This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GuBHZKLqT0PGjFKiYNXqhbBbX0k.roa
File:                     GuBHZKLqT0PGjFKiYNXqhbBbX0k.roa (raw, json)
Hash identifier:          TgrlLbFsKfbyKGNoLhEcbTa1ZS2nbgKICWW87sbG6xA=
Subject key identifier:   1A:E0:47:64:A2:EA:4F:43:C6:8C:52:A2:60:D5:EA:85:B0:5B:5F:49
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01884B1A74CA8626D2C25750575C646E47AF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GuBHZKLqT0PGjFKiYNXqhbBbX0k.roa
Signing time:             Wed 24 May 2023 00:13:25 +0000
ROA not before:           Wed 24 May 2023 00:13:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:4b:1a:74:ca:86:26:d2:c2:57:50:57:5c:64:6e:47:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 24 00:13:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1ae04764a2ea4f43c68c52a260d5ea85b05b5f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c2:8b:08:92:3c:bf:19:7c:6b:2a:9a:ee:8f:
                    cd:f4:f2:bd:0d:ff:a0:2d:8f:a9:bb:ea:a4:3a:4d:
                    7f:8e:e1:32:76:c7:2a:4d:36:f4:87:92:a5:9f:e9:
                    b7:d4:68:20:43:8b:72:bd:de:ca:07:65:03:94:cb:
                    1c:12:41:d3:f2:bb:19:92:84:15:e5:30:0b:fa:08:
                    d1:23:6f:de:65:31:64:dd:a9:97:ce:5f:4d:62:65:
                    49:bc:22:cc:cd:4e:77:8e:32:df:c1:c6:c2:82:69:
                    66:7f:8e:ce:75:4d:c7:e4:3e:eb:e3:41:34:6e:a2:
                    65:02:5c:25:8c:63:33:46:fb:99:6e:10:81:cb:f6:
                    36:1c:01:a0:e4:e7:ef:ba:e4:67:c7:c7:ec:8b:69:
                    2d:27:be:fd:0a:26:7e:7a:eb:97:c4:08:36:69:2b:
                    e3:41:97:95:fa:f3:84:a8:c1:ea:24:df:e1:dd:9b:
                    65:d1:ce:f8:72:cd:90:2b:e1:fb:93:9e:27:c9:c8:
                    61:68:15:5c:37:6c:25:6a:6c:d8:b1:3f:49:29:e4:
                    65:28:0c:70:c6:1f:fb:de:39:a2:51:f3:74:2a:59:
                    5a:d0:a8:d9:fd:63:61:7a:da:2b:49:c5:cb:0e:8b:
                    1c:98:02:3e:b8:86:f7:97:a7:4d:24:2c:34:92:68:
                    8a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E0:47:64:A2:EA:4F:43:C6:8C:52:A2:60:D5:EA:85:B0:5B:5F:49
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GuBHZKLqT0PGjFKiYNXqhbBbX0k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:1c:1c:54:da:68:52:4b:87:0f:13:28:cb:a0:9e:2d:30:c8:
         44:85:41:f1:ea:46:8d:d3:10:ed:90:7a:9b:f1:71:79:9c:9d:
         91:f1:15:4d:80:29:63:54:f1:4a:c9:55:88:24:f6:49:5a:45:
         94:33:24:45:cf:14:0f:72:8f:be:3c:c5:47:bc:f9:20:c1:1c:
         fa:2a:8d:f3:ab:ea:14:76:c3:d7:9c:38:db:f3:03:e1:9b:48:
         19:76:de:b7:e1:7b:6e:22:f0:e9:28:76:df:ba:87:60:87:11:
         c0:6f:6d:19:7b:c7:92:62:16:eb:45:64:1f:9d:b3:2b:d9:7f:
         91:76:4a:1a:a1:32:d1:04:cb:7a:42:48:d8:b8:3a:8b:e5:30:
         f3:ac:79:8a:8a:4e:d1:45:95:2e:c8:bb:58:2e:50:60:2b:e5:
         be:47:92:1d:fc:06:1d:e0:49:c1:91:59:65:99:22:d3:be:d4:
         c9:96:f7:46:8d:de:fa:e6:9b:de:38:54:5c:97:f0:24:15:d6:
         dd:d7:e3:db:64:de:2a:28:12:5d:90:b3:fd:fc:ff:6f:ad:50:
         18:dd:4a:7b:13:61:72:0e:78:4e:75:2a:22:fe:b3:29:47:dc:
         f2:cb:ea:b4:40:0b:ba:d3:bc:e4:f0:56:a9:6b:9d:0b:f1:9f:
         81:3c:e8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 04:24:22 2025 by rpki-client