This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1zCuUSmZFYu4NS38GW4r48zpeWs.roa
File:                     1zCuUSmZFYu4NS38GW4r48zpeWs.roa (raw, json)
Hash identifier:          d2BVxn+dImKmpXuo0uMyH17RHhwTm8rrcmIfsX1zG/I=
Subject key identifier:   D7:30:AE:51:29:99:15:8B:B8:35:2D:FC:19:6E:2B:E3:CC:E9:79:6B
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018686FE6C049C309CAC2527727650EFE3F3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1zCuUSmZFYu4NS38GW4r48zpeWs.roa
Signing time:             Sat 25 Feb 2023 05:14:26 +0000
ROA not before:           Sat 25 Feb 2023 05:14:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:86:fe:6c:04:9c:30:9c:ac:25:27:72:76:50:ef:e3:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb 25 05:14:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d730ae512999158bb8352dfc196e2be3cce9796b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1f:fc:00:f2:48:75:37:cf:57:06:98:9b:5e:
                    f8:68:9b:49:36:e4:70:dd:13:b9:d8:1f:22:f7:59:
                    ea:26:21:fe:fa:3c:3e:d7:4b:29:bf:87:2c:40:eb:
                    ba:b4:32:7d:a7:f8:d7:69:ca:38:b5:84:fa:0e:09:
                    30:71:c0:a0:ce:93:64:2f:f7:4a:f3:04:b8:96:02:
                    0b:ed:64:22:1a:bb:38:64:2e:e4:e8:f9:46:c0:bd:
                    8a:93:42:01:c0:38:d1:c4:00:46:7f:a4:75:1d:4b:
                    e3:30:c0:49:5b:96:d2:5d:2f:ef:64:f5:ee:1f:8e:
                    ba:5c:e5:9d:43:7c:29:fd:00:d7:ea:62:e6:eb:9e:
                    f4:7a:11:7d:38:ca:2f:f2:43:62:bf:5f:7b:a3:7e:
                    ff:f6:de:7f:6c:1b:87:82:ae:83:de:09:41:92:db:
                    c9:56:b5:fe:49:8e:5e:48:7d:71:45:fd:0e:a7:6b:
                    c4:d4:03:18:0b:2e:f3:e2:13:1d:eb:4d:cf:11:48:
                    15:13:8e:03:dc:72:67:aa:40:ab:da:30:a1:fa:e8:
                    5e:70:c0:b8:d4:64:77:5c:9f:83:94:80:a8:de:9a:
                    a3:65:3c:9e:bb:57:6f:2e:6e:ab:a1:c2:5f:62:69:
                    62:e5:69:95:4a:d9:af:5d:de:9f:0e:09:44:58:0a:
                    00:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:30:AE:51:29:99:15:8B:B8:35:2D:FC:19:6E:2B:E3:CC:E9:79:6B
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1zCuUSmZFYu4NS38GW4r48zpeWs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:ea:ae:ec:ad:d9:6c:2e:68:31:46:93:78:f5:b3:9d:0f:9e:
         6e:6c:a4:9f:f1:b5:7e:5d:e1:1a:a1:d1:6d:8d:63:42:82:fc:
         99:7f:4f:34:68:dc:fc:f1:6c:68:5e:47:e5:4e:28:0f:12:e7:
         fb:aa:f9:39:10:e7:18:8d:6b:10:f6:6b:92:60:2e:14:a5:3c:
         22:8f:34:c4:13:a0:48:58:19:80:01:16:90:ea:e7:de:09:a4:
         a4:e4:30:e9:97:6d:15:84:e1:40:34:79:0e:bf:9c:d5:d6:ba:
         4e:16:bf:cb:cc:c6:74:d1:6a:4c:44:91:c1:a0:17:f6:18:3f:
         0f:46:a1:83:f7:b8:bc:c8:77:08:77:bc:02:5b:cb:46:75:3f:
         c4:cc:4b:d3:ce:09:4a:e0:61:2c:06:87:92:09:35:32:5d:b3:
         1c:f0:42:a0:a3:e7:b6:c8:0b:89:f6:4a:1d:f5:04:84:11:fc:
         76:bf:e8:fa:e0:4b:51:c9:28:68:28:8e:86:0a:e9:09:73:9a:
         9f:88:91:a0:4c:75:42:c0:91:49:03:f3:43:8b:c4:d7:bd:fc:
         27:db:6a:e0:f9:8d:15:5e:1d:37:da:d0:27:cb:69:27:b1:dd:
         d3:93:19:42:17:55:e0:fd:37:44:6c:36:9c:ac:e4:67:17:ba:
         d4:31:0e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:16:26 2025 by rpki-client