This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MZt-eIDn9cS_tNZy6JMVxnyQmU0.roa
File:                     MZt-eIDn9cS_tNZy6JMVxnyQmU0.roa (raw, json)
Hash identifier:          EWywxQexB2APrz1iYQL2qRWe7iZpd2PM4oRosizVJxk=
Subject key identifier:   31:9B:7E:78:80:E7:F5:C4:BF:B4:D6:72:E8:93:15:C6:7C:90:99:4D
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186F5477AB4F700762D41927A7A04D51397
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MZt-eIDn9cS_tNZy6JMVxnyQmU0.roa
Signing time:             Sat 18 Mar 2023 15:12:27 +0000
ROA not before:           Sat 18 Mar 2023 15:12:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:f5:47:7a:b4:f7:00:76:2d:41:92:7a:7a:04:d5:13:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 18 15:12:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=319b7e7880e7f5c4bfb4d672e89315c67c90994d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cd:4d:29:99:fe:4d:ff:fe:b9:14:5a:b0:e4:
                    69:89:2f:9e:53:78:ea:f6:59:57:9c:99:c0:2e:ad:
                    fe:5d:b1:0c:f8:7d:e5:89:75:86:2c:2d:79:10:8f:
                    ba:3b:9c:98:1a:39:ee:ad:9c:1a:cb:74:2f:3a:60:
                    ff:a8:8a:5e:49:d9:0a:c5:2d:68:b8:e4:1a:e0:97:
                    13:95:93:85:07:5a:a2:6b:47:76:df:e3:f3:ae:ba:
                    5c:cf:1d:64:d1:15:1f:1e:97:e7:ba:0d:33:97:85:
                    7d:c6:5e:e7:2a:80:4f:a2:fb:0a:95:2d:b4:15:46:
                    c6:ab:a3:70:21:d1:e7:6e:a7:37:65:26:c2:05:4b:
                    b0:3d:ce:e9:df:2f:a5:06:ed:7f:14:83:d8:9d:c2:
                    20:cd:40:0b:01:21:31:58:6a:03:85:73:7d:9f:6d:
                    d5:4d:43:2f:ed:6a:5e:01:29:68:45:f0:72:0a:1a:
                    9b:a9:33:b7:ab:da:2f:b1:bf:2a:78:ad:5d:7c:f4:
                    80:83:10:4f:6b:a2:d1:42:f9:b9:08:72:bb:fa:58:
                    d2:e5:c9:84:8e:9f:0f:4b:9a:dd:88:3d:09:dc:6b:
                    50:0a:44:24:9d:62:9a:a3:3b:76:a8:9d:8b:8a:68:
                    60:05:c8:d9:fc:d3:74:f4:8a:a2:fd:a8:23:dd:a7:
                    65:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9B:7E:78:80:E7:F5:C4:BF:B4:D6:72:E8:93:15:C6:7C:90:99:4D
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MZt-eIDn9cS_tNZy6JMVxnyQmU0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:f8:ca:44:a5:50:75:1b:da:12:14:a3:e4:ef:05:7e:50:e1:
         16:3d:b4:5f:4e:ee:48:1d:14:c0:0c:3a:3e:50:76:f4:7c:ed:
         06:a9:ab:75:96:7f:30:94:a0:6f:4c:07:2a:7b:38:b5:13:a9:
         06:a6:2d:a0:a8:14:fe:f8:e7:38:6f:ca:34:4a:e9:43:84:fa:
         9f:06:9c:6e:2a:5f:6e:3e:f4:7f:e3:72:e9:82:f7:e0:15:58:
         04:60:c0:e8:0b:87:9a:da:a6:d1:49:8c:66:60:cd:ad:48:23:
         6a:1f:fb:8e:28:a7:79:be:c2:9a:21:79:72:18:a2:82:97:c4:
         74:56:45:bb:8e:e2:48:58:0b:96:01:67:32:c9:18:27:59:ca:
         f5:7b:51:64:25:8d:4c:09:fd:90:1c:9e:4e:94:85:89:5f:cc:
         e6:e9:af:04:e0:82:33:86:ed:20:a8:11:ea:3e:85:66:da:22:
         22:dd:c0:cb:9f:4e:18:4e:b2:95:f6:53:6f:1d:13:35:71:7f:
         8e:bd:5a:c2:58:ed:be:16:a1:80:f0:f6:95:8f:50:07:ca:7d:
         1d:f2:c3:59:35:58:68:4c:32:65:c8:61:29:47:4c:0a:6f:62:
         da:0c:8d:5c:4f:f8:58:d9:d7:80:8f:cf:e0:fc:fb:0b:64:00:
         b9:af:5c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 20:46:38 2025 by rpki-client