This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/41a6w2felCH3X2X--C0C7ck-T6g.roa
File:                     41a6w2felCH3X2X--C0C7ck-T6g.roa (raw, json)
Hash identifier:          9BWIDJ9Cn98+DouYTA+ntCUqTCIQMu3djG2yrx+IioM=
Subject key identifier:   E3:56:BA:C3:67:DE:94:21:F7:5F:65:FE:F8:2D:02:ED:C9:3E:4F:A8
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018871B2A12A65B8F226C3907443D7EFCE4B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/41a6w2felCH3X2X--C0C7ck-T6g.roa
Signing time:             Wed 31 May 2023 12:05:11 +0000
ROA not before:           Wed 31 May 2023 12:05:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:188:71b1:d088/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:71:b2:a1:2a:65:b8:f2:26:c3:90:74:43:d7:ef:ce:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 31 12:05:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e356bac367de9421f75f65fef82d02edc93e4fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e0:ff:0a:5e:65:c5:0b:e5:a7:10:4e:5b:a3:
                    f7:c6:b6:f9:99:16:bb:21:c5:21:dd:aa:00:09:97:
                    b2:b5:fe:e3:85:e1:11:6a:fb:06:8a:b7:5b:05:7c:
                    45:fd:56:71:67:ef:e2:bc:dd:29:6a:96:f9:ce:95:
                    8d:b0:27:7b:df:ed:a7:29:80:80:93:6a:e2:0d:a5:
                    29:2c:3f:f3:f7:c2:f7:d2:a1:6c:a0:e2:06:c4:64:
                    f9:c5:0a:72:92:2c:81:19:07:fd:a6:0a:f5:ec:f8:
                    51:56:3e:bb:0e:b1:a6:97:c3:e2:68:c0:aa:de:3e:
                    8c:14:20:92:8e:9d:a1:87:23:98:f3:1a:1a:12:5d:
                    5c:4a:2b:b7:7c:b4:e8:f8:16:17:2b:f0:16:92:4e:
                    23:bf:3a:ef:2e:bf:48:d8:6b:e1:cb:8d:06:77:23:
                    2e:bc:02:7e:97:be:96:b1:49:4b:c3:22:f1:2a:fd:
                    e4:56:e3:82:75:60:8f:55:5f:a4:cd:cc:83:50:43:
                    ad:cf:cd:1b:b8:62:27:3c:04:75:1d:4a:40:db:df:
                    7d:56:53:78:96:7d:62:3f:7b:75:b9:a5:b1:fd:d7:
                    48:54:96:ef:13:09:80:fb:82:99:8f:11:a8:da:df:
                    d8:08:b4:c7:40:39:88:7f:45:fb:b8:b6:4b:98:97:
                    fb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:56:BA:C3:67:DE:94:21:F7:5F:65:FE:F8:2D:02:ED:C9:3E:4F:A8
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/41a6w2felCH3X2X--C0C7ck-T6g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:4f:47:13:bc:1d:aa:b2:0f:2c:a6:b0:c9:f1:61:22:f5:70:
         08:9f:e3:c3:1e:d1:63:b9:2a:3a:d2:2f:42:77:7b:1c:e4:a6:
         5d:ae:38:ee:67:92:b0:22:37:3f:4d:0f:6c:33:2e:cf:77:b9:
         8e:db:6b:b4:e6:dd:b0:3f:dc:bb:88:27:24:d1:46:90:af:e4:
         53:be:61:cc:4d:7b:76:ec:4b:90:2a:ad:24:68:95:9c:fc:f9:
         5d:25:e3:ad:5c:31:27:42:99:c7:5d:41:e7:39:38:32:11:6e:
         4f:bb:78:0c:a8:20:e0:5a:eb:2a:b1:a0:68:d3:a0:e6:81:91:
         9d:66:38:30:7b:e1:b7:f5:b1:53:3e:b1:bd:de:c7:7e:3a:6e:
         c4:71:d2:4b:22:54:f5:bc:33:eb:66:ee:0f:b9:f8:63:37:e7:
         b0:a7:cc:6e:bd:5b:4e:1b:4c:c4:91:6c:f9:4e:50:96:61:80:
         0e:ea:39:6f:39:22:e1:e7:89:2c:c1:e0:e5:5c:9a:f9:e3:2a:
         83:eb:d2:6f:8f:1b:34:24:a4:80:f9:8c:57:79:88:ee:60:d6:
         8f:34:e4:6f:a5:5e:8d:29:5e:d5:e0:f7:57:40:db:96:b8:f5:
         9c:bb:7e:a1:4e:83:97:d4:94:73:48:6a:dd:2f:4c:ee:dc:1f:
         30:89:a4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 00:57:36 2025 by rpki-client