This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MmYFu4zBFRUxqfYOBCUQYIuJ8eI.roa
File:                     MmYFu4zBFRUxqfYOBCUQYIuJ8eI.roa (raw, json)
Hash identifier:          Myg/4pffCcpSmgALqEMc3ILUvV0I0RKUTUhlgyMYYcg=
Subject key identifier:   32:66:05:BB:8C:C1:15:15:31:A9:F6:0E:04:25:10:60:8B:89:F1:E2
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01863EA99CF3D4C30669AC702BCE1DC21633
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MmYFu4zBFRUxqfYOBCUQYIuJ8eI.roa
Signing time:             Sat 11 Feb 2023 04:09:08 +0000
ROA not before:           Sat 11 Feb 2023 04:09:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:3e:a9:9c:f3:d4:c3:06:69:ac:70:2b:ce:1d:c2:16:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb 11 04:09:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=326605bb8cc1151531a9f60e042510608b89f1e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8e:48:fe:66:22:0a:1a:a5:45:72:86:ae:ed:
                    23:93:98:83:f4:c3:58:b1:40:75:c8:ca:a4:06:34:
                    f4:04:df:8e:23:61:32:2b:79:c4:99:c8:67:2e:6d:
                    98:f1:b2:2f:ff:a1:a7:34:4a:3c:5b:7a:bd:0f:56:
                    d8:40:cf:80:50:0a:c9:f4:c2:98:ff:6e:c4:87:59:
                    94:b5:8e:e7:f4:c5:8c:8e:4e:67:a5:99:f2:40:52:
                    f0:95:19:8f:d0:13:4e:4e:51:5f:8b:89:00:ff:6f:
                    64:1c:60:8a:95:54:cd:0a:22:22:d0:e2:f8:1e:f4:
                    9b:3b:7a:41:b3:88:2d:5f:70:23:36:e9:63:14:e2:
                    f4:43:b3:8f:e0:b7:bb:76:0e:9c:d2:4c:22:d0:61:
                    f2:4c:2e:a4:87:be:24:f6:17:27:a0:4c:29:f6:78:
                    d8:3a:0e:c2:1c:24:c1:51:9e:e5:c1:50:dd:57:d4:
                    03:19:1b:16:76:46:8e:ab:25:fe:74:7f:0a:fc:53:
                    ba:68:15:c2:64:ab:d4:68:bd:c4:c9:9c:fb:93:c9:
                    5c:ee:25:86:5e:82:55:86:80:b1:ca:97:60:d4:6b:
                    60:6e:cb:b4:92:60:70:00:6a:15:46:8a:6a:6c:dd:
                    21:05:c4:3a:80:71:81:88:5d:04:91:0d:b2:55:5d:
                    30:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:66:05:BB:8C:C1:15:15:31:A9:F6:0E:04:25:10:60:8B:89:F1:E2
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MmYFu4zBFRUxqfYOBCUQYIuJ8eI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:22:17:26:2a:ab:59:d8:2e:4a:85:82:fd:89:af:63:c0:8b:
         6c:55:51:28:d2:95:52:d9:5f:53:64:bb:3d:c6:c3:55:f7:9b:
         89:9c:81:39:0a:7f:89:58:04:1d:31:37:7e:71:54:1b:ae:dd:
         62:67:c9:e2:29:6b:b2:07:f3:23:23:6e:e3:37:4c:7f:c8:17:
         9a:ee:03:07:e2:12:ab:0e:de:31:33:a8:8d:00:13:e9:33:30:
         a4:02:eb:af:07:23:f0:ad:92:e5:14:c2:4f:57:1f:2d:42:99:
         2e:2e:85:5a:f5:b8:23:50:bc:3e:44:87:96:5c:b0:2f:e5:b0:
         de:34:dc:c4:0e:d6:fb:e0:52:47:e3:e3:2d:96:08:23:ae:0b:
         ef:12:f9:fb:52:f0:96:85:f8:9a:77:12:25:03:00:33:38:92:
         e4:12:82:73:a3:c5:52:40:9f:9f:08:67:53:05:5f:b2:9b:3e:
         6c:b6:aa:7f:32:cd:0e:f4:52:a0:28:d5:c4:eb:da:4e:84:6b:
         b0:a1:0f:ad:be:6d:b4:09:d1:fe:42:d2:c2:6c:f5:95:e2:14:
         0b:10:d0:f8:15:f7:7d:7f:67:9a:bf:4b:d8:71:11:1d:91:67:
         4d:1d:90:5c:f7:85:c5:f9:73:ae:97:92:1d:28:db:7a:4d:c8:
         7c:70:4d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 00:56:15 2025 by rpki-client