This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MTzv2CiQlvebw7zQmoTsCGLHPpM.roa
File:                     MTzv2CiQlvebw7zQmoTsCGLHPpM.roa (raw, json)
Hash identifier:          v7D8/8B+qhIBIMK0XLXB2ELQ9BmluBWJwtbfWqPHoUM=
Subject key identifier:   31:3C:EF:D8:28:90:96:F7:9B:C3:BC:D0:9A:84:EC:08:62:C7:3E:93
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       7F4FC2C7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MTzv2CiQlvebw7zQmoTsCGLHPpM.roa
Signing time:             Thu 28 Apr 2022 18:10:31 +0000
ROA not before:           Thu 28 Apr 2022 18:10:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2135933639 (0x7f4fc2c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 28 18:10:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=313cefd8289096f79bc3bcd09a84ec0862c73e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6a:21:7a:cf:f0:d1:13:cc:d8:5b:66:fa:68:
                    d0:45:2c:26:8d:6b:67:5b:ad:44:71:c7:2e:1b:18:
                    b0:da:e3:81:2c:f0:b8:ac:bb:8b:78:90:f1:b6:cd:
                    c8:5e:ef:09:bf:6b:dd:17:02:61:dd:03:3e:97:a5:
                    89:63:a6:68:eb:46:ed:55:f7:f4:ee:4a:eb:4f:b3:
                    dd:95:4b:71:4f:83:00:f5:0d:e8:f9:87:55:3c:41:
                    5d:0d:5d:cf:09:73:50:77:cc:b6:cf:f7:ce:b9:f2:
                    9e:eb:18:1b:f6:ab:05:99:cc:20:f6:d7:61:1b:14:
                    57:d9:69:df:a0:20:13:a1:9d:ba:51:9c:2a:77:87:
                    00:e0:17:04:17:81:6e:dd:ea:71:e7:9c:d5:7a:32:
                    91:55:b0:a3:27:63:e0:06:3d:9e:6f:68:c1:4d:9a:
                    bc:37:56:9e:84:d4:7e:6d:e0:b2:81:bf:33:ac:8c:
                    5e:5f:70:bd:d9:6d:06:64:92:f3:de:1d:7d:ae:9c:
                    4b:d2:f4:2d:94:02:be:c5:d9:78:21:6b:88:a0:33:
                    00:f5:9f:87:e4:71:3c:8e:df:01:e9:71:38:78:95:
                    96:36:62:88:69:23:65:8f:f5:23:a5:c6:2a:3f:f7:
                    37:7b:89:39:2c:63:25:b6:5c:6d:8a:3d:17:a9:0d:
                    fe:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3C:EF:D8:28:90:96:F7:9B:C3:BC:D0:9A:84:EC:08:62:C7:3E:93
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MTzv2CiQlvebw7zQmoTsCGLHPpM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:97:a1:5f:54:10:34:8a:06:f6:98:0f:b0:01:a4:3f:70:97:
         e3:95:ab:0d:e6:ec:10:a2:8b:08:9c:c7:05:e5:da:c4:bf:74:
         3a:ba:91:46:b1:63:bd:7a:68:b5:42:71:de:e5:f7:93:0a:4e:
         f1:8b:6a:60:a2:25:48:db:79:5b:2d:2b:66:b4:8a:67:12:10:
         f3:af:53:51:f7:3d:8a:81:e0:8a:38:55:4e:f1:20:a5:be:aa:
         5e:e5:7b:a7:de:40:ac:27:06:47:30:ae:14:16:0f:6c:a6:18:
         0a:b9:56:61:b9:07:1b:bd:11:a6:db:7e:b9:53:af:b1:50:a9:
         be:e4:b2:db:7c:df:e3:82:df:ef:b3:3e:16:84:3c:7d:d0:2c:
         8d:ff:d2:d2:0a:3e:e3:b2:02:5c:2e:57:af:88:2f:0f:58:dd:
         79:7e:85:9d:0e:52:ec:3e:9e:53:1a:b5:ea:a9:2c:05:43:9a:
         00:57:d9:d8:0c:00:26:61:e3:79:ec:97:6b:68:c4:09:15:ab:
         76:bd:e1:55:34:33:70:f3:da:2d:a3:33:29:cc:7a:d1:f2:0f:
         92:42:7f:aa:e3:aa:57:c3:7c:99:e8:e0:45:fb:fa:a6:70:80:
         cb:a7:1b:c6:f2:72:03:e0:55:02:91:83:dd:c7:e5:8c:81:66:
         ab:b4:5e:92
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEf0/CxzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDQy
ODE4MTAzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzEzY2VmZDgyODkw
OTZmNzliYzNiY2QwOWE4NGVjMDg2MmM3M2U5MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALtqIXrP8NETzNhbZvpo0EUsJo1rZ1utRHHHLhsYsNrjgSzw
uKy7i3iQ8bbNyF7vCb9r3RcCYd0DPpeliWOmaOtG7VX39O5K60+z3ZVLcU+DAPUN
6PmHVTxBXQ1dzwlzUHfMts/3zrnynusYG/arBZnMIPbXYRsUV9lp36AgE6GdulGc
KneHAOAXBBeBbt3qceec1XoykVWwoydj4AY9nm9owU2avDdWnoTUfm3gsoG/M6yM
Xl9wvdltBmSS894dfa6cS9L0LZQCvsXZeCFriKAzAPWfh+RxPI7fAelxOHiVljZi
iGkjZY/1I6XGKj/3N3uJOSxjJbZcbYo9F6kN/kMCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQxPO/YKJCW95vDvNCahOwIYsc+kzAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L01UenYyQ2lRbHZlYnc3elFtb1RzQ0dMSFBwTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAOl6FfVBA0igb2mA+wAaQ/cJfjlasN5uwQoosI
nMcF5drEv3Q6upFGsWO9emi1QnHe5feTCk7xi2pgoiVI23lbLStmtIpnEhDzr1NR
9z2KgeCKOFVO8SClvqpe5Xun3kCsJwZHMK4UFg9sphgKuVZhuQcbvRGm2365U6+x
UKm+5LLbfN/jgt/vsz4WhDx90CyN/9LSCj7jsgJcLleviC8PWN15foWdDlLsPp5T
GrXqqSwFQ5oAV9nYDAAmYeN57JdraMQJFat2veFVNDNw89otozMpzHrR8g+SQn+q
46pXw3yZ6OBF+/qmcIDLpxvG8nID4FUCkYPdx+WMgWartF6S
-----END CERTIFICATE-----
Generated at Sat Dec 20 14:00:58 2025 by rpki-client