This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Aak5mlbqCeGOw70xuGlBL3VYPp8.roa
File:                     Aak5mlbqCeGOw70xuGlBL3VYPp8.roa (raw, json)
Hash identifier:          G7A/wmNuL2BLWqbqs59RArmcyekevL5hbkAE8pZNCTM=
Subject key identifier:   01:A9:39:9A:56:EA:09:E1:8E:C3:BD:31:B8:69:41:2F:75:58:3E:9F
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186EEDA44FB1910FDA5669115DB6C2320DB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Aak5mlbqCeGOw70xuGlBL3VYPp8.roa
Signing time:             Fri 17 Mar 2023 09:15:27 +0000
ROA not before:           Fri 17 Mar 2023 09:15:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ee:da:44:fb:19:10:fd:a5:66:91:15:db:6c:23:20:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 17 09:15:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=01a9399a56ea09e18ec3bd31b869412f75583e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:46:a5:5a:0a:e3:d4:72:02:2b:21:c7:3b:8b:
                    b5:29:1e:b7:d2:40:9b:6b:30:ea:99:0c:9f:35:a2:
                    d7:4d:9f:79:af:6a:ba:a1:48:dd:af:d5:ef:75:c4:
                    7d:2a:ed:4b:ad:32:90:f6:8a:7c:e8:b5:d1:3d:2a:
                    a0:14:d2:36:5c:29:1d:fd:e5:f7:6c:40:d4:1e:40:
                    4a:82:f7:77:b0:f5:a8:68:13:74:e9:59:6f:83:16:
                    bb:68:8f:c9:db:37:5b:ed:f0:4f:97:c4:02:5b:b6:
                    e4:a7:08:d1:0d:76:5f:db:3b:a8:8f:2a:38:d1:9e:
                    1a:ff:45:26:ee:9d:f4:a3:fe:3f:e6:36:77:84:14:
                    7c:f9:4e:e3:41:e3:1c:25:e2:48:09:9c:d3:7f:d0:
                    c2:83:29:1f:d5:8c:4b:09:ce:9c:05:93:0e:3d:bb:
                    bb:fa:ab:a2:aa:5e:c8:8c:ec:d8:6b:84:ff:2f:b0:
                    50:f0:30:bb:3a:eb:0e:53:08:61:1a:09:a2:08:5a:
                    b4:37:a9:c8:61:15:bf:0a:b1:4e:d1:45:d1:65:47:
                    2d:e6:47:c9:13:92:52:ee:d3:c7:23:a7:39:e6:fc:
                    c6:15:e6:4b:62:8b:1f:34:ee:dd:d2:40:5b:e0:eb:
                    75:b5:4e:23:f5:ba:fe:06:62:7c:de:3a:80:1e:a8:
                    e0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A9:39:9A:56:EA:09:E1:8E:C3:BD:31:B8:69:41:2F:75:58:3E:9F
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Aak5mlbqCeGOw70xuGlBL3VYPp8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:7c:0a:76:03:6e:f8:91:fe:97:cb:8e:6c:06:1a:cc:66:05:
         29:76:89:b7:ad:a2:28:55:0e:54:4a:f3:4f:0e:e3:87:59:45:
         f9:7f:1e:94:ec:bd:a7:d7:84:c8:6b:2b:29:0d:a6:10:c6:64:
         59:72:e3:63:df:d8:b1:18:9c:e1:99:bd:c4:a6:f7:3b:0d:4f:
         5a:9b:bd:d0:f7:e7:63:80:a3:04:1b:39:cc:04:29:32:56:6c:
         f1:92:2e:08:92:0e:bb:4e:57:ab:4a:cd:5f:b7:e3:2b:d7:71:
         b6:d4:ae:be:c3:6f:c8:e5:1b:3e:c9:6e:c6:a1:7e:55:31:1d:
         2e:37:24:48:60:a6:9b:26:2e:8b:a5:67:79:e5:48:ba:44:4d:
         47:e6:03:1c:33:fe:d9:8e:a2:8b:2c:ce:94:2c:4f:7f:8a:7a:
         cc:40:86:1b:37:99:e9:65:93:73:8c:99:8f:55:70:68:fb:cd:
         c4:0f:e0:7d:67:49:4a:45:16:cb:24:11:b3:e7:c1:26:4c:62:
         64:af:23:f6:98:46:ba:a3:8a:a7:9b:7f:7f:c3:ff:a6:1a:cb:
         71:e3:e7:e1:07:f0:28:f1:05:1f:57:da:a8:33:7a:25:00:8e:
         25:92:b6:b5:73:76:95:a1:2a:ac:4b:7e:90:d7:6a:99:e8:ed:
         9b:be:1d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 02:09:13 2025 by rpki-client