This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GDMDTFIz-GjCR0IcKgDqAEhOIzE.roa
File:                     GDMDTFIz-GjCR0IcKgDqAEhOIzE.roa (raw, json)
Hash identifier:          X8jwVc1rAiO1Bg6lpRtF2SzoUsf8hwuVLHGxbpVwg74=
Subject key identifier:   18:33:03:4C:52:33:F8:68:C2:47:42:1C:2A:00:EA:00:48:4E:23:31
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01884884879B1068E13FDD74D022DCD72B14
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GDMDTFIz-GjCR0IcKgDqAEhOIzE.roa
Signing time:             Tue 23 May 2023 12:10:25 +0000
ROA not before:           Tue 23 May 2023 12:10:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:48:84:87:9b:10:68:e1:3f:dd:74:d0:22:dc:d7:2b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 23 12:10:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1833034c5233f868c247421c2a00ea00484e2331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:43:4f:42:f8:e7:f1:f7:8e:7b:b3:93:79:12:
                    55:b2:17:36:59:a0:f0:5e:da:7e:c9:ce:08:50:ce:
                    ab:c5:de:ff:e7:2d:ee:cf:a5:f4:2c:77:f8:d8:f2:
                    df:78:0a:34:0e:93:27:9c:b7:fd:be:52:b3:33:a3:
                    80:ef:4e:e0:43:15:d3:c8:3e:d3:d3:0b:9a:1a:fe:
                    b0:4f:5e:be:a4:9d:46:0e:1e:e1:b1:f3:f6:97:5d:
                    6d:36:78:f6:23:6d:a5:45:78:31:51:61:38:11:7d:
                    ab:4a:06:fe:10:b2:be:1a:e5:48:f8:0b:18:ce:88:
                    79:60:75:d6:11:c2:fa:41:58:02:72:6f:5e:79:09:
                    3a:b4:c5:b8:a3:19:b2:0b:f3:96:e8:40:66:40:36:
                    36:a1:39:97:96:c5:57:40:1e:17:f1:a1:48:3d:9e:
                    56:33:8d:be:5b:ca:0c:68:d3:df:f9:ec:9a:85:ff:
                    94:42:26:d7:94:ef:75:0f:07:c1:59:09:25:01:00:
                    8d:24:ec:56:8a:5d:15:c4:df:4e:b4:da:1a:1d:9e:
                    c2:f8:c2:96:3d:9b:40:d3:55:5e:b9:d3:f5:1a:de:
                    b7:1d:c9:1b:bd:08:b6:39:57:3e:2d:79:fa:56:94:
                    d5:15:7a:a1:28:31:50:37:24:f8:ec:3c:2d:70:75:
                    29:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:33:03:4C:52:33:F8:68:C2:47:42:1C:2A:00:EA:00:48:4E:23:31
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GDMDTFIz-GjCR0IcKgDqAEhOIzE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:dd:8c:57:6a:ec:56:5e:2a:0d:00:86:0e:24:89:36:f3:7c:
         d1:9c:c0:7b:2b:7a:cd:a6:0c:b3:e1:3b:b1:3f:60:72:df:3c:
         06:2d:aa:88:ad:3c:4c:20:3e:93:71:00:93:3d:28:60:cc:f4:
         d3:6b:f6:3b:33:b5:9f:30:f0:51:0e:4c:4d:a8:37:83:d4:ae:
         13:11:49:cd:f1:99:dd:77:dd:1b:f6:3f:9a:60:2c:00:2b:9e:
         b2:b2:a4:40:f6:54:0a:c3:ce:c4:c4:db:5a:b4:f7:ad:e4:49:
         55:ae:31:13:7b:9a:de:5d:3d:d1:aa:c7:f0:c3:55:70:18:54:
         7c:0d:df:18:bb:2a:b4:d9:bb:cc:01:63:21:d0:d8:62:8d:08:
         97:3b:8c:82:99:c1:5c:ec:98:71:87:52:4b:37:0d:4a:06:dc:
         d8:f0:f9:72:d1:6a:33:25:9d:a5:33:7b:0b:99:82:2d:4c:3c:
         a5:f8:54:88:65:f1:f2:f6:53:40:c4:96:93:86:ce:7c:80:5d:
         de:1d:17:d2:29:73:dc:9f:31:b8:c0:72:9a:d9:b1:04:fd:32:
         b5:63:eb:f6:07:f8:0e:fd:ff:ff:29:b1:2d:32:40:bb:5f:87:
         b1:19:fa:33:09:49:ac:80:85:f2:9c:84:42:c7:bc:85:98:19:
         b7:a2:b6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:28:53 2025 by rpki-client