This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T10vPok6ttYWldeaEfpSDFj7xZg.roa
File:                     T10vPok6ttYWldeaEfpSDFj7xZg.roa (raw, json)
Hash identifier:          KZ5SzxXRcl1PWBboTkx5YtTCWuTnrxJDy+Xg2V4Ss/k=
Subject key identifier:   4F:5D:2F:3E:89:3A:B6:D6:16:95:D7:9A:11:FA:52:0C:58:FB:C5:98
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018A2C5EB7F9FA96693378DDCF949F3E1B8F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T10vPok6ttYWldeaEfpSDFj7xZg.roa
Signing time:             Fri 25 Aug 2023 11:05:19 +0000
ROA not before:           Fri 25 Aug 2023 11:05:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:2c5d:ce39/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:2c:5e:b7:f9:fa:96:69:33:78:dd:cf:94:9f:3e:1b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Aug 25 11:05:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4f5d2f3e893ab6d61695d79a11fa520c58fbc598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:64:3a:b1:d6:64:81:ae:c1:87:c9:66:ed:80:
                    b1:24:58:06:2c:34:e7:01:76:05:9f:27:20:92:c3:
                    09:5c:2f:03:91:00:4c:f5:1b:c9:da:70:4c:5b:68:
                    27:34:47:71:95:2f:91:4c:fa:59:d6:26:95:b0:42:
                    c2:8d:63:29:74:8b:9a:a7:f1:74:05:dc:b3:81:5a:
                    45:44:f7:93:77:97:78:b5:0d:de:f1:89:58:3a:13:
                    21:c7:b5:12:89:ce:36:a7:42:43:d8:13:da:e6:3f:
                    92:53:61:42:26:99:26:e6:3b:2a:ec:5f:71:00:8f:
                    6b:6e:d2:45:bc:cd:f3:64:bc:9c:fc:b8:29:2c:f6:
                    12:63:61:de:4a:a1:29:16:0c:dc:ef:b8:6d:dd:d0:
                    b6:fe:5a:4c:f5:b7:74:9b:a8:ef:2b:7b:b0:7f:bb:
                    41:70:0f:1a:ef:1c:32:e3:8b:7f:48:1d:49:3d:ef:
                    82:05:d1:c2:ad:49:0f:98:7b:9c:8f:26:e2:5b:63:
                    99:29:0f:34:3c:42:da:c5:f4:d0:f7:5d:dd:c9:ae:
                    39:6c:c0:77:e7:d9:40:c7:5e:6f:94:d6:f8:ec:ca:
                    5b:b7:01:2a:7f:43:34:97:b7:a8:3d:49:de:e5:3c:
                    cf:20:94:13:ed:7b:75:01:d4:b9:ad:a4:90:16:83:
                    e1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5D:2F:3E:89:3A:B6:D6:16:95:D7:9A:11:FA:52:0C:58:FB:C5:98
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T10vPok6ttYWldeaEfpSDFj7xZg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:21:3a:e1:db:58:95:bb:6a:31:50:70:d0:56:de:0e:df:9f:
         9a:a1:c0:e2:4a:9a:64:ce:05:7b:fd:3a:1b:53:2a:59:60:33:
         71:25:fe:6a:f8:f1:76:05:49:c1:be:ca:85:1e:39:7b:d7:e3:
         7a:4d:e2:78:57:a2:93:c1:a6:34:5d:6d:aa:59:02:75:7a:a9:
         ec:45:ba:b0:81:00:87:24:76:c5:59:53:c7:74:ec:04:22:89:
         da:75:dc:96:55:a0:ed:1a:8c:7d:80:e5:75:c4:9f:26:e9:74:
         aa:5c:ef:ac:9b:6b:d4:47:e4:9d:33:85:58:04:3c:42:73:d5:
         45:54:39:b0:cf:1a:bc:45:90:bc:89:03:6a:5b:92:83:5c:ff:
         f1:87:df:be:fe:3d:2f:0e:e1:1e:5d:08:e6:f2:f1:cc:33:e2:
         7c:81:73:a9:4d:18:40:c1:c4:b1:21:7e:45:dd:5a:fe:b1:0d:
         6a:2c:16:ea:e8:b5:ac:cd:be:11:c1:39:c6:27:ca:da:f3:c3:
         f2:68:f0:55:b2:85:55:43:a9:17:2c:ac:ad:ef:6a:fa:0b:b6:
         28:43:44:59:33:fb:4d:84:24:e0:a4:15:2e:20:a1:1d:bc:08:
         90:e1:a3:c3:64:92:f9:11:d8:b2:34:83:53:eb:ae:3e:ef:a0:
         18:cc:ec:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:29:07 2025 by rpki-client