This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UleAsipMoW7XhE9Bqp1ytlIXmYE.roa
File:                     UleAsipMoW7XhE9Bqp1ytlIXmYE.roa (raw, json)
Hash identifier:          sRe123jLrjzTQL8fdttupq3IEWorbH58bZnNi6V+Q5A=
Subject key identifier:   52:57:80:B2:2A:4C:A1:6E:D7:84:4F:41:AA:9D:72:B6:52:17:99:81
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0185D84B1660D65794C24A56FB445E456BA9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UleAsipMoW7XhE9Bqp1ytlIXmYE.roa
Signing time:             Sun 22 Jan 2023 07:04:37 +0000
ROA not before:           Sun 22 Jan 2023 07:04:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:185:d84a:eb8c/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:d8:4b:16:60:d6:57:94:c2:4a:56:fb:44:5e:45:6b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jan 22 07:04:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=525780b22a4ca16ed7844f41aa9d72b652179981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b4:c3:90:8a:f6:69:cc:36:41:57:0f:b9:4c:
                    27:0d:1d:56:35:26:7c:41:6e:bd:3c:f7:60:57:9c:
                    c6:01:0d:56:b7:47:7f:c3:7b:70:47:ac:45:a2:aa:
                    90:ff:9a:75:39:63:91:e4:61:e1:f3:86:ac:28:e8:
                    3a:6b:6e:51:a1:0d:18:f5:ee:28:f8:99:d2:93:1b:
                    9c:c8:9d:bc:0a:9d:80:df:b9:f2:b2:3f:05:25:8a:
                    e4:42:f7:79:8f:bf:8e:79:0f:3b:85:31:d7:16:fe:
                    6d:50:41:df:c2:8e:22:8e:c0:c0:8c:2b:0d:e9:78:
                    25:5f:48:c8:7f:c6:a0:a1:fb:e9:ff:f7:e6:c2:51:
                    1b:f1:45:1b:d4:94:ca:e9:cc:cc:bf:ad:16:df:1b:
                    c5:a0:7b:96:64:f2:fe:a5:d8:0f:a7:37:0e:a7:fb:
                    b8:77:07:0a:bc:90:f0:1a:49:1a:b2:44:22:be:94:
                    a9:ee:29:28:b1:6a:eb:89:cf:85:d8:80:22:04:d5:
                    1f:e7:75:4a:f9:b2:e7:f9:2d:1e:57:e0:e9:94:0a:
                    fa:be:52:03:7c:ab:5a:32:46:e3:90:c9:42:e4:8b:
                    86:b7:a6:0e:cf:97:71:a9:e0:08:90:5b:95:26:63:
                    ac:8e:ff:04:23:b4:d2:1e:ab:9f:48:7b:93:54:b8:
                    cf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:57:80:B2:2A:4C:A1:6E:D7:84:4F:41:AA:9D:72:B6:52:17:99:81
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UleAsipMoW7XhE9Bqp1ytlIXmYE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:69:e8:24:7c:aa:14:cf:ef:44:e8:61:7a:4e:a4:b6:12:01:
         02:9a:c5:a5:fb:a1:05:4e:77:5c:de:91:8a:6e:e0:e9:ab:de:
         ba:1f:28:7a:02:56:79:27:bb:89:f3:a3:ab:1f:42:90:79:b5:
         37:3c:2a:4f:3d:35:13:9d:ef:4d:e0:ed:ee:ac:5e:50:f2:b6:
         d0:73:28:5d:54:ab:99:f4:6e:4f:cf:5a:92:a4:e6:0e:7e:36:
         35:ce:73:a2:50:21:03:4f:31:55:8f:69:01:bb:41:91:75:33:
         ca:10:37:4d:ec:d6:13:9b:82:85:56:06:22:84:52:b0:15:39:
         ac:d8:67:92:d2:85:c4:e6:ab:21:92:4b:a3:27:51:75:09:4c:
         ed:33:06:e9:1b:15:57:51:82:f2:63:c3:2e:49:c2:2d:bb:33:
         74:80:48:41:29:1d:72:3a:6a:36:12:0e:bb:7d:f3:2e:fe:1a:
         0a:9b:26:cb:ac:f0:26:cd:01:cf:e2:47:78:a1:af:de:08:0f:
         95:bb:a1:9d:fb:44:9b:28:1c:75:3e:01:c7:13:6c:13:d3:44:
         a0:b8:df:c5:f8:c8:00:5c:c8:ce:46:34:27:7e:b9:0f:2c:64:
         b5:a8:43:4b:45:07:22:63:e3:e0:c7:ef:93:39:34:67:b5:49:
         0e:03:68:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:21:33 2025 by rpki-client