This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TKKSPrFFTvi971YbAKkVHKfh13g.roa
File:                     TKKSPrFFTvi971YbAKkVHKfh13g.roa (raw, json)
Hash identifier:          RsXW2uKFFxdSEpPhNGLZrvi9tA4qQtqTSmWouPmuFxs=
Subject key identifier:   4C:A2:92:3E:B1:45:4E:F8:BD:EF:56:1B:00:A9:15:1C:A7:E1:D7:78
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018947A129801B763944A66FFB02D7F7FF6A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TKKSPrFFTvi971YbAKkVHKfh13g.roa
Signing time:             Wed 12 Jul 2023 01:04:51 +0000
ROA not before:           Wed 12 Jul 2023 01:04:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:189:47a0:9d77/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:47:a1:29:80:1b:76:39:44:a6:6f:fb:02:d7:f7:ff:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 12 01:04:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4ca2923eb1454ef8bdef561b00a9151ca7e1d778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2c:99:21:68:48:a5:4c:9c:97:04:da:00:99:
                    af:ce:81:24:41:63:91:61:96:a8:c3:80:41:f5:26:
                    43:de:ed:f2:20:13:0d:0f:e2:e5:d5:7e:83:35:c1:
                    a2:5d:98:fe:4f:94:50:e3:c1:b6:21:b1:7f:1e:18:
                    24:9e:fb:e5:0f:24:e4:3c:94:f5:4b:71:bd:f7:18:
                    ec:6c:6f:26:38:ec:f4:2b:72:87:8c:27:20:5f:5d:
                    5e:45:9b:ed:0c:52:cc:df:d5:99:d6:e2:96:d1:ba:
                    90:8f:aa:ff:01:f8:51:8f:ce:42:ac:56:6b:e8:85:
                    11:97:f0:b3:81:9e:fb:e9:a8:b2:00:0b:1e:ee:ab:
                    14:b9:a5:d0:8b:7e:06:76:2e:d9:7f:ed:a7:d9:6b:
                    f4:d9:e2:1f:2c:7f:44:4d:b1:c8:2e:40:08:e4:d2:
                    e3:24:ef:3b:81:31:f3:62:7d:a7:b9:1f:30:63:14:
                    d7:2d:f2:31:c3:ad:4b:53:93:56:ee:af:72:30:21:
                    17:6f:66:12:52:36:f2:9d:27:e5:84:a8:4f:19:3e:
                    af:49:0d:d5:64:de:b3:30:a9:45:e0:60:fa:57:ab:
                    6f:fa:8f:e7:41:4c:66:29:bb:2f:b1:44:99:5a:8c:
                    e8:af:9f:76:b5:52:a6:4d:cb:4a:f2:64:0b:e4:bd:
                    09:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A2:92:3E:B1:45:4E:F8:BD:EF:56:1B:00:A9:15:1C:A7:E1:D7:78
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TKKSPrFFTvi971YbAKkVHKfh13g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:d9:19:77:ff:9a:f8:a9:76:a3:c7:ae:dc:8c:fa:9f:dd:c7:
         71:81:90:46:32:5f:8b:6c:06:68:5c:14:35:94:06:b3:55:77:
         8b:22:bb:77:7e:79:ac:48:28:44:d2:e0:51:6f:49:75:65:7e:
         db:02:d7:bb:d6:9c:9d:1d:b8:6d:c1:c8:f6:3b:d2:93:53:00:
         9d:1d:33:64:16:05:33:c9:1c:14:75:09:ed:08:8e:ee:68:b1:
         31:19:ae:a9:1c:8b:34:c3:95:98:3c:17:8d:78:a5:ea:d0:8a:
         9f:b7:0a:81:e0:4d:05:9f:dd:db:95:14:35:59:a9:a1:e9:e1:
         c4:ba:76:11:0c:67:2c:a1:64:2b:1d:2e:b5:f0:99:e9:e9:01:
         19:99:b6:9e:93:be:d7:61:99:19:7d:0d:e4:51:53:42:6a:9c:
         da:1f:25:ff:dc:94:db:48:32:f7:94:e3:3d:90:6f:4c:35:de:
         5b:63:46:36:15:1b:f2:c3:e6:f5:b1:7e:b1:71:97:c2:4a:11:
         ce:ea:53:ab:2c:f6:f3:b1:24:48:e1:72:94:a1:ff:d7:91:b8:
         95:29:19:97:8d:4e:40:55:28:3b:74:ec:df:27:45:1d:87:dc:
         b6:d7:4c:53:34:aa:c9:cb:a4:04:21:73:a8:28:c6:b9:47:5b:
         6c:83:c4:99
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlHoSmAG3Y5RKZv+wLX9/9qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzEyMDEwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2EyOTIzZWIxNDU0ZWY4YmRlZjU2MWIwMGE5MTUxY2E3ZTFkNzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSyZIWhIpUyclwTaAJmvzoEkQWOR
YZaow4BB9SZD3u3yIBMND+Ll1X6DNcGiXZj+T5RQ48G2IbF/HhgknvvlDyTkPJT1
S3G99xjsbG8mOOz0K3KHjCcgX11eRZvtDFLM39WZ1uKW0bqQj6r/AfhRj85CrFZr
6IURl/CzgZ776aiyAAse7qsUuaXQi34Gdi7Zf+2n2Wv02eIfLH9ETbHILkAI5NLj
JO87gTHzYn2nuR8wYxTXLfIxw61LU5NW7q9yMCEXb2YSUjbynSflhKhPGT6vSQ3V
ZN6zMKlF4GD6V6tv+o/nQUxmKbsvsUSZWozor592tVKmTctK8mQL5L0JwwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEyikj6xRU74ve9WGwCpFRyn4dd4MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVEtLU1ByRkZUdmk5NzFZYkFLa1ZIS2ZoMTNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJnZGXf/mvipdqPHrtyM
+p/dx3GBkEYyX4tsBmhcFDWUBrNVd4siu3d+eaxIKETS4FFvSXVlftsC17vWnJ0d
uG3ByPY70pNTAJ0dM2QWBTPJHBR1Ce0Iju5osTEZrqkcizTDlZg8F414perQip+3
CoHgTQWf3duVFDVZqaHp4cS6dhEMZyyhZCsdLrXwmenpARmZtp6TvtdhmRl9DeRR
U0JqnNofJf/clNtIMveU4z2Qb0w13ltjRjYVG/LD5vWxfrFxl8JKEc7qU6ss9vOx
JEjhcpSh/9eRuJUpGZeNTkBVKDt07N8nRR2H3LbXTFM0qsnLpAQhc6goxrlHW2yD
xJk=
-----END CERTIFICATE-----
Generated at Sat Dec 20 14:02:40 2025 by rpki-client