This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I6ESWvHR3IGO0IjkWDzCFqlIo9E.roa
File:                     I6ESWvHR3IGO0IjkWDzCFqlIo9E.roa (raw, json)
Hash identifier:          4gXX5oIA70KxLVI34TcI0A+YBOxrP5bIKR6usrJFGm8=
Subject key identifier:   23:A1:12:5A:F1:D1:DC:81:8E:D0:88:E4:58:3C:C2:16:A9:48:A3:D1
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01870ABDD994FDAB41F94F19A6C57516EFDC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I6ESWvHR3IGO0IjkWDzCFqlIo9E.roa
Signing time:             Wed 22 Mar 2023 19:13:46 +0000
ROA not before:           Wed 22 Mar 2023 19:13:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0a:bd:d9:94:fd:ab:41:f9:4f:19:a6:c5:75:16:ef:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 22 19:13:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=23a1125af1d1dc818ed088e4583cc216a948a3d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1e:31:05:44:31:61:d6:b5:3b:80:09:93:6d:
                    a5:ea:ca:7c:ec:43:4a:af:20:46:ec:61:c7:a3:e7:
                    23:d4:f8:c6:4f:6f:ba:d8:4e:df:cd:af:cd:cd:7b:
                    ab:27:55:b1:56:8e:e1:2d:22:76:0e:a8:fe:bc:16:
                    e0:14:33:7d:9c:2f:ca:a4:65:7b:65:7f:80:7d:2a:
                    74:88:39:93:d8:15:06:f9:31:0b:6c:40:ff:68:fb:
                    d8:c1:21:1e:e0:da:50:90:e5:03:a8:6d:63:d2:65:
                    fb:d9:c8:f1:f3:0a:f0:f3:b0:2e:c1:0b:91:c4:86:
                    8b:16:d7:8a:a8:4a:84:fa:10:bb:fb:8e:c8:bc:e7:
                    c2:60:c1:1c:49:5c:9a:c3:b1:56:0b:b9:52:75:97:
                    4e:db:75:d1:ff:77:d3:5b:59:79:f0:f4:69:db:9f:
                    76:fe:a7:e1:55:dc:0a:28:55:68:9d:35:fb:e2:b7:
                    fe:6f:7a:0a:41:eb:1e:0f:fb:14:d5:ad:63:8f:ae:
                    0c:00:13:eb:89:f3:09:21:a5:25:26:20:3c:b3:e1:
                    9e:4e:e6:83:68:e0:9d:80:f5:d5:6c:e0:05:88:c7:
                    06:88:e3:cb:8c:a7:7e:ac:58:af:8f:e5:3a:c3:7b:
                    3e:42:4c:c5:55:52:21:cc:d9:07:59:5e:89:8c:28:
                    5e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A1:12:5A:F1:D1:DC:81:8E:D0:88:E4:58:3C:C2:16:A9:48:A3:D1
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I6ESWvHR3IGO0IjkWDzCFqlIo9E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:44:2e:d4:9c:03:51:ba:a8:69:22:33:fe:96:54:5d:b5:a9:
         f0:7d:a0:0d:d4:44:b8:e4:3e:05:6a:8e:a7:b0:9e:e6:88:8a:
         15:a1:f4:34:78:15:6e:74:d5:50:21:9e:1d:e4:47:ba:0e:44:
         6d:da:07:b6:2f:2f:96:a0:90:5c:fa:07:bc:44:da:21:0c:0e:
         a8:34:4e:52:b8:1e:cf:0e:18:1e:83:a0:f8:7f:6b:c9:f5:22:
         32:ba:95:20:d1:1d:a4:03:a5:92:e0:ca:96:b4:df:2b:97:e8:
         2a:63:36:56:15:92:59:c5:4b:05:aa:08:27:50:6f:6c:5a:e1:
         f3:4b:b1:c0:3a:68:73:0b:ea:93:6f:59:21:d0:f2:d9:49:ae:
         d4:f2:03:30:b3:b3:23:38:14:36:37:54:b5:8c:3b:3b:12:49:
         3d:7c:c5:5e:9a:97:0c:bb:8e:83:19:ec:04:81:ed:96:0c:32:
         fa:b0:51:fb:ee:e6:93:5d:92:94:52:fd:be:73:39:00:dd:c4:
         1b:d5:75:ca:c2:c0:4e:e3:f8:86:e4:e6:b7:b9:1c:c4:a6:3e:
         bd:0d:6c:6a:9b:b8:8f:d7:a4:89:5a:99:57:06:9b:9e:17:30:
         00:2b:1d:1c:80:39:b9:fb:fc:2c:b3:93:7a:64:7e:d1:f6:1a:
         b3:d1:f8:df
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcKvdmU/atB+U8ZpsV1Fu/cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzIyMTkxMzQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2ExMTI1YWYxZDFkYzgxOGVkMDg4ZTQ1ODNjYzIxNmE5NDhhM2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgx4xBUQxYda1O4AJk22l6sp87ENK
ryBG7GHHo+cj1PjGT2+62E7fza/NzXurJ1WxVo7hLSJ2Dqj+vBbgFDN9nC/KpGV7
ZX+AfSp0iDmT2BUG+TELbED/aPvYwSEe4NpQkOUDqG1j0mX72cjx8wrw87AuwQuR
xIaLFteKqEqE+hC7+47IvOfCYMEcSVyaw7FWC7lSdZdO23XR/3fTW1l58PRp2592
/qfhVdwKKFVonTX74rf+b3oKQeseD/sU1a1jj64MABPrifMJIaUlJiA8s+GeTuaD
aOCdgPXVbOAFiMcGiOPLjKd+rFivj+U6w3s+QkzFVVIhzNkHWV6JjChecwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCOhElrx0dyBjtCI5Fg8whapSKPRMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSTZFU1d2SFIzSUdPMElqa1dEekNGcWxJbzlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKJELtScA1G6qGkiM/6W
VF21qfB9oA3URLjkPgVqjqewnuaIihWh9DR4FW501VAhnh3kR7oORG3aB7YvL5ag
kFz6B7xE2iEMDqg0TlK4Hs8OGB6DoPh/a8n1IjK6lSDRHaQDpZLgypa03yuX6Cpj
NlYVklnFSwWqCCdQb2xa4fNLscA6aHML6pNvWSHQ8tlJrtTyAzCzsyM4FDY3VLWM
OzsSST18xV6alwy7joMZ7ASB7ZYMMvqwUfvu5pNdkpRS/b5zOQDdxBvVdcrCwE7j
+Ibk5re5HMSmPr0NbGqbuI/XpIlamVcGm54XMAArHRyAObn7/Cyzk3pkftH2GrPR
+N8=
-----END CERTIFICATE-----
Generated at Sun Dec 21 21:15:40 2025 by rpki-client