This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1pMlUTPGVKTnFXL5F0qzH01i0Qw.roa
File:                     1pMlUTPGVKTnFXL5F0qzH01i0Qw.roa (raw, json)
Hash identifier:          vL8wG7rY/6WjTNTfEYn4GZb4CVA16DXoZNKq80VmkWc=
Subject key identifier:   D6:93:25:51:33:C6:54:A4:E7:15:72:F9:17:4A:B3:1F:4D:62:D1:0C
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0189CB3384B72F6D175B58D1FCC58630E7C6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1pMlUTPGVKTnFXL5F0qzH01i0Qw.roa
Signing time:             Sun 06 Aug 2023 14:14:58 +0000
ROA not before:           Sun 06 Aug 2023 14:14:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:cb:33:84:b7:2f:6d:17:5b:58:d1:fc:c5:86:30:e7:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Aug  6 14:14:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d693255133c654a4e71572f9174ab31f4d62d10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:74:89:65:72:92:6f:9b:d9:d8:04:a7:1d:89:
                    f4:3e:1e:d5:6d:64:14:03:f6:0a:62:72:7c:46:49:
                    34:48:73:41:51:91:48:35:bf:8e:08:14:80:6e:13:
                    69:fe:3c:18:82:c3:9c:8a:b6:a0:44:2e:a7:2d:de:
                    fc:b1:a1:8e:2d:55:c3:b3:31:6a:cc:45:6b:82:cb:
                    f3:24:aa:a1:00:98:a6:7a:c6:f0:61:d5:fa:a6:d9:
                    d5:3e:99:b8:c5:28:b4:77:f0:ae:59:ea:76:64:3a:
                    28:ee:63:21:b1:13:dc:f7:8d:3c:cf:2e:75:f1:97:
                    4b:95:50:9a:b2:ee:50:f3:41:5b:6b:7d:37:dc:5f:
                    3a:cb:8b:ea:19:76:db:23:d0:2f:08:7a:4e:86:c2:
                    b8:98:d2:59:a4:02:5a:39:9d:06:f3:81:35:a5:91:
                    35:4c:fd:ee:12:73:53:a7:cd:84:85:c9:47:42:9c:
                    33:f6:f9:e3:83:bd:12:a4:9d:f4:9b:67:ac:cd:16:
                    35:28:8a:2f:27:64:dc:4e:24:0f:07:f6:cf:05:84:
                    14:69:70:c8:47:37:c1:22:67:f1:b9:f8:16:98:43:
                    88:82:1c:83:b9:74:ce:23:bc:aa:a7:bf:20:3d:df:
                    d2:28:78:95:30:bc:47:69:47:6d:8f:f9:ef:3d:7f:
                    13:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:93:25:51:33:C6:54:A4:E7:15:72:F9:17:4A:B3:1F:4D:62:D1:0C
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1pMlUTPGVKTnFXL5F0qzH01i0Qw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:ed:47:e8:43:7f:2b:60:46:52:f2:71:10:e0:14:5b:db:fa:
         5e:be:2c:28:09:42:30:8c:90:8f:60:a3:e6:20:37:f0:60:8f:
         9f:50:14:8c:46:d4:40:1b:16:9e:0f:c0:9a:9e:fc:bc:e4:f0:
         ff:79:e5:1e:5e:18:64:ec:0e:f8:af:23:90:d9:58:c7:a7:de:
         08:20:51:b3:9e:3e:5e:6c:8b:58:b4:8d:77:32:a3:9e:29:9c:
         13:a7:5a:00:e9:d7:26:a1:82:1f:25:90:5c:07:e2:98:b6:8a:
         7f:93:cc:09:6b:3e:cb:17:59:10:f3:eb:33:75:8d:33:e5:05:
         57:58:c8:ef:26:5b:65:86:2e:35:73:70:c1:fa:b0:e8:81:47:
         a7:1a:62:f1:5d:c1:65:e1:b1:a6:1e:d5:05:fc:2b:0a:e9:bc:
         29:d0:e8:a9:79:c5:42:9c:99:b4:0a:50:4b:8a:4d:c4:00:55:
         89:19:51:56:fe:28:80:38:7f:72:76:8a:e6:e4:37:cc:4a:9c:
         09:1f:1c:da:64:d6:f6:1d:38:cc:b7:01:15:1e:6f:1f:00:4e:
         d3:47:9b:56:53:19:ac:8c:13:fb:67:47:0e:c4:57:9b:d0:6c:
         1c:1d:3f:d8:64:a9:71:27:98:57:ac:20:e8:12:7f:f2:8e:a3:
         79:07:78:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 13:00:25 2025 by rpki-client