This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PlBHUCZsLK9JCkmueQ4xxke9zvw.roa
File:                     PlBHUCZsLK9JCkmueQ4xxke9zvw.roa (raw, json)
Hash identifier:          tUKr+ksJcdHIDXQCNim9qYBPFj2VnOo6mwVoR4AISx8=
Subject key identifier:   3E:50:47:50:26:6C:2C:AF:49:0A:49:AE:79:0E:31:C6:47:BD:CE:FC
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01842AF37D3897C1DFBC2A4FB4B08AA6B6D1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PlBHUCZsLK9JCkmueQ4xxke9zvw.roa
Signing time:             Sun 30 Oct 2022 22:11:51 +0000
ROA not before:           Sun 30 Oct 2022 22:11:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:2a:f3:7d:38:97:c1:df:bc:2a:4f:b4:b0:8a:a6:b6:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Oct 30 22:11:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3e504750266c2caf490a49ae790e31c647bdcefc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f9:98:3e:aa:1f:f2:e5:36:5d:20:cb:55:ea:
                    b7:2c:50:6f:17:fa:41:97:f5:6d:2b:07:8a:0d:3e:
                    95:1b:42:29:65:b2:c1:e1:f3:55:93:88:d1:6f:b8:
                    b1:1d:67:35:95:e4:97:92:51:4b:b6:e0:23:79:95:
                    bb:77:d8:7c:4a:27:be:cf:3d:d5:e2:7f:af:17:1d:
                    d2:7b:8c:34:9c:90:cc:14:c5:8d:c5:08:76:fb:a2:
                    14:d3:25:6f:37:1b:ed:09:24:74:84:ea:be:39:95:
                    c0:2a:9a:d4:b2:11:23:ab:f4:f7:c4:a4:ed:9f:3b:
                    1d:e8:43:92:57:69:5b:6f:a0:76:33:6e:5c:0d:b1:
                    f8:ad:18:2e:5d:04:c9:39:bb:43:47:c4:d3:2e:2c:
                    d6:c1:cc:eb:ef:0e:72:35:e8:00:0d:66:bd:44:1b:
                    66:6e:bf:6d:c6:a8:f0:4d:f3:1a:cb:62:0b:b1:1c:
                    83:aa:db:c4:14:72:fd:71:e2:6c:fc:cf:c9:3d:07:
                    19:ed:36:9a:9b:c9:5a:f7:9c:c6:3d:d7:5d:e0:19:
                    c9:a2:a4:87:72:e7:0d:c6:ee:21:d2:4b:0e:02:50:
                    13:1d:d3:70:ee:72:86:9a:3e:63:84:7b:75:90:8d:
                    1e:2f:e5:45:2b:c3:e4:90:2a:ea:e0:ce:74:fb:0a:
                    2c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:50:47:50:26:6C:2C:AF:49:0A:49:AE:79:0E:31:C6:47:BD:CE:FC
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PlBHUCZsLK9JCkmueQ4xxke9zvw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:b3:50:9e:9d:9e:8e:6a:96:87:71:69:ec:17:b4:0b:a9:59:
         80:b3:e1:52:e9:96:58:73:58:14:71:5b:4c:3a:bf:42:72:26:
         75:8f:43:c1:43:a8:ca:c0:77:a0:4b:96:d0:47:0d:0f:47:60:
         28:20:ce:56:8c:3e:ac:03:4a:87:b6:a6:26:9b:f9:24:b6:35:
         b0:a7:82:d2:7b:d8:a7:77:58:1b:86:80:ff:39:c7:91:a6:e7:
         45:e3:9f:3e:c5:6e:49:df:f8:b7:fc:3e:82:39:51:40:4b:b2:
         1d:06:9c:b7:0f:3d:70:79:91:64:5d:87:5c:64:98:b7:89:0f:
         7e:04:d4:ca:5c:1f:f3:e4:e4:33:cc:10:66:c9:37:2d:93:c2:
         49:9f:80:78:30:bf:af:8d:9a:5e:44:73:ff:0d:37:40:81:6e:
         ac:0f:cf:97:48:b0:eb:ab:bd:d8:cd:ca:12:47:c3:28:a4:ee:
         f4:aa:42:7e:7a:7b:5f:03:33:53:4b:ed:57:ba:96:f3:96:24:
         a6:eb:59:36:5d:f4:22:1a:a7:ff:78:3e:1a:31:6e:e1:ff:60:
         87:e3:c7:93:e1:37:83:a8:05:b9:c6:16:71:8a:2f:8e:81:9e:
         05:62:81:b3:ee:3f:0d:42:b1:3b:a4:2d:bc:76:4b:f3:5c:a4:
         b6:d2:36:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:19:30 2025 by rpki-client