:a3:0e:25:83:b1:e6:71:94:35:70:11:3d:f3:36:
                    a0:59:96:fe:8d:f8:c3:64:31:48:2f:eb:22:40:f0:
                    a0:fb:53:48:34:7b:31:fd:ce:f0:44:22:9b:43:f1:
                    c7:f4:b9:63:63:36:f5:1c:6c:43:da:5f:17:59:25:
                    57:eb:8b:c5:b6:a4:8b:09:d3:96:01:7e:5b:49:3c:
                    3a:07:aa:17:9b:a1:8f:46:de:49:b7:bd:3e:5c:ee:
                    13:2f:2b:2d:1b:16:a7:2f:88:8b:26:b2:eb:ad:0c:
                    ba:ad:81:b8:3d:18:2a:17:f1:00:b7:0e:c0:21:9f:
                    54:ba:1f:20:cb:b4:15:d6:20:df:54:1e:b5:d9:6b:
                    dd:b7:ed:cf:de:be:17:7d:be:00:13:b0:df:4c:c8:
                    4b:2f:1b:db:c0:5b:22:68:6e:8f:a3:fd:5a:4b:e7:
                    5b:bf:4c:71:ec:d0:a7:40:b7:38:e7:d5:69:22:e7:
                    03:16:d8:e9:7e:ed:91:cd:67:d5:32:23:40:57:8b:
                    8a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BA:1D:C8:3E:3B:97:DB:03:3D:59:B8:2C:84:1E:99:7E:60:37:AD
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1bodyD47l9sDPVm4LIQemX5gN60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:98:69:09:6a:cb:40:1c:0b:e7:ef:82:48:40:2c:19:b7:4c:
         05:86:0e:f4:f6:cf:4d:8b:a1:8f:18:9b:23:75:24:73:5e:67:
         5e:41:5f:2a:8c:fe:7f:51:3a:44:84:eb:49:2d:ad:2e:54:ae:
         2e:cd:a9:06:c9:14:c5:c6:4f:7a:91:ba:9e:59:ee:0e:a0:e0:
         72:4e:5b:3a:e9:6b:46:05:e9:c7:be:46:95:bf:b5:70:82:41:
         06:a4:18:07:a4:dd:3f:f7:18:2e:d2:cb:bb:3e:78:e1:ef:40:
         7f:af:9b:eb:ac:1c:8a:4b:56:db:6b:90:a3:4b:cd:a3:6f:17:
         1d:2c:9a:b6:3e:92:08:4f:6c:7e:c3:02:1c:16:13:c8:4d:25:
         31:13:54:f8:71:23:c3:19:a6:0d:80:e2:eb:a8:82:87:4e:49:
         83:e1:ae:56:04:86:32:6b:88:c0:b0:57:79:66:4e:06:81:ec:
         aa:49:c0:3d:c3:4f:b7:bb:9a:f1:33:1d:e6:e0:51:2e:21:0f:
         41:f2:6f:f7:22:aa:97:19:cf:fa:cc:ad:77:a5:31:35:76:95:
         45:08:82:63:fe:ed:5e:43:a8:66:51:4f:60:8b:a1:8b:e0:9d:
         2c:45:c2:84:73:89:b9:9d:79:8c:20:81:58:82:24:c0:af:f2:
         6e:59:94:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 08:35:22 2025 by rpki-client