This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CDgjUBYStuj3kYb9CGUGcAqhBVc.roa
File:                     CDgjUBYStuj3kYb9CGUGcAqhBVc.roa (raw, json)
Hash identifier:          n0K4a2iSdgknZVdufKZ/xRIE5ELmmDOf/DBkSfp1fbA=
Subject key identifier:   08:38:23:50:16:12:B6:E8:F7:91:86:FD:08:65:06:70:0A:A1:05:57
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187232BA8BAA57602709826362A4BAF75F2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CDgjUBYStuj3kYb9CGUGcAqhBVc.roa
Signing time:             Mon 27 Mar 2023 13:04:36 +0000
ROA not before:           Mon 27 Mar 2023 13:04:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:187:232b:698a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:23:2b:a8:ba:a5:76:02:70:98:26:36:2a:4b:af:75:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 27 13:04:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=083823501612b6e8f79186fd086506700aa10557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:73:f6:9d:88:d4:46:7b:89:42:c3:57:da:3a:
                    b5:45:77:be:11:a6:a7:96:50:bd:70:a1:af:cc:1c:
                    30:3b:3d:73:9e:1d:07:b0:b1:29:e6:85:77:01:be:
                    75:ce:f3:ad:43:98:4d:60:c6:51:32:91:da:36:e0:
                    42:da:72:1a:bd:3a:c5:e1:94:2a:40:55:6f:d5:f3:
                    8f:19:df:91:7b:47:3d:41:05:4a:3e:47:f7:2c:a5:
                    eb:61:49:9c:c3:02:10:38:4d:9e:43:42:76:11:e9:
                    fb:6e:fb:83:f3:45:1d:26:67:3d:70:8e:9d:d8:44:
                    6d:f2:7f:31:e9:63:d2:c5:45:2f:e9:5c:52:62:46:
                    48:73:63:bc:90:6d:a4:f8:5e:27:ff:24:3f:5a:ab:
                    1e:7d:e7:15:04:86:71:7c:36:68:6f:9d:51:b7:d3:
                    49:3e:74:ea:cb:80:fe:50:88:6b:67:40:df:46:44:
                    00:fe:e3:92:35:c2:ed:76:c7:a7:bf:90:69:9b:8d:
                    ba:2b:05:5e:7a:63:86:5b:9c:ac:1f:03:50:5e:59:
                    e8:cf:02:8b:09:5e:67:b6:a4:0b:bd:ce:24:c7:e0:
                    43:28:7b:da:e6:7f:92:39:24:27:84:6a:10:58:2b:
                    37:31:da:72:af:2d:de:20:45:2f:87:4b:b1:38:3e:
                    ef:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:38:23:50:16:12:B6:E8:F7:91:86:FD:08:65:06:70:0A:A1:05:57
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CDgjUBYStuj3kYb9CGUGcAqhBVc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:d5:19:6a:9b:e3:9f:28:4a:d8:61:91:4e:5e:48:2e:0c:1b:
         e4:66:05:23:1a:f5:c3:d0:61:6f:b2:f3:aa:6b:20:d1:ff:b9:
         43:9a:59:e4:68:dd:c1:ee:a2:76:e5:fb:66:04:8a:f5:13:5f:
         4c:95:f2:fa:e4:37:d6:b6:9d:09:35:ad:36:67:c7:27:c1:fd:
         22:95:56:8c:df:ab:52:08:73:8c:f6:21:0f:61:ac:d2:24:60:
         c8:fd:d8:06:f2:ea:97:37:94:39:65:92:13:68:15:c8:52:64:
         81:2a:ea:ac:fa:f8:a4:fd:5f:9d:5a:b7:00:32:63:c8:10:09:
         b4:f1:e0:3a:b2:20:b9:f2:95:61:d2:d2:c8:d6:77:4c:30:6a:
         8e:95:a4:e9:f2:b5:31:f5:44:70:67:c5:76:a9:84:6f:42:d6:
         e6:6b:21:38:a7:f9:5b:97:d8:a0:7c:95:65:7b:0b:42:89:29:
         41:33:04:37:25:eb:ee:7f:36:dc:8c:09:2f:99:95:51:33:ba:
         a2:8f:bf:eb:a1:34:55:dd:2b:a2:01:84:0c:f3:09:a8:a9:67:
         41:12:a6:3c:ce:8c:4a:f7:32:66:ab:5e:29:5e:06:14:5b:65:
         66:81:3c:c2:9d:e6:77:ea:4a:72:45:83:f1:60:0d:15:f4:09:
         40:e6:48:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:14:16 2025 by rpki-client