This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T9tRHL4pXqrxv59RY5qZ1x63uaA.roa
File:                     T9tRHL4pXqrxv59RY5qZ1x63uaA.roa (raw, json)
Hash identifier:          ModjPotLuwDfmoeUoaQQ2GfbSQy7Zb4xpZofViewDd8=
Subject key identifier:   4F:DB:51:1C:BE:29:5E:AA:F1:BF:9F:51:63:9A:99:D7:1E:B7:B9:A0
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018641A6FDA664C2FD5ED2569919B1A65134
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T9tRHL4pXqrxv59RY5qZ1x63uaA.roa
Signing time:             Sat 11 Feb 2023 18:05:08 +0000
ROA not before:           Sat 11 Feb 2023 18:05:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:41a6:241b/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:41:a6:fd:a6:64:c2:fd:5e:d2:56:99:19:b1:a6:51:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb 11 18:05:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4fdb511cbe295eaaf1bf9f51639a99d71eb7b9a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6f:8a:2e:48:d8:be:6d:a3:72:ec:33:bf:1f:
                    79:38:1c:2b:ff:a4:02:ce:c4:06:29:58:2d:77:de:
                    c6:bf:02:20:d5:ee:8c:9f:51:2c:92:ee:ac:63:45:
                    e9:97:ee:ab:aa:39:14:57:16:c9:a2:96:57:38:c5:
                    90:d7:47:76:9c:02:ba:14:a0:0a:92:f0:9d:2b:93:
                    78:70:42:0d:a9:6c:05:1c:81:35:00:d0:bf:6b:49:
                    66:f5:5c:e5:44:01:d5:71:6a:00:8e:16:70:04:d4:
                    0b:58:17:2a:12:b8:87:6a:4d:7f:66:20:9c:1a:91:
                    63:60:cf:13:cb:f8:c2:b9:10:d3:d1:5d:ea:c0:8d:
                    51:dd:a3:0e:c7:91:13:11:1e:e1:77:01:a9:d8:bd:
                    05:45:8a:57:01:5e:f1:57:6f:79:66:67:cf:96:d4:
                    2a:55:81:95:f4:1f:c2:b3:85:aa:a4:5f:63:40:c1:
                    c0:6b:87:ac:67:d7:ee:98:1d:c3:dd:3f:96:fa:13:
                    ea:3c:8d:bf:76:e5:9c:db:66:af:38:77:f6:a7:8b:
                    3b:97:b4:b2:34:e2:db:1d:a1:24:b2:50:fd:1b:4b:
                    c8:01:53:92:06:c7:e8:ca:14:2c:c7:c9:d6:c0:a4:
                    0a:74:a4:0c:ae:16:b7:78:76:0f:f8:d7:f0:b5:ec:
                    94:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DB:51:1C:BE:29:5E:AA:F1:BF:9F:51:63:9A:99:D7:1E:B7:B9:A0
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T9tRHL4pXqrxv59RY5qZ1x63uaA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:98:97:8a:52:68:4f:22:ac:18:41:1b:0b:09:aa:0d:78:cb:
         2c:05:d3:64:94:bd:d4:e0:34:7a:94:a4:ac:90:b5:43:95:f1:
         b2:20:50:60:04:2a:80:53:d2:2e:62:83:de:d6:16:06:9b:ef:
         4f:ca:04:3a:3a:06:bc:67:18:94:fa:77:72:7c:da:01:de:a9:
         db:6e:ac:fb:81:00:40:81:c0:1c:24:5a:04:33:58:ef:3d:21:
         1a:04:c4:a6:7f:a3:a9:6a:26:7e:67:66:ab:ce:8f:26:57:28:
         0e:40:68:a9:2e:da:80:dd:f7:7b:22:35:1b:63:52:90:a7:4a:
         26:a3:50:f1:ea:c2:ec:6f:9f:d2:d4:98:a3:d4:fe:b4:31:ad:
         eb:82:16:e2:bb:83:dd:f4:bc:7c:eb:4f:da:bc:6a:6b:f9:5e:
         98:54:be:b2:3a:bb:ba:f3:51:47:04:d3:7a:66:c4:0c:a4:ac:
         a5:3d:4b:b8:5a:eb:79:a7:aa:de:b3:9b:9c:ca:cd:0a:32:73:
         55:da:0d:88:a7:98:70:18:b6:df:9c:7d:db:c2:ca:47:f6:3e:
         59:45:9f:b9:41:ff:70:82:03:90:e2:a6:64:ce:49:a6:9c:42:
         2d:94:b8:ed:52:22:c7:37:66:35:2d:c8:dc:bd:7c:c3:1b:67:
         e6:12:2a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:44:45 2025 by rpki-client