This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4w4c2DI7UO_vpCZcWXy10fJ5TKU.roa
File:                     4w4c2DI7UO_vpCZcWXy10fJ5TKU.roa (raw, json)
Hash identifier:          PIEGZOo0aJ9D9oT8eUIn+OiMrnvwXfWQjzxWuppJ9ws=
Subject key identifier:   E3:0E:1C:D8:32:3B:50:EF:EF:A4:26:5C:59:7C:B5:D1:F2:79:4C:A5
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       862A5449
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4w4c2DI7UO_vpCZcWXy10fJ5TKU.roa
Signing time:             Sat 21 May 2022 22:09:29 +0000
ROA not before:           Sat 21 May 2022 22:09:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
                          2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
                          2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:180:e0ec:efe1/128 maxlen: 128
                          2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
                          2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2250921033 (0x862a5449)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 21 22:09:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e30e1cd8323b50efefa4265c597cb5d1f2794ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:93:b6:44:c6:49:2a:62:d3:e3:75:a4:66:26:
                    5c:e9:4d:2b:de:5d:b3:30:ce:8b:2d:80:05:e7:6f:
                    c6:ae:48:1e:d8:29:35:fe:ba:cf:93:97:a6:22:cd:
                    9e:02:42:83:1d:a7:d4:9d:de:d1:cb:1e:26:d9:89:
                    42:f6:51:88:ae:c4:2a:62:ca:c8:3f:dc:ee:f2:f3:
                    e7:6f:18:62:89:af:c0:99:db:ab:13:36:a9:5f:e7:
                    c0:55:5b:5e:a3:bb:47:a6:47:27:95:1e:0f:99:c5:
                    ed:63:23:b1:cf:38:26:4d:b4:93:ba:00:3e:6d:a7:
                    da:35:4f:2f:aa:b2:e9:c3:72:ba:3d:e9:1f:e5:3c:
                    bf:ea:96:c9:b0:c3:27:fb:bd:d3:5a:a8:51:82:54:
                    e0:28:1d:83:6a:a6:46:15:55:f7:0c:bb:eb:69:f4:
                    8e:f3:69:ac:2a:01:4e:a3:dd:39:c5:18:f2:8e:1e:
                    9b:64:fb:2b:89:d6:7f:3e:8d:67:fe:86:37:21:ac:
                    23:39:0c:4c:4e:3c:e5:58:4a:f1:7a:53:d1:bb:8b:
                    2c:fa:22:97:95:fa:09:94:31:55:14:0b:87:20:d3:
                    52:78:9b:42:4e:9a:e7:16:06:8f:42:5a:6d:f9:41:
                    46:6f:71:85:9a:ca:e9:5e:a5:05:29:26:d5:56:1f:
                    c6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0E:1C:D8:32:3B:50:EF:EF:A4:26:5C:59:7C:B5:D1:F2:79:4C:A5
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4w4c2DI7UO_vpCZcWXy10fJ5TKU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:3a:cc:61:ec:c4:46:9c:5a:81:67:95:4e:97:de:14:a6:59:
         dc:90:0e:cc:b1:3f:49:c9:42:59:de:9b:bb:bf:c7:13:cb:f7:
         42:c7:f5:52:2e:fc:3c:db:cf:cc:f1:10:ac:7b:01:56:50:30:
         27:ed:02:09:89:83:14:55:65:3c:bd:7a:55:1e:f3:08:c9:94:
         1a:25:5b:0f:56:66:5e:27:30:1a:87:c4:5d:e9:fd:24:cf:c7:
         3a:80:c1:b4:62:f2:ae:a2:d8:90:82:8c:18:96:aa:0e:28:c4:
         d5:4f:08:76:90:3c:e9:5b:e3:09:07:c8:dc:ff:43:45:49:09:
         42:ac:6b:c0:bc:e0:5c:df:44:00:a2:22:29:87:98:94:7b:22:
         1c:b9:14:b4:1f:1e:18:42:b9:0b:e7:7f:0d:d3:dc:85:bd:92:
         1a:42:f9:f4:78:3b:7f:04:3d:67:0c:ab:4a:66:86:ad:90:56:
         5e:e4:6a:6c:f7:6b:a9:9c:c6:7e:eb:ea:f0:82:b3:c5:ef:5d:
         68:cc:ca:93:f4:96:e9:ae:ff:6a:93:0e:41:ff:4f:1e:84:6e:
         2e:26:65:2c:4f:9d:1d:20:19:27:75:4e:2c:82:b4:5a:79:5d:
         5c:eb:c2:ea:70:3d:d5:9b:ac:cc:0f:52:42:e9:02:10:ba:11:
         72:96:1b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 01:57:32 2025 by rpki-client