This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vly5wfZsUlkUElF2AnvHt0RNZas.roa
File:                     Vly5wfZsUlkUElF2AnvHt0RNZas.roa (raw, json)
Hash identifier:          Qab2D9SKztjlJ6/C6KSCxpbBERSLkb1V1r1dOaXpHhA=
Subject key identifier:   56:5C:B9:C1:F6:6C:52:59:14:12:51:76:02:7B:C7:B7:44:4D:65:AB
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       66844218
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vly5wfZsUlkUElF2AnvHt0RNZas.roa
Signing time:             Mon 31 Jan 2022 01:15:33 +0000
ROA not before:           Mon 31 Jan 2022 01:15:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1719943704 (0x66844218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jan 31 01:15:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=565cb9c1f66c525914125176027bc7b7444d65ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c0:67:04:ec:b6:1b:21:74:5e:f6:e4:1c:e7:
                    1e:f3:c1:2b:b4:1a:d3:2b:32:65:4c:13:18:c0:38:
                    82:e6:d6:55:c6:18:52:51:f3:62:da:eb:a7:ee:b8:
                    dd:a4:77:5e:c1:7b:fd:5e:99:36:57:fd:f3:34:9f:
                    7f:1f:3e:52:8c:cd:c2:31:b2:9f:fa:aa:5e:17:1c:
                    84:3a:3e:f2:fe:e6:4b:ce:96:9c:db:ee:ec:8b:25:
                    ad:11:30:58:05:53:25:7c:14:cb:e9:b9:8b:a8:0e:
                    18:af:c1:1b:3b:c4:00:64:a9:e3:79:84:45:28:91:
                    b3:a9:a8:1e:66:f4:11:2c:a4:bd:fe:44:ed:3a:17:
                    83:e2:05:e6:d3:19:d9:6a:3f:12:f4:06:2b:47:7f:
                    6f:57:bc:be:83:20:f2:f4:de:9c:f9:66:c4:4c:49:
                    01:c8:71:47:af:d1:78:52:b2:58:6c:d4:84:75:4e:
                    de:6a:a7:fb:9e:a0:9a:9b:69:b2:b6:46:57:6b:a2:
                    0f:06:fb:fc:66:f0:7f:0e:ea:b6:fa:60:93:86:37:
                    39:5d:ab:ec:6c:e8:bb:22:8f:1c:11:c9:c7:45:f7:
                    ed:8b:1c:a0:a6:27:eb:9c:d9:e6:38:67:bf:62:01:
                    35:a8:82:42:de:be:da:5b:70:ab:4a:57:4b:33:8e:
                    f2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5C:B9:C1:F6:6C:52:59:14:12:51:76:02:7B:C7:B7:44:4D:65:AB
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vly5wfZsUlkUElF2AnvHt0RNZas.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:54:7d:cb:e7:b4:e8:1e:f8:a3:29:7f:63:af:26:43:7e:cc:
         c5:c6:a6:e1:e6:06:cc:78:86:13:1d:7e:07:75:4d:76:dc:5b:
         2a:d3:fe:8d:c2:29:bb:91:9e:9d:56:94:2d:5e:94:81:2b:34:
         72:6d:4a:fe:76:19:28:51:f4:f5:03:bc:1e:78:ba:53:13:fe:
         19:0e:87:1f:c5:22:0b:2b:60:ed:4e:c7:1e:cb:b5:09:d5:32:
         b8:b6:5b:13:e1:f7:39:5c:dc:3e:8e:5b:86:46:07:4f:6c:98:
         71:37:e4:9f:ac:25:e1:db:7d:42:96:1f:ca:82:0c:5b:c8:28:
         99:13:02:66:8b:f9:5f:c8:8b:b4:e6:d0:78:4e:0d:6f:c7:e8:
         23:05:ad:2e:2c:92:ae:73:79:76:f3:93:65:bc:54:f2:95:7b:
         b3:2f:bf:e7:00:13:36:fd:70:8c:5e:7b:52:76:3c:a2:35:7e:
         ff:78:3c:07:00:d0:93:4f:14:1d:03:8b:cc:97:a3:6e:0e:4f:
         75:a8:3c:81:94:5b:67:39:9e:c2:16:04:a3:b7:85:2b:eb:42:
         69:e6:a3:51:0e:c6:56:1b:59:37:bb:57:60:cc:19:e3:67:c5:
         3a:d9:61:16:0c:99:4e:eb:cb:c9:35:7b:c0:a1:8c:b5:1e:39:
         83:f1:3d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 07:14:16 2025 by rpki-client