This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vr22ic6c8vAhePzWjPpXVpsGaqg.roa
File:                     Vr22ic6c8vAhePzWjPpXVpsGaqg.roa (raw, json)
Hash identifier:          +0YkqRBP0m9yHkfSUAqZFyK4sXUX0C2D8i0a+vP+Hv0=
Subject key identifier:   56:BD:B6:89:CE:9C:F2:F0:21:78:FC:D6:8C:FA:57:56:9B:06:6A:A8
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       683E8E5F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vr22ic6c8vAhePzWjPpXVpsGaqg.roa
Signing time:             Sat 05 Feb 2022 21:10:17 +0000
ROA not before:           Sat 05 Feb 2022 21:10:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1748930143 (0x683e8e5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb  5 21:10:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=56bdb689ce9cf2f02178fcd68cfa57569b066aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0f:9b:2a:df:11:d4:8c:1e:fd:cf:c9:b1:e0:
                    22:f8:be:fd:c6:03:e1:bc:c6:56:25:63:f9:15:dc:
                    f2:41:67:b4:37:81:de:42:70:c5:84:d3:6a:c5:07:
                    a5:ec:42:92:70:89:f8:a7:70:8d:6f:13:49:c5:66:
                    17:af:17:9c:c1:65:6e:9c:5e:ca:72:c0:d4:30:b2:
                    7e:fa:cd:9c:67:63:e0:88:ce:97:00:bf:9d:a4:54:
                    b9:f7:9a:66:a5:da:ee:5a:fe:39:e3:69:1b:82:01:
                    89:0f:87:14:74:3a:88:64:6e:05:16:8a:1b:85:90:
                    dc:fc:f4:dc:ec:41:70:01:a9:68:b9:df:dc:2a:c9:
                    23:76:d1:fe:f9:e8:5a:b1:80:7b:40:62:d2:41:b8:
                    be:79:a7:f2:4d:1c:ed:1d:c2:e3:12:d6:a9:f2:69:
                    79:97:3b:92:14:8e:e7:63:7a:6c:c5:29:8b:55:f1:
                    e6:99:21:f5:47:c0:3f:e8:0e:fd:2c:38:4e:7f:ae:
                    a7:af:5c:1d:e0:ef:97:9e:fa:42:e8:28:03:c7:35:
                    a2:37:bb:e9:a0:88:f9:3d:d2:6c:6d:5b:05:f8:40:
                    7d:a9:b0:3e:ef:1a:c8:62:b2:bf:7e:97:40:4b:a3:
                    e5:57:77:26:27:a8:27:4b:ad:2c:89:38:4b:51:36:
                    6b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BD:B6:89:CE:9C:F2:F0:21:78:FC:D6:8C:FA:57:56:9B:06:6A:A8
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vr22ic6c8vAhePzWjPpXVpsGaqg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:67:1b:d8:a9:85:f7:8e:6a:f6:41:a2:87:57:c9:9e:00:fd:
         7f:4d:58:b5:a1:ec:e3:fc:df:eb:40:99:e2:52:89:44:36:31:
         36:8e:58:ad:d5:a3:06:4e:f7:44:9c:a6:71:72:f5:2c:0a:17:
         32:cd:5d:74:90:fd:2a:6e:b0:cd:bf:c0:4c:69:ae:3f:7f:9c:
         1d:41:39:b2:b6:38:8e:14:ef:f3:79:6e:f2:48:22:7e:96:73:
         29:89:ee:1c:6f:42:a3:d2:cb:b7:54:c2:67:22:60:52:3c:8c:
         c7:3b:b3:2b:3a:dc:c9:a7:57:db:98:4c:21:7f:dd:d5:1d:c9:
         4c:bf:6b:7d:c1:fc:15:48:55:5b:30:26:c9:bf:87:4e:4b:fc:
         98:66:bd:92:0e:de:ae:3a:02:4c:b1:06:55:03:24:95:c5:2d:
         74:82:e9:a4:d1:2f:5b:27:ed:a1:03:1c:d4:cf:1a:64:84:9f:
         ab:77:c3:f5:fb:93:fa:58:c6:39:63:dd:b6:bc:4d:82:5f:05:
         1a:db:2a:61:b2:ba:70:2f:25:b6:ae:b9:c9:0f:ab:39:8e:84:
         7c:04:33:36:7d:4b:22:e0:50:eb:9a:7b:3b:5c:94:04:60:68:
         b6:79:b2:e2:f8:46:89:9f:14:2e:91:4e:ce:0b:79:9b:d7:c1:
         eb:ae:13:0d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEaD6OXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIw
NTIxMTAxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTZiZGI2ODljZTlj
ZjJmMDIxNzhmY2Q2OGNmYTU3NTY5YjA2NmFhODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKQPmyrfEdSMHv3PybHgIvi+/cYD4bzGViVj+RXc8kFntDeB
3kJwxYTTasUHpexCknCJ+KdwjW8TScVmF68XnMFlbpxeynLA1DCyfvrNnGdj4IjO
lwC/naRUufeaZqXa7lr+OeNpG4IBiQ+HFHQ6iGRuBRaKG4WQ3Pz03OxBcAGpaLnf
3CrJI3bR/vnoWrGAe0Bi0kG4vnmn8k0c7R3C4xLWqfJpeZc7khSO52N6bMUpi1Xx
5pkh9UfAP+gO/Sw4Tn+up69cHeDvl576QugoA8c1oje76aCI+T3SbG1bBfhAfamw
Pu8ayGKyv36XQEuj5Vd3JieoJ0utLIk4S1E2a00CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRWvbaJzpzy8CF4/NaM+ldWmwZqqDAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L1ZyMjJpYzZjOHZBaGVQeldqUHBYVnBzR2FxZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCNZxvYqYX3jmr2QaKHV8meAP1/TVi1oezj/N/r
QJniUolENjE2jlit1aMGTvdEnKZxcvUsChcyzV10kP0qbrDNv8BMaa4/f5wdQTmy
tjiOFO/zeW7ySCJ+lnMpie4cb0Kj0su3VMJnImBSPIzHO7MrOtzJp1fbmEwhf93V
HclMv2t9wfwVSFVbMCbJv4dOS/yYZr2SDt6uOgJMsQZVAySVxS10gumk0S9bJ+2h
AxzUzxpkhJ+rd8P1+5P6WMY5Y922vE2CXwUa2yphsrpwLyW2rrnJD6s5joR8BDM2
fUsi4FDrmns7XJQEYGi2ebLi+EaJnxQukU7OC3mb18HrrhMN
-----END CERTIFICATE-----
Generated at Sat Dec 20 07:36:22 2025 by rpki-client