This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7iojjL4XJWfv3JCsOIZVrd4AGcU.roa
File:                     7iojjL4XJWfv3JCsOIZVrd4AGcU.roa (raw, json)
Hash identifier:          GblJqIFLzOVoP7ZDZqB0OUcX5hPPjB3gAmox0d3u5nM=
Subject key identifier:   EE:2A:23:8C:BE:17:25:67:EF:DC:90:AC:38:86:55:AD:DE:00:19:C5
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018543D21F5CA5CDB03042DCED622D3533A5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7iojjL4XJWfv3JCsOIZVrd4AGcU.roa
Signing time:             Sat 24 Dec 2022 11:08:41 +0000
ROA not before:           Sat 24 Dec 2022 11:08:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:43:d2:1f:5c:a5:cd:b0:30:42:dc:ed:62:2d:35:33:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Dec 24 11:08:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ee2a238cbe172567efdc90ac388655adde0019c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fe:d6:e7:9f:eb:a8:4f:ee:55:0a:da:df:89:
                    fe:08:6d:25:c5:98:22:f5:dd:b7:42:68:79:a9:1b:
                    9c:c1:60:91:4e:1f:9f:6b:51:90:8d:af:94:f1:85:
                    bc:d3:1d:79:2c:78:b7:fd:df:fe:f1:0a:ff:50:4b:
                    ee:87:f3:72:75:b3:5b:d4:4f:7a:b3:5d:a6:b9:5f:
                    7a:e9:dc:6e:b9:2a:9c:14:40:1f:ee:2f:63:ee:ec:
                    72:35:a0:7b:5d:b8:8f:de:32:2a:0b:3a:d5:41:0f:
                    07:50:8d:5a:20:05:be:92:7b:c7:f5:5a:4e:55:e4:
                    5a:3e:a0:04:f7:45:99:84:85:8d:ea:8c:98:b6:a7:
                    82:73:88:56:4b:11:be:f1:3c:5c:35:10:60:ef:ee:
                    75:68:74:08:84:4b:ff:45:ee:39:6c:18:ce:3f:ca:
                    95:60:a4:d3:8d:b9:fa:8d:af:48:f6:73:11:24:e9:
                    07:60:eb:a5:7c:fe:aa:7e:3f:c9:5b:6d:6b:47:87:
                    ff:a5:e6:fe:dd:01:d3:c9:48:7f:1c:62:26:ff:a1:
                    c8:a8:4d:40:a8:79:21:aa:d4:b7:5a:c2:50:aa:6d:
                    aa:51:8d:ff:d0:b0:9f:8b:41:95:56:3a:64:55:69:
                    58:77:83:c0:dd:34:da:94:83:0b:e9:38:91:ba:88:
                    79:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2A:23:8C:BE:17:25:67:EF:DC:90:AC:38:86:55:AD:DE:00:19:C5
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7iojjL4XJWfv3JCsOIZVrd4AGcU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:f3:de:f2:da:11:d2:f3:21:43:f2:61:3d:30:00:c0:67:cd:
         59:39:70:2a:99:52:71:e7:2e:f5:e4:02:0b:d2:90:8e:cb:11:
         1a:b0:06:46:e3:1e:64:53:04:bf:c5:32:d8:2a:4c:99:97:38:
         c8:12:99:c6:f8:97:75:dc:88:bf:56:ff:19:77:2c:49:3c:4f:
         f8:9f:8b:53:25:fc:c8:48:b2:31:36:93:ec:95:1e:19:47:68:
         41:93:12:87:1b:9d:b1:b1:b9:3f:4d:9f:1c:80:0b:a8:4c:96:
         a6:f3:18:ab:c7:dc:40:d4:a2:b4:a8:f5:58:22:e9:a0:fc:ba:
         59:fd:12:ca:7c:e3:bd:23:7c:8e:1e:f5:93:28:5b:26:c8:cf:
         bb:32:85:1a:91:c9:8e:e4:30:5a:21:4c:3e:cc:fb:44:23:72:
         7c:31:2e:4c:a2:0b:92:a5:fb:e8:c4:b2:13:22:c2:cc:f5:37:
         d6:6b:4b:cc:24:71:fe:85:e5:b8:fa:74:8c:6f:d7:3f:10:ed:
         99:41:19:6f:33:dc:7e:bb:17:07:37:8d:bb:46:26:f0:28:c8:
         b5:64:2d:b2:a2:b9:ea:9e:25:07:bf:bf:58:90:52:46:48:9d:
         78:84:c3:7d:cd:aa:b7:90:ea:6b:40:89:ee:33:11:9e:71:18:
         6b:4c:8b:eb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVD0h9cpc2wMELc7WItNTOlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI0MTEwODQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTJhMjM4Y2JlMTcyNTY3ZWZkYzkwYWMzODg2NTVhZGRlMDAxOWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov7W55/rqE/uVQra34n+CG0lxZgi
9d23Qmh5qRucwWCRTh+fa1GQja+U8YW80x15LHi3/d/+8Qr/UEvuh/NydbNb1E96
s12muV966dxuuSqcFEAf7i9j7uxyNaB7XbiP3jIqCzrVQQ8HUI1aIAW+knvH9VpO
VeRaPqAE90WZhIWN6oyYtqeCc4hWSxG+8TxcNRBg7+51aHQIhEv/Re45bBjOP8qV
YKTTjbn6ja9I9nMRJOkHYOulfP6qfj/JW21rR4f/peb+3QHTyUh/HGIm/6HIqE1A
qHkhqtS3WsJQqm2qUY3/0LCfi0GVVjpkVWlYd4PA3TTalIML6TiRuoh56QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFO4qI4y+FyVn79yQrDiGVa3eABnFMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvN2lvampMNFhKV2Z2M0pDc09JWlZyZDRBR2NVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALPz3vLaEdLzIUPyYT0w
AMBnzVk5cCqZUnHnLvXkAgvSkI7LERqwBkbjHmRTBL/FMtgqTJmXOMgSmcb4l3Xc
iL9W/xl3LEk8T/ifi1Ml/MhIsjE2k+yVHhlHaEGTEocbnbGxuT9NnxyAC6hMlqbz
GKvH3EDUorSo9Vgi6aD8uln9Esp8470jfI4e9ZMoWybIz7syhRqRyY7kMFohTD7M
+0QjcnwxLkyiC5Kl++jEshMiwsz1N9ZrS8wkcf6F5bj6dIxv1z8Q7ZlBGW8z3H67
Fwc3jbtGJvAoyLVkLbKiueqeJQe/v1iQUkZInXiEw33NqreQ6mtAie4zEZ5xGGtM
i+s=
-----END CERTIFICATE-----
Generated at Fri Dec 19 07:52:56 2025 by rpki-client