This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A6My1EV9zfYuiji04qk_oVqSlEE.roa
File:                     A6My1EV9zfYuiji04qk_oVqSlEE.roa (raw, json)
Hash identifier:          hcVDVCdUmt1qYM/YH0VsxhMi/SkUVHYCO8nkzK29Jyw=
Subject key identifier:   03:A3:32:D4:45:7D:CD:F6:2E:8A:38:B4:E2:A9:3F:A1:5A:92:94:41
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018516FA3718A2A4D37394D691986D186FE6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A6My1EV9zfYuiji04qk_oVqSlEE.roa
Signing time:             Thu 15 Dec 2022 18:09:34 +0000
ROA not before:           Thu 15 Dec 2022 18:09:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:16:fa:37:18:a2:a4:d3:73:94:d6:91:98:6d:18:6f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Dec 15 18:09:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=03a332d4457dcdf62e8a38b4e2a93fa15a929441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8c:b7:b6:84:93:d2:f3:2a:64:b2:fe:ba:f2:
                    ab:d4:fc:d0:c9:49:cc:c0:41:6f:93:0f:7a:68:93:
                    2f:21:78:ad:ba:bd:a4:17:6e:9a:04:b6:bb:b4:35:
                    9f:e0:93:ab:28:b0:d3:3e:2f:13:8a:e0:44:09:e0:
                    66:04:2b:3d:b5:eb:bf:2e:bd:b2:75:01:00:19:b1:
                    a5:fc:f9:d7:57:0f:9c:89:91:eb:81:9f:e7:6a:f5:
                    4e:2c:59:93:fe:af:42:c3:6e:4a:5f:01:d4:9d:db:
                    1d:f8:d1:e2:d4:e5:77:10:ae:23:6f:14:68:37:8f:
                    79:b1:4c:5f:67:ea:88:1e:24:79:f7:a3:e1:1c:4e:
                    35:5e:4b:68:75:f6:43:84:91:5f:a7:88:c6:5f:5d:
                    39:86:6c:ee:4e:a2:40:52:de:54:d3:65:6e:dd:03:
                    3f:f2:bd:b2:ed:13:e7:25:7e:ae:17:7d:d9:d1:97:
                    65:c2:64:34:f5:1c:48:fe:cc:1e:95:c3:4b:08:75:
                    cc:48:3e:eb:df:30:ee:af:bd:33:06:77:1a:f5:5f:
                    5d:2f:c8:34:05:cf:91:bd:cb:51:99:66:3d:ca:b6:
                    c4:74:9d:b4:f3:c5:87:c9:2c:2b:e4:b0:4b:1d:75:
                    73:c5:41:5a:cf:cf:f9:5d:c1:91:57:93:57:e1:31:
                    c6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A3:32:D4:45:7D:CD:F6:2E:8A:38:B4:E2:A9:3F:A1:5A:92:94:41
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A6My1EV9zfYuiji04qk_oVqSlEE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:14:d0:ef:37:0f:9c:2e:9b:a2:ac:dc:6f:d4:9a:33:3e:58:
         c7:a5:02:6f:8e:eb:b0:52:a4:ba:fc:7a:0b:0a:da:cf:b8:d8:
         6c:ca:89:b0:d7:69:d7:0e:33:2e:0c:29:12:6d:6e:ca:3e:d0:
         c0:61:22:15:c7:41:eb:f0:27:bb:dd:b8:53:fe:23:30:95:0b:
         40:4b:18:9f:49:9a:2b:ce:2c:56:16:de:ba:ec:d2:4f:05:2c:
         e1:58:ac:1f:85:cf:67:db:e0:a1:9d:14:bc:8a:25:6d:38:6d:
         2f:73:99:ec:2a:2f:3b:55:95:c1:38:28:ca:4e:f9:ed:1f:2e:
         67:ab:98:c4:ca:b7:31:17:66:9c:f0:cc:d6:87:57:6b:da:be:
         89:3c:e5:5c:97:14:66:57:13:0f:fe:1e:c4:40:b2:1d:1a:a4:
         6b:69:91:ee:d7:47:b9:81:3c:36:93:04:2c:e1:83:1f:85:a4:
         2c:63:05:32:4a:b3:ab:aa:5f:3d:19:9b:38:07:bf:45:24:2d:
         b1:5a:6f:3e:82:be:1b:c1:aa:37:ac:29:d0:57:78:76:f1:b8:
         39:f9:e6:5a:42:cc:47:73:0b:07:95:2e:6d:da:ef:50:a9:d7:
         cd:1d:69:2c:06:a9:81:f8:56:72:39:d9:50:eb:f0:28:c9:99:
         48:34:21:09
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUW+jcYoqTTc5TWkZhtGG/mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE1MTgwOTM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2EzMzJkNDQ1N2RjZGY2MmU4YTM4YjRlMmE5M2ZhMTVhOTI5NDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYy3toST0vMqZLL+uvKr1PzQyUnM
wEFvkw96aJMvIXitur2kF26aBLa7tDWf4JOrKLDTPi8TiuBECeBmBCs9teu/Lr2y
dQEAGbGl/PnXVw+ciZHrgZ/navVOLFmT/q9Cw25KXwHUndsd+NHi1OV3EK4jbxRo
N495sUxfZ+qIHiR596PhHE41XktodfZDhJFfp4jGX105hmzuTqJAUt5U02Vu3QM/
8r2y7RPnJX6uF33Z0ZdlwmQ09RxI/swelcNLCHXMSD7r3zDur70zBnca9V9dL8g0
Bc+RvctRmWY9yrbEdJ2088WHySwr5LBLHXVzxUFaz8/5XcGRV5NX4THG2wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAOjMtRFfc32Loo4tOKpP6FakpRBMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQTZNeTFFVjl6Zll1aWppMDRxa19vVnFTbEVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADgU0O83D5wum6Ks3G/U
mjM+WMelAm+O67BSpLr8egsK2s+42GzKibDXadcOMy4MKRJtbso+0MBhIhXHQevw
J7vduFP+IzCVC0BLGJ9JmivOLFYW3rrs0k8FLOFYrB+Fz2fb4KGdFLyKJW04bS9z
mewqLztVlcE4KMpO+e0fLmermMTKtzEXZpzwzNaHV2vavok85VyXFGZXEw/+HsRA
sh0apGtpke7XR7mBPDaTBCzhgx+FpCxjBTJKs6uqXz0ZmzgHv0UkLbFabz6CvhvB
qjesKdBXeHbxuDn55lpCzEdzCweVLm3a71Cp180daSwGqYH4VnI52VDr8CjJmUg0
IQk=
-----END CERTIFICATE-----
Generated at Fri Dec 19 06:42:39 2025 by rpki-client