This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1eX0vRbTcfpGj3eR_9K9oNNjCOM.roa
File:                     1eX0vRbTcfpGj3eR_9K9oNNjCOM.roa (raw, json)
Hash identifier:          MR3N4TGnmGFyd8PAPoL4Ck/n0mwlMSv3RmIALEXDbrA=
Subject key identifier:   D5:E5:F4:BD:16:D3:71:FA:46:8F:77:91:FF:D2:BD:A0:D3:63:08:E3
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0188C90B9A2C8EA307F1DCF9F4F8F3B7E1A0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1eX0vRbTcfpGj3eR_9K9oNNjCOM.roa
Signing time:             Sat 17 Jun 2023 11:09:20 +0000
ROA not before:           Sat 17 Jun 2023 11:09:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:c9:0b:9a:2c:8e:a3:07:f1:dc:f9:f4:f8:f3:b7:e1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun 17 11:09:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d5e5f4bd16d371fa468f7791ffd2bda0d36308e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:60:b6:83:84:b9:56:f2:01:0a:63:e6:a8:02:
                    39:d3:39:32:db:26:1b:65:50:6f:bd:70:c3:bf:4d:
                    ba:cc:53:97:49:ca:bc:c7:29:2d:f9:8e:eb:d7:57:
                    b5:cd:cc:ca:44:3f:d3:fb:2f:a5:71:a1:53:17:ff:
                    5c:a9:a1:1d:c3:b7:72:e7:49:39:4d:53:dd:c5:1d:
                    4d:95:c0:96:d2:72:7a:3c:d6:fc:b5:6c:e1:29:ba:
                    1d:3b:d6:86:5e:0d:98:10:bf:fd:fd:e9:3b:d6:ed:
                    69:d2:15:5b:51:77:33:4b:19:cb:50:c2:dc:b3:a4:
                    f1:ad:16:ca:82:07:14:dd:64:10:b4:9f:65:c8:b0:
                    c1:e1:df:40:7f:d5:b1:a6:07:30:8a:18:eb:5d:78:
                    ef:59:9a:03:e7:cd:de:c2:11:29:91:2c:7b:cb:e2:
                    a9:31:d3:b3:f5:3d:43:9c:90:b7:18:bd:6b:bc:40:
                    7a:6c:a8:95:6e:df:8d:d5:61:48:8d:ae:fb:86:20:
                    58:a9:f7:27:f1:b5:99:de:c4:08:48:44:74:35:56:
                    58:ea:f6:5b:ea:78:8f:48:cb:98:c3:ac:a0:c1:87:
                    91:af:55:82:4c:4d:f1:e2:13:46:95:93:d9:a6:e0:
                    75:56:e7:19:23:d3:ca:1f:15:a1:80:43:0e:a6:d2:
                    d9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E5:F4:BD:16:D3:71:FA:46:8F:77:91:FF:D2:BD:A0:D3:63:08:E3
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1eX0vRbTcfpGj3eR_9K9oNNjCOM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:9a:cc:1b:18:d7:68:fc:06:d1:8b:45:86:ce:a6:d5:70:da:
         2b:1c:21:d9:a5:68:0b:58:6a:be:38:92:50:ab:74:f8:7f:53:
         30:04:6f:7f:8b:e6:29:ef:c5:dd:06:09:c5:8d:a0:ef:fc:e8:
         e0:50:8e:5a:c2:01:3a:22:df:31:03:a5:7b:f0:95:e9:90:26:
         2c:e6:cc:7c:00:32:15:3b:c2:65:08:36:4a:dd:6c:6a:67:64:
         c8:11:fe:92:3d:2f:d0:92:67:ef:f1:36:2b:67:b8:b5:9b:76:
         62:34:3e:02:ac:95:41:86:af:dd:b7:60:37:25:1e:4f:c5:a8:
         45:0c:63:e5:59:3e:2a:03:09:29:9a:7b:0b:cd:f7:9e:9a:d7:
         c4:38:62:10:ca:c0:fb:35:6c:88:48:93:0e:4b:fa:d3:a3:47:
         75:b1:42:84:14:17:00:5a:59:51:55:9a:dd:05:b1:e6:5d:cd:
         f1:b2:43:bb:21:3d:ec:b6:f0:c8:66:42:c5:91:49:2b:42:a3:
         61:a1:b2:2d:80:26:bb:42:f5:a7:68:61:8c:39:5e:54:7e:e2:
         c7:86:4f:95:60:c9:a6:c6:72:60:2a:60:0d:9e:a0:2c:29:25:
         1d:15:d9:65:bd:27:2a:db:70:50:3c:44:50:06:a8:1c:17:3e:
         bd:96:b1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:57:40 2025 by rpki-client