This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8Qa6J2ZUQUf9nR_-3h1_aNxROQw.roa
File:                     8Qa6J2ZUQUf9nR_-3h1_aNxROQw.roa (raw, json)
Hash identifier:          CzxynJwqw/9akCWtR9+1utzw3VB0jNJSY4KQn3J0bLo=
Subject key identifier:   F1:06:BA:27:66:54:41:47:FD:9D:1F:FE:DE:1D:7F:68:DC:51:39:0C
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018835661D7AD5B31FD0AC16920E064F0C98
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8Qa6J2ZUQUf9nR_-3h1_aNxROQw.roa
Signing time:             Fri 19 May 2023 19:04:24 +0000
ROA not before:           Fri 19 May 2023 19:04:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:188:3565:f917/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:35:66:1d:7a:d5:b3:1f:d0:ac:16:92:0e:06:4f:0c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 19 19:04:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f106ba2766544147fd9d1ffede1d7f68dc51390c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8f:b6:76:cb:e8:93:d9:74:70:fb:91:47:cb:
                    08:1a:c8:4c:7d:fb:d0:21:31:43:f9:fd:97:3a:87:
                    2f:ad:d9:ba:8e:43:c3:5e:08:10:e7:80:a6:b3:58:
                    80:b0:a5:99:34:59:1f:b0:e7:35:91:c7:48:c3:09:
                    c1:8b:dd:24:90:cc:10:c6:4c:10:5c:b0:17:b4:eb:
                    c1:fa:27:32:4a:80:36:38:63:96:13:f8:3b:38:7d:
                    64:08:43:8c:a0:37:f4:78:68:a8:f5:0f:ac:f1:0b:
                    35:87:ae:7d:93:3f:8a:ef:55:f3:6a:f5:9a:e7:0c:
                    56:73:74:10:cb:8f:0e:04:8f:0b:c5:85:4a:aa:fb:
                    a4:14:d8:1c:f3:d8:86:0d:49:f8:bc:3b:d2:81:a4:
                    61:80:e2:7d:fd:d2:b7:0e:38:1a:75:2e:f0:ea:02:
                    f5:ef:a6:c3:17:3d:6f:12:21:1c:b8:dd:8d:b9:77:
                    40:a1:d4:7e:2b:77:e4:80:6c:07:15:e2:b9:0e:66:
                    ae:7c:7f:49:6d:fd:de:4e:73:25:ee:21:57:d1:72:
                    2a:de:95:da:7a:61:a0:0d:4c:9c:32:3b:e8:15:2b:
                    9b:5c:57:9f:a6:36:57:bb:f6:7b:1a:1f:3f:0e:41:
                    23:aa:4a:e7:45:8f:98:c9:12:52:d8:58:e2:db:fa:
                    1b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:06:BA:27:66:54:41:47:FD:9D:1F:FE:DE:1D:7F:68:DC:51:39:0C
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8Qa6J2ZUQUf9nR_-3h1_aNxROQw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:86:c8:b8:ab:52:30:c5:cb:22:d2:15:c7:22:d6:f7:5f:da:
         f0:ec:fa:09:60:f5:b8:0f:87:99:0f:ea:b4:56:8a:79:9e:e5:
         3e:4c:98:65:1e:26:c8:6d:11:ca:fb:64:2b:18:bd:06:9a:25:
         99:52:d8:28:7b:e5:a2:6d:7f:7a:4d:1d:be:f3:0f:ea:b2:b5:
         45:93:23:eb:cf:78:5b:b4:22:ec:10:a3:a2:31:c4:c5:dd:15:
         24:67:e4:5c:2b:4e:5f:3f:ab:00:f7:41:3b:3a:ae:43:20:fe:
         be:bf:2d:02:96:c8:90:77:04:20:96:42:0f:0b:cb:b1:51:ca:
         89:2d:fc:9b:ef:ea:a6:c9:8d:13:19:74:09:d3:4d:06:0c:52:
         73:ca:e6:e6:49:fb:a7:f4:0c:ea:15:1b:4f:90:ef:39:5d:49:
         16:11:24:ef:d4:e4:f5:a9:19:52:10:3e:ce:95:cb:19:34:50:
         29:22:5e:ef:90:c8:71:75:72:fa:a4:95:d5:1d:8d:00:d5:10:
         6f:45:1d:fe:3c:8e:37:c2:fe:82:b1:65:3b:52:50:d8:26:31:
         3e:8b:b3:98:fa:1a:ad:80:cf:0e:99:55:d4:31:0c:ed:e6:42:
         ff:1c:d1:75:f9:8c:d3:b3:53:17:cb:85:c1:10:46:83:b3:47:
         8d:56:8b:28
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYg1Zh161bMf0KwWkg4GTwyYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTE5MTkwNDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTA2YmEyNzY2NTQ0MTQ3ZmQ5ZDFmZmVkZTFkN2Y2OGRjNTEzOTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4+2dsvok9l0cPuRR8sIGshMffvQ
ITFD+f2XOocvrdm6jkPDXggQ54Cms1iAsKWZNFkfsOc1kcdIwwnBi90kkMwQxkwQ
XLAXtOvB+icySoA2OGOWE/g7OH1kCEOMoDf0eGio9Q+s8Qs1h659kz+K71XzavWa
5wxWc3QQy48OBI8LxYVKqvukFNgc89iGDUn4vDvSgaRhgOJ9/dK3DjgadS7w6gL1
76bDFz1vEiEcuN2NuXdAodR+K3fkgGwHFeK5DmaufH9Jbf3eTnMl7iFX0XIq3pXa
emGgDUycMjvoFSubXFefpjZXu/Z7Gh8/DkEjqkrnRY+YyRJS2Fji2/obUwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPEGuidmVEFH/Z0f/t4df2jcUTkMMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOFFhNkoyWlVRVWY5blJfLTNoMV9hTnhST1F3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACWGyLirUjDFyyLSFcci
1vdf2vDs+glg9bgPh5kP6rRWinme5T5MmGUeJshtEcr7ZCsYvQaaJZlS2Ch75aJt
f3pNHb7zD+qytUWTI+vPeFu0IuwQo6IxxMXdFSRn5FwrTl8/qwD3QTs6rkMg/r6/
LQKWyJB3BCCWQg8Ly7FRyokt/Jvv6qbJjRMZdAnTTQYMUnPK5uZJ+6f0DOoVG0+Q
7zldSRYRJO/U5PWpGVIQPs6Vyxk0UCkiXu+QyHF1cvqkldUdjQDVEG9FHf48jjfC
/oKxZTtSUNgmMT6Ls5j6Gq2Azw6ZVdQxDO3mQv8c0XX5jNOzUxfLhcEQRoOzR41W
iyg=
-----END CERTIFICATE-----
Generated at Sun Dec 21 21:30:40 2025 by rpki-client