This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L2cQAQ2SOSIbkgeSxMFklnphW0w.roa
File:                     L2cQAQ2SOSIbkgeSxMFklnphW0w.roa (raw, json)
Hash identifier:          sSQIB/hszLq1J0QHyap3u/kEj0eoFqUkSAAyEAZMRXs=
Subject key identifier:   2F:67:10:01:0D:92:39:22:1B:92:07:92:C4:C1:64:96:7A:61:5B:4C
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01855647263A153E4290081B36D165E243DF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L2cQAQ2SOSIbkgeSxMFklnphW0w.roa
Signing time:             Wed 28 Dec 2022 01:09:41 +0000
ROA not before:           Wed 28 Dec 2022 01:09:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:56:47:26:3a:15:3e:42:90:08:1b:36:d1:65:e2:43:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Dec 28 01:09:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2f6710010d9239221b920792c4c164967a615b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ab:78:3b:0f:40:be:48:9c:ae:bf:bb:cf:7b:
                    0b:aa:8d:44:4c:65:d6:e1:72:19:f4:d2:3b:62:0e:
                    79:34:48:7a:52:d0:d7:22:62:74:84:72:b9:8c:5b:
                    db:83:43:96:bb:41:1a:ba:13:72:c0:90:5e:db:2e:
                    3a:f5:6b:ad:7c:1d:f2:48:e1:23:eb:ee:78:fa:25:
                    0f:ea:cc:52:07:eb:8c:b8:58:16:5f:f6:28:04:04:
                    8e:a3:b4:b9:2f:75:46:be:c6:c4:ac:ed:e7:3e:df:
                    28:4c:20:bb:9d:38:28:c9:64:d3:18:82:92:d1:ad:
                    30:6c:d6:b6:68:34:a3:fc:d9:b1:f4:5a:c1:4f:d6:
                    1b:e2:8c:06:f6:5e:f5:26:2e:6a:bf:db:73:34:17:
                    f6:a0:0c:8c:3b:95:d7:bb:17:88:59:f4:6e:4a:5a:
                    79:a3:97:28:49:78:0a:ac:41:ad:1a:4b:e2:f1:f3:
                    81:26:34:6e:ad:2c:a8:fd:46:ea:d8:85:f8:58:30:
                    d9:45:a6:36:2e:60:ce:71:fd:99:0d:3a:b3:ad:5d:
                    6c:6f:68:4a:b1:f9:5b:8d:a6:bb:fb:a4:56:40:87:
                    74:f6:1d:12:7e:96:3f:e6:fe:84:9d:d4:98:b0:3f:
                    b6:90:ec:05:84:e5:31:3e:5f:19:b4:e1:99:1b:d5:
                    22:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:67:10:01:0D:92:39:22:1B:92:07:92:C4:C1:64:96:7A:61:5B:4C
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L2cQAQ2SOSIbkgeSxMFklnphW0w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:06:3c:38:dc:40:41:fe:d6:9b:a3:86:19:06:73:07:a8:7c:
         7f:3e:da:83:fa:4d:da:96:ff:6c:7b:fa:3e:a8:41:9f:fe:0b:
         29:39:a6:92:cb:3e:c2:fa:95:17:56:47:7a:2a:76:5b:23:08:
         66:35:07:eb:53:ae:19:39:64:20:1f:f9:54:a1:cb:27:ab:bc:
         d1:eb:74:74:93:92:81:9a:22:d0:96:76:4c:91:44:3f:bc:05:
         80:27:d9:f2:fc:38:cc:2b:c3:de:a1:26:53:ee:b9:7a:b9:e3:
         82:72:8a:8e:84:44:fb:e9:3a:63:20:a0:99:41:39:23:6b:c6:
         02:cb:fd:30:b2:93:76:af:05:73:21:25:c5:ed:ad:c2:aa:5a:
         23:f8:8c:b2:3a:48:f1:e3:64:d4:9e:ac:d4:29:f8:34:c0:0c:
         89:9a:c4:d5:eb:7b:66:d4:01:2f:2c:d9:87:e2:47:7e:23:f0:
         d4:a0:48:ed:83:e5:8a:f0:a9:55:9f:96:38:a0:9f:3f:cb:12:
         96:8c:6e:5c:f3:08:d7:8a:02:3d:fa:31:f6:63:c5:2d:7f:87:
         f1:e8:ef:93:a3:2b:b4:ad:4c:7c:ba:38:e3:1f:c5:2a:15:33:
         c5:f3:ae:6d:88:36:be:d6:d4:41:2c:36:21:8c:5e:6c:06:de:
         f3:5e:18:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:11:39 2025 by rpki-client