This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QqUpYJexIXjsPTiimtb7KxP_ceg.roa
File:                     QqUpYJexIXjsPTiimtb7KxP_ceg.roa (raw, json)
Hash identifier:          R1DTJbaQLA30ice310aormI/Em5r5tsk5bU+pzYnaMw=
Subject key identifier:   42:A5:29:60:97:B1:21:78:EC:3D:38:A2:9A:D6:FB:2B:13:FF:71:E8
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0188C2D255621C66E1B5EAA5A032C27EA9FF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QqUpYJexIXjsPTiimtb7KxP_ceg.roa
Signing time:             Fri 16 Jun 2023 06:09:04 +0000
ROA not before:           Fri 16 Jun 2023 06:09:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:c2:d2:55:62:1c:66:e1:b5:ea:a5:a0:32:c2:7e:a9:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun 16 06:09:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=42a5296097b12178ec3d38a29ad6fb2b13ff71e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9c:69:2a:0a:bd:07:9c:63:2e:d2:d3:f6:74:
                    8d:6d:5a:7b:5d:ac:0d:c7:b7:87:ba:b7:51:77:46:
                    d2:97:b8:6b:89:ca:3d:ca:e7:68:16:e2:91:35:96:
                    84:9e:c4:0f:16:1b:43:d8:67:3f:32:66:36:f3:71:
                    fa:53:a6:c3:01:f0:fb:b0:4a:c4:f8:75:34:47:6f:
                    69:4e:a9:eb:92:d2:3b:cc:23:f3:7e:2d:2b:69:25:
                    a7:70:93:85:b6:bd:fc:04:69:64:5d:c8:fc:7a:53:
                    c5:0d:d4:5a:60:b1:cf:7d:8e:b3:39:fd:9a:54:40:
                    b2:44:f8:68:75:59:d5:15:88:9b:d6:16:40:0c:84:
                    e7:e5:a4:cc:e6:ee:99:29:bd:23:59:9b:05:fe:76:
                    c6:79:67:d8:35:05:b2:e3:a8:d6:b8:bc:f8:f2:0c:
                    0c:b5:64:84:d6:88:ec:2b:b5:7d:a5:66:20:a1:b9:
                    2a:4a:cc:9e:2f:bc:f1:d6:ec:33:4a:fc:54:d9:15:
                    f5:a7:40:67:6d:a8:3c:32:a2:f3:00:30:88:60:6c:
                    9f:39:75:04:db:99:76:48:ba:61:f2:e5:bd:c5:35:
                    40:6e:9b:2d:ce:f2:39:6d:a0:a7:93:28:68:09:e1:
                    53:25:d2:2d:75:e7:09:f3:ea:bc:68:e6:55:20:df:
                    5b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A5:29:60:97:B1:21:78:EC:3D:38:A2:9A:D6:FB:2B:13:FF:71:E8
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QqUpYJexIXjsPTiimtb7KxP_ceg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:77:b2:b1:25:ba:15:95:a1:58:75:98:bc:2e:0d:a1:6b:cf:
         28:ee:60:0c:ac:6a:0b:76:93:ea:d5:28:9a:61:4b:fb:11:8a:
         e3:fc:30:7c:0f:32:27:2c:a4:22:03:c8:9b:5c:6e:ef:9f:90:
         cc:3a:79:4c:89:f2:5a:52:3f:39:5c:f1:68:e3:b8:d4:6b:6c:
         cb:51:29:72:e4:bf:a7:ad:f4:6e:55:59:f3:02:89:a3:9e:32:
         b2:12:32:a9:5d:1e:52:13:25:9e:23:19:ac:44:6f:cf:48:81:
         19:c5:88:17:cf:24:a0:98:65:06:06:c8:92:3b:91:59:13:f3:
         2d:54:4f:98:09:b8:a7:ac:f3:82:03:6c:58:a2:08:ae:5f:e7:
         d2:be:f3:74:58:e3:60:7d:3a:6e:34:32:69:92:60:ce:9c:3b:
         a2:8b:5a:53:f2:05:d6:42:35:b8:0d:ed:ed:11:48:97:96:4c:
         53:78:4c:03:5c:04:70:c7:03:bd:c8:cf:89:e2:dd:1c:df:80:
         0d:60:23:c7:9d:c6:95:ba:69:da:be:b9:11:74:73:3a:33:f0:
         8a:4c:aa:9f:44:2b:99:b7:59:ea:3b:ba:50:8c:97:12:a8:fe:
         6a:a4:cb:99:a3:8e:28:58:e5:e0:99:89:ba:86:9a:d5:cd:05:
         09:37:72:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 06:23:45 2025 by rpki-client