This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XSkiegLyHMUK-sU3ySlnM1bYTmU.roa
File:                     XSkiegLyHMUK-sU3ySlnM1bYTmU.roa (raw, json)
Hash identifier:          aFo7TNJjBPT2gY0KrpEZcbGkuiAqaZAHCtRnGjL6mqQ=
Subject key identifier:   5D:29:22:7A:02:F2:1C:C5:0A:FA:C5:37:C9:29:67:33:56:D8:4E:65
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       7735248F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XSkiegLyHMUK-sU3ySlnM1bYTmU.roa
Signing time:             Thu 31 Mar 2022 11:13:22 +0000
ROA not before:           Thu 31 Mar 2022 11:13:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
                          2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1999971471 (0x7735248f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 31 11:13:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5d29227a02f21cc50afac537c929673356d84e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1c:2c:88:98:dd:3b:a9:ba:a8:77:1c:69:11:
                    77:01:88:a1:15:a8:47:e5:45:ad:db:f6:ec:a7:0d:
                    4e:84:25:2a:60:12:5a:5f:6f:46:24:cd:f7:cd:ee:
                    ef:d2:b7:97:59:46:53:72:f9:13:53:af:44:70:ea:
                    87:da:10:f1:32:0a:42:77:60:b7:d8:07:7a:3e:68:
                    9f:58:25:6f:56:4b:2e:9e:9c:f8:1a:d7:1e:e4:3c:
                    e6:88:12:cc:c4:8e:8c:8c:59:72:2f:e3:56:1f:94:
                    14:d8:fc:73:a0:93:db:f0:46:96:b5:e4:dc:23:01:
                    58:f2:ae:ea:eb:6c:0b:b0:ba:bf:b4:de:6b:9a:f4:
                    3a:19:a5:21:bd:a0:8c:b8:48:2a:4b:a6:68:85:97:
                    54:7b:79:dd:f6:f5:6b:fd:b3:fa:47:58:dd:7c:0a:
                    d2:86:94:6c:75:e2:df:15:e2:cb:7c:cf:aa:cf:9e:
                    76:a3:f2:ef:a0:70:20:cd:3d:52:9d:c9:df:4f:8b:
                    aa:b0:62:a2:ef:37:9e:b3:7e:a1:b9:c4:a8:69:98:
                    01:32:8b:c4:e3:73:1c:e0:e7:b0:a9:01:77:b9:1b:
                    0d:cb:07:d6:f3:4f:80:e5:55:af:52:3a:d5:5e:9b:
                    41:3d:83:86:1a:de:2c:84:bc:40:f4:96:0d:0e:3c:
                    c5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:29:22:7A:02:F2:1C:C5:0A:FA:C5:37:C9:29:67:33:56:D8:4E:65
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XSkiegLyHMUK-sU3ySlnM1bYTmU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:06:da:e0:31:53:19:e4:b3:bc:0b:7c:89:38:f0:b9:7e:4a:
         bb:7f:a4:fb:4a:d9:bc:f9:28:04:4e:98:20:8c:32:ba:56:99:
         e5:44:ad:56:6a:e4:04:69:3e:39:7a:ef:41:c2:a3:c4:ec:2e:
         54:5b:a0:b2:03:cb:33:af:3a:e5:91:a0:21:4a:8c:3b:92:88:
         91:ce:0a:89:cc:c2:a3:4e:fb:95:f9:15:d9:87:db:ca:c5:5a:
         15:2d:60:fe:48:b2:6a:6e:74:2e:70:e4:cd:4b:94:5a:61:5e:
         1c:45:23:dd:50:42:93:80:27:86:d7:54:4d:3f:29:3f:f8:24:
         2c:27:81:64:5d:10:fb:81:55:af:1e:33:70:e7:f3:bc:5d:40:
         c8:58:24:d2:2b:aa:2a:e1:63:c3:a3:3d:5e:10:6e:89:2b:f6:
         eb:dd:81:bb:69:44:00:24:4c:1f:f1:c1:61:73:18:11:e2:d1:
         86:d2:89:5e:f8:2e:2c:6e:28:18:08:ad:44:f3:17:26:41:a7:
         24:6c:2c:da:24:3c:fa:2e:86:4f:7b:0b:e5:4b:07:0f:97:b6:
         86:e2:a7:7f:b3:4b:73:a0:43:37:7c:76:28:d5:d5:53:27:3c:
         ce:33:a8:05:bd:f5:72:88:27:13:07:8f:36:4f:fa:c0:8a:b0:
         32:e1:b5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:28:58 2025 by rpki-client