This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5vP7-hLZcEwPvitcdbXdVEqiQNs.roa
File:                     5vP7-hLZcEwPvitcdbXdVEqiQNs.roa (raw, json)
Hash identifier:          YMBUGLR07oR91Ev56BlWp7t6O/p8Rs4tlfslGkF0iGA=
Subject key identifier:   E6:F3:FB:FA:12:D9:70:4C:0F:BE:2B:5C:75:B5:DD:54:4A:A2:40:DB
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018535E0EA4B06FF7217B32FE92FFF5EA226
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5vP7-hLZcEwPvitcdbXdVEqiQNs.roa
Signing time:             Wed 21 Dec 2022 18:10:10 +0000
ROA not before:           Wed 21 Dec 2022 18:10:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:35:e0:ea:4b:06:ff:72:17:b3:2f:e9:2f:ff:5e:a2:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Dec 21 18:10:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e6f3fbfa12d9704c0fbe2b5c75b5dd544aa240db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:13:a1:d0:8c:1f:26:fb:69:09:aa:74:6b:0b:
                    03:78:23:de:f8:da:fb:0c:fa:e6:44:93:94:d9:24:
                    67:32:39:6f:50:b0:af:b5:2b:71:05:08:38:60:59:
                    79:c6:60:92:66:f2:b4:e1:f0:6e:37:f7:10:ce:4c:
                    ce:a4:75:f9:a1:8f:e2:b7:bc:f5:19:b4:af:d9:85:
                    68:80:b7:1a:e1:56:09:08:93:8e:34:f1:4b:ae:92:
                    65:63:e5:21:6e:37:95:13:d5:6f:03:2d:3f:2c:08:
                    c6:ea:5c:cc:d1:f0:78:c4:57:63:ae:a1:fc:6b:5b:
                    b1:f6:b4:1e:a8:8a:3f:6b:96:76:5e:b0:d4:05:0b:
                    e6:b9:57:71:17:46:5c:5b:46:b6:5d:46:9c:98:e4:
                    3d:90:c3:49:b4:8a:bb:da:ba:1d:31:23:b7:f8:41:
                    10:54:a8:42:9c:33:19:50:c1:45:93:15:ec:09:5d:
                    9a:63:b8:ee:1f:ba:eb:a6:95:e9:62:be:eb:6f:49:
                    7c:dd:45:22:08:87:05:31:90:56:37:8f:15:a2:f3:
                    d0:f5:29:14:64:1c:86:fd:68:e2:25:e5:57:b2:a2:
                    95:d1:e0:e5:19:d6:ee:1a:e9:71:93:c0:b2:c9:49:
                    17:f7:61:88:04:75:84:92:a4:93:ef:1f:64:9d:90:
                    6c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F3:FB:FA:12:D9:70:4C:0F:BE:2B:5C:75:B5:DD:54:4A:A2:40:DB
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5vP7-hLZcEwPvitcdbXdVEqiQNs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:56:93:2e:d6:61:95:fa:70:98:56:7d:46:fe:36:fd:f0:93:
         43:57:f0:25:d0:2a:79:73:be:9b:4e:d6:22:ad:fa:8e:92:c2:
         5b:35:42:1a:14:df:9e:da:63:d2:3a:fe:27:ce:db:eb:3b:24:
         f2:2d:ac:3e:19:80:1f:0c:1e:5a:51:ee:b0:c7:e3:19:7c:73:
         c7:bc:29:00:14:4e:f6:d0:ca:f8:bf:f6:7b:11:6b:ef:98:40:
         05:57:d5:09:1e:bf:86:7f:a4:03:be:df:f2:91:93:28:55:73:
         4d:8a:71:d7:88:1b:37:99:c1:90:39:5c:df:05:fd:6a:a4:05:
         50:73:40:ff:af:be:d6:5b:59:c6:ef:28:d3:33:e9:73:0a:6c:
         78:e4:17:29:6e:31:d3:3a:2b:80:2e:b8:b3:f5:d6:27:45:d6:
         af:28:bc:6b:73:a1:21:ad:68:e5:a7:fe:74:3c:ac:87:72:cc:
         4b:80:65:a9:01:b7:18:a7:3b:35:33:15:89:b7:77:be:3f:8a:
         25:fd:b8:e2:30:11:9c:2c:37:91:b8:29:08:0a:a7:f0:68:8e:
         e6:ec:2d:a8:76:8d:3a:89:14:a9:94:ff:df:97:f2:a3:c6:ea:
         f5:f9:58:bb:93:79:7d:4a:34:a3:f3:55:9f:03:54:29:17:79:
         fd:cb:d2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:15:17 2025 by rpki-client