This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jh_mnuTM9dhBu1fBiU5P0fLozog.roa
File:                     Jh_mnuTM9dhBu1fBiU5P0fLozog.roa (raw, json)
Hash identifier:          wS880dthcyV9mM5L1IVBq7XQ6bisW/eWSaKR65JeCBM=
Subject key identifier:   26:1F:E6:9E:E4:CC:F5:D8:41:BB:57:C1:89:4E:4F:D1:F2:E8:CE:88
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01867FB471A3C6F5000D4BF9EAD1F4C9FF32
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jh_mnuTM9dhBu1fBiU5P0fLozog.roa
Signing time:             Thu 23 Feb 2023 19:16:17 +0000
ROA not before:           Thu 23 Feb 2023 19:16:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:7f:b4:71:a3:c6:f5:00:0d:4b:f9:ea:d1:f4:c9:ff:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb 23 19:16:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=261fe69ee4ccf5d841bb57c1894e4fd1f2e8ce88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7a:a9:99:d8:23:ca:68:4e:bf:89:eb:e5:7f:
                    a6:2d:6c:11:97:d4:e4:57:61:8d:28:da:96:f7:35:
                    0d:ba:93:d0:c2:76:ec:a4:5c:42:5f:17:08:e4:ce:
                    4f:81:4d:47:9b:33:f0:bd:72:87:07:e6:24:e2:d8:
                    22:d0:02:9f:ae:6a:7e:03:33:10:91:b9:17:27:b2:
                    58:7d:07:c2:9d:0b:8e:5b:63:20:07:4e:f1:63:f1:
                    9d:f3:a2:6e:75:5c:ed:ca:c8:87:b7:5a:03:39:8c:
                    f5:e4:a0:ab:43:0b:28:53:79:cb:67:de:df:95:35:
                    44:d0:bb:a2:8c:c3:86:79:d7:81:d2:fe:ad:34:b3:
                    79:91:da:a9:4e:c5:89:20:33:08:17:46:93:53:d2:
                    ad:5f:1f:a9:73:ac:de:5b:3f:9a:b1:0b:86:b6:2f:
                    ab:94:b5:49:b9:4f:17:43:49:e9:7d:f9:4d:f2:c4:
                    93:36:40:2c:be:09:48:61:55:db:0a:20:66:68:a2:
                    33:c1:51:7b:b2:f5:13:ef:15:c6:ea:3e:7e:8b:ff:
                    e5:22:5a:0e:bf:be:e5:3f:de:39:ef:9c:f5:22:29:
                    e5:23:29:90:2b:03:e3:fc:98:c8:cd:6f:16:cf:5b:
                    f1:af:3a:c0:84:ff:5b:2c:c1:57:01:88:54:13:59:
                    3f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1F:E6:9E:E4:CC:F5:D8:41:BB:57:C1:89:4E:4F:D1:F2:E8:CE:88
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Jh_mnuTM9dhBu1fBiU5P0fLozog.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:4b:a1:f7:f6:f0:79:1d:9e:7b:ae:c0:b8:de:e6:42:00:f4:
         06:d8:15:19:38:05:06:33:a4:2c:a5:96:36:2c:a9:24:0b:8c:
         24:e3:48:99:17:1e:0d:4b:fd:89:44:00:5c:c6:e7:d9:34:de:
         a3:2a:67:e4:ad:b2:fc:25:d7:0a:29:0c:7d:f1:98:ae:c9:75:
         13:34:00:88:1c:ea:d7:f4:ef:94:94:b1:24:07:92:b8:04:3c:
         26:bc:48:d4:6a:06:a5:d9:67:a5:3b:73:a2:8b:ea:40:82:11:
         d7:f2:3a:77:da:62:6a:df:f0:02:b9:49:29:c1:99:09:38:2a:
         aa:05:79:b6:c8:c0:8e:5a:92:77:11:1d:45:07:28:80:d3:84:
         0b:4d:64:55:b4:90:2f:1e:54:2d:50:cc:e4:60:c7:e3:62:fc:
         c4:1e:6f:65:a7:66:2b:b7:7b:8c:dc:9c:31:61:67:9d:f2:19:
         6c:f0:dd:81:9b:a6:d2:32:82:f4:cd:fa:9e:d9:d1:7b:c3:3c:
         46:64:67:3a:bc:ea:56:4f:58:8d:8a:39:a1:54:42:39:6c:d3:
         71:09:f2:30:f7:b0:0d:c3:bf:71:e0:89:1c:f0:72:8e:6c:24:
         47:93:4f:5c:e4:e4:0e:b1:cd:42:be:40:ff:5a:55:19:b5:24:
         dd:24:38:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:36:05 2025 by rpki-client