This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VtefKz-lKt02lsKbJJCLX75pXfg.roa
File:                     VtefKz-lKt02lsKbJJCLX75pXfg.roa (raw, json)
Hash identifier:          Q1pFYLjvtmYPO/geDrAhRkTGjHaGbwoKx3LQHtEQKhc=
Subject key identifier:   56:D7:9F:2B:3F:A5:2A:DD:36:96:C2:9B:24:90:8B:5F:BE:69:5D:F8
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01877905E2FA294520D3B3E27DFD65B5BBA1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VtefKz-lKt02lsKbJJCLX75pXfg.roa
Signing time:             Thu 13 Apr 2023 05:10:41 +0000
ROA not before:           Thu 13 Apr 2023 05:10:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:79:05:e2:fa:29:45:20:d3:b3:e2:7d:fd:65:b5:bb:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 13 05:10:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=56d79f2b3fa52add3696c29b24908b5fbe695df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8f:64:8b:99:d9:95:db:9e:92:2b:85:d8:fe:
                    1f:a0:81:75:4c:18:db:be:a7:bc:40:d2:19:c9:a1:
                    df:e7:31:7b:a1:81:a0:7a:ed:aa:ee:db:01:a3:3a:
                    ec:d7:f7:ef:42:30:84:cf:fb:25:b0:f1:81:23:f6:
                    7d:52:d8:d8:bc:01:44:31:d9:13:e6:18:02:15:47:
                    d2:1c:79:e8:84:9f:44:dc:67:68:91:5f:48:1e:fd:
                    11:51:a3:72:4a:1f:13:bd:7f:7e:57:ec:3d:13:ff:
                    bb:d0:e6:b4:cb:a7:87:55:fb:3d:67:a6:de:03:69:
                    a1:db:bf:3d:06:d1:6c:8d:5e:61:c3:25:46:6f:1d:
                    22:df:c5:72:15:fa:2f:7b:0c:30:9c:25:12:79:e0:
                    c0:30:9d:b7:0c:63:fc:b8:00:41:80:3b:a1:57:72:
                    6a:3d:02:e8:85:68:ba:36:66:98:4a:d6:9e:63:87:
                    9c:e1:7b:4d:b9:62:85:0f:fa:fd:81:f7:87:e8:18:
                    90:f4:b7:f9:50:ee:1d:57:84:ec:08:0b:1c:2f:c0:
                    c3:bb:2b:e0:70:71:b4:90:ae:e7:9a:38:86:6a:3b:
                    1f:9c:d8:01:71:dc:5c:cf:11:2c:2b:a4:c7:d9:6c:
                    a0:5f:08:6a:2d:d7:db:0e:f9:16:16:38:69:c3:11:
                    32:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D7:9F:2B:3F:A5:2A:DD:36:96:C2:9B:24:90:8B:5F:BE:69:5D:F8
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VtefKz-lKt02lsKbJJCLX75pXfg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:a3:3b:77:55:2b:8f:83:e9:31:4e:b0:58:f0:63:06:57:b9:
         57:85:ed:3a:46:7d:75:db:73:81:95:73:11:9c:f5:f8:11:75:
         b5:50:49:40:ad:00:66:2a:6f:76:b4:13:b6:a2:88:52:fe:58:
         68:3a:19:ed:62:12:14:b6:8a:f2:ae:04:9a:c9:84:59:56:b9:
         30:a7:3a:57:ba:ff:f6:d9:bf:d1:d1:d0:23:ba:b1:8b:4f:89:
         e0:f6:8a:ab:23:7c:01:bf:64:5d:49:05:4e:dd:c1:75:f9:a9:
         49:87:57:29:9e:86:ce:8d:6f:0c:64:30:a9:bd:09:82:57:eb:
         63:ef:97:e1:84:60:99:02:e5:6d:5e:52:8f:da:b6:c4:2b:e9:
         4a:9b:68:be:7d:17:2c:c0:b5:ef:85:95:4e:b6:a0:b2:32:c9:
         66:fd:4a:79:93:6b:e8:9b:7a:6c:72:70:5b:d8:68:06:0a:d1:
         88:ab:6a:95:9e:c0:f2:03:8d:17:07:46:ae:6e:e5:d7:aa:f6:
         dc:b1:9b:80:2d:79:b2:f4:5a:72:36:b4:da:4e:4b:ef:8e:2f:
         54:e7:78:27:d2:05:01:ac:5c:fd:15:03:bf:13:aa:d8:f1:a7:
         4e:d2:f9:6b:77:ea:c9:38:f2:6b:cd:67:cf:40:b7:66:f3:91:
         f5:89:9c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 21:16:59 2025 by rpki-client