This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Su-lTLI6q0NzaO2U0YHu_zB2eTA.roa
File:                     Su-lTLI6q0NzaO2U0YHu_zB2eTA.roa (raw, json)
Hash identifier:          coCFfeq2PyVMMTKPT2uV6iFHo07B+kkQdg00luYsF4A=
Subject key identifier:   4A:EF:A5:4C:B2:3A:AB:43:73:68:ED:94:D1:81:EE:FF:30:76:79:30
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01878BE60A2BC489278CB3BD61BD1280A303
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Su-lTLI6q0NzaO2U0YHu_zB2eTA.roa
Signing time:             Sun 16 Apr 2023 21:08:41 +0000
ROA not before:           Sun 16 Apr 2023 21:08:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:8b:e6:0a:2b:c4:89:27:8c:b3:bd:61:bd:12:80:a3:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 16 21:08:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4aefa54cb23aab437368ed94d181eeff30767930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:24:cf:da:04:ee:83:f5:4e:ca:06:1d:3e:97:
                    73:2f:b8:d8:3a:c9:55:4d:35:4b:f6:3c:60:49:4d:
                    9f:8c:b3:5b:65:3f:14:3b:f7:f6:97:84:b3:13:d0:
                    70:2b:2e:e0:9a:c1:6f:bc:c7:70:aa:56:96:ca:ac:
                    ea:5b:ab:7c:23:73:07:81:02:cb:fe:e5:a5:93:0c:
                    b4:50:a9:1e:67:83:1a:f5:93:a0:77:7a:6c:50:6f:
                    e1:ce:d7:19:33:98:6d:d9:d4:be:ae:c4:15:63:b8:
                    75:21:62:68:5e:42:22:b5:c0:b1:b2:61:48:c6:22:
                    8a:fe:64:41:1d:af:85:5e:71:90:8e:cf:15:f1:ed:
                    ed:b3:a6:15:eb:3b:f0:3f:75:4a:6e:ab:59:fb:cf:
                    b1:65:e9:50:d0:d3:97:87:cb:56:05:87:68:3c:ac:
                    db:d1:ec:cc:df:0f:71:27:a8:ad:5b:90:45:85:92:
                    5b:b4:6a:2d:59:c6:57:f1:1e:09:3f:48:d1:7e:22:
                    9f:07:0a:9a:b8:20:64:70:7c:47:88:6a:d4:a7:19:
                    a8:1c:23:dd:7a:e7:72:d4:06:5d:cf:e8:e6:a7:dc:
                    db:02:08:ba:ba:fe:c1:33:19:6a:d8:4a:01:bc:91:
                    11:b3:31:f6:45:c1:4e:fd:9e:be:47:9c:d9:67:11:
                    ef:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:EF:A5:4C:B2:3A:AB:43:73:68:ED:94:D1:81:EE:FF:30:76:79:30
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Su-lTLI6q0NzaO2U0YHu_zB2eTA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:f1:cf:da:c5:c9:41:98:32:06:53:37:af:7f:ca:94:9a:6b:
         4c:3c:b7:fb:f5:e3:9d:af:47:cf:04:c6:ce:87:78:20:a4:dd:
         c3:0a:1f:27:21:ab:25:13:97:66:e3:b3:be:26:e9:e6:51:78:
         40:0b:6c:1e:a4:a6:fb:f6:6e:ca:7a:4c:2e:c8:df:08:fa:e5:
         04:50:c1:41:e4:db:86:7a:98:3f:ee:32:0c:9a:a1:de:22:33:
         2d:9c:14:a2:50:97:8e:ed:95:4b:d7:ad:3b:57:4f:9c:df:86:
         dc:2b:47:79:0e:f7:2c:5e:ae:f1:e1:c3:b2:05:b7:10:dd:96:
         72:db:db:c6:76:5b:77:30:b6:09:ca:9a:ce:4e:d2:a3:06:06:
         d5:67:9b:36:b2:8b:51:92:b2:ab:0f:13:11:8e:f5:af:96:e4:
         f6:71:8f:9c:a8:fe:4a:ca:b8:0c:b0:2c:a0:5f:d2:55:23:d2:
         2f:de:2b:d4:00:a2:40:67:28:63:fb:ed:a6:22:3c:40:6c:67:
         80:ae:dd:62:83:f9:d0:ff:e8:2b:e0:a7:61:33:86:e5:09:7e:
         2e:3a:88:1c:87:85:b1:9b:a3:14:6d:36:9c:da:e0:ea:85:dd:
         bd:b4:f0:82:cc:11:9f:74:75:b1:d5:13:e4:de:8c:60:4a:49:
         8b:f0:1b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:05:05 2025 by rpki-client