This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2b4Q-5Zu7t_A5GudQ85tqoEwSeU.roa
File:                     2b4Q-5Zu7t_A5GudQ85tqoEwSeU.roa (raw, json)
Hash identifier:          LkuLpgMPaQhwjqwy+wssq51kYG/QxW/NQdquOA+nGOQ=
Subject key identifier:   D9:BE:10:FB:96:6E:EE:DF:C0:E4:6B:9D:43:CE:6D:AA:81:30:49:E5
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186C3EECFEB652DB717B6783FC0EFB54407
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2b4Q-5Zu7t_A5GudQ85tqoEwSeU.roa
Signing time:             Thu 09 Mar 2023 01:14:13 +0000
ROA not before:           Thu 09 Mar 2023 01:14:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c3:ee:cf:eb:65:2d:b7:17:b6:78:3f:c0:ef:b5:44:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  9 01:14:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d9be10fb966eeedfc0e46b9d43ce6daa813049e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4f:64:c0:25:7c:bf:f6:c6:d2:30:ad:b8:a3:
                    3b:44:9e:ff:42:8c:f3:7a:0a:d2:dd:73:a4:12:c9:
                    ae:a5:d9:a9:cc:19:fd:d8:57:a3:5c:22:fa:0b:e9:
                    3b:ea:87:df:74:16:34:f7:6d:dc:7c:eb:05:82:54:
                    0b:08:e8:7c:26:0c:66:a9:9b:61:72:54:81:75:f5:
                    e1:a6:57:89:0c:4b:02:cb:da:3d:c8:0c:d8:ea:16:
                    d0:7f:82:19:d7:da:7e:11:c2:24:85:49:e0:20:55:
                    27:34:7e:da:72:de:88:72:9e:6b:a3:34:81:7b:fa:
                    ed:a6:ea:cc:90:dc:3d:fe:0f:5e:fc:ce:8e:70:57:
                    de:e8:a8:4b:30:28:59:e9:ff:79:fe:b0:95:19:2c:
                    2a:9e:f6:62:f2:1b:08:e7:e7:68:37:37:3d:09:a2:
                    f6:3d:80:4d:5a:f5:7e:2e:c0:ae:76:8b:71:ba:e8:
                    a7:1c:59:f4:e6:5a:96:fa:5a:27:e3:57:7d:8c:d8:
                    4b:33:a6:f1:cf:70:be:d9:14:67:c9:2b:b5:f7:97:
                    51:52:bc:5f:50:88:47:37:ad:d3:7d:bb:94:95:e9:
                    3c:86:3a:19:6a:58:bb:02:eb:38:7a:b4:4d:b6:46:
                    80:62:ba:8e:34:a9:15:20:75:be:e8:b3:e1:6d:5b:
                    57:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BE:10:FB:96:6E:EE:DF:C0:E4:6B:9D:43:CE:6D:AA:81:30:49:E5
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2b4Q-5Zu7t_A5GudQ85tqoEwSeU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:a0:75:9c:56:7d:11:c1:d4:22:e8:25:71:c9:6f:35:5c:f6:
         eb:97:95:df:10:1b:f1:5d:4e:d1:82:07:4f:2d:f2:b8:b1:cc:
         c4:60:bd:39:1d:0e:1f:13:be:79:09:34:e8:9e:55:4a:f8:79:
         05:b9:69:1e:d9:cb:8a:12:44:c0:02:1e:86:fc:ee:ba:32:88:
         b5:c4:ce:59:e1:2f:f8:83:cd:26:3d:5a:13:1f:9f:95:50:16:
         8f:e5:16:ec:70:81:42:70:3d:a6:74:8f:6a:b9:ad:8f:2c:ad:
         f9:12:ef:c9:5f:e7:41:fc:cc:bf:b5:ff:3a:d3:50:d1:4f:0f:
         08:70:ab:12:b8:41:88:6c:86:54:26:98:8f:b2:24:fe:ed:ee:
         f2:45:30:d5:f4:d8:8d:fe:4f:5b:cf:00:af:29:c3:51:5f:7b:
         4a:f8:0a:bc:f6:35:5b:16:1e:cf:3b:ad:8f:bb:a4:88:4f:fc:
         de:e6:2d:6a:a3:b4:12:1b:c9:18:87:ec:81:0b:a4:39:b8:a0:
         40:8d:78:5f:2e:ba:fe:10:f9:95:c4:87:72:a6:bd:fd:bc:6b:
         3c:81:61:83:73:6a:63:71:69:d9:26:de:12:8e:21:75:d8:af:
         b1:e1:2f:4e:8f:d1:86:8f:e8:d7:f2:ac:2f:a9:e3:75:d8:8a:
         c1:a1:68:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 07:57:39 2025 by rpki-client