This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y2imB-z-XOOdeOlTz8C4Q6MY1KE.roa
File:                     Y2imB-z-XOOdeOlTz8C4Q6MY1KE.roa (raw, json)
Hash identifier:          u/7rRj7JvkIZHA5X6OZUCrBpv3KcZd27f01igEDJ1z8=
Subject key identifier:   63:68:A6:07:EC:FE:5C:E3:9D:78:E9:53:CF:C0:B8:43:A3:18:D4:A1
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0189E863254B843DCC4F31DD446B58010C8A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y2imB-z-XOOdeOlTz8C4Q6MY1KE.roa
Signing time:             Sat 12 Aug 2023 06:15:58 +0000
ROA not before:           Sat 12 Aug 2023 06:15:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:e8:63:25:4b:84:3d:cc:4f:31:dd:44:6b:58:01:0c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Aug 12 06:15:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6368a607ecfe5ce39d78e953cfc0b843a318d4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8c:36:88:eb:82:dd:27:97:a0:56:00:6a:68:
                    f8:ef:09:04:5b:38:7b:44:8a:72:7d:e9:99:95:d8:
                    2f:66:0b:64:46:91:da:4e:d0:4a:e1:92:97:5c:aa:
                    eb:7b:cd:95:6a:c2:33:fb:28:88:f5:90:b3:c5:23:
                    0a:5b:22:48:c3:ba:9f:6a:1d:27:76:e1:df:91:12:
                    77:3d:b4:80:35:cc:28:f9:40:60:59:bf:3d:1e:2d:
                    bf:64:94:fe:20:2f:3f:56:7b:ac:50:91:09:b1:3f:
                    ae:50:5b:b5:ae:50:0b:1b:14:45:26:30:78:44:62:
                    35:f5:1f:71:f6:44:d7:cc:19:4e:c9:42:36:9e:01:
                    b7:32:99:c5:3d:3a:1d:80:e5:14:19:32:5b:09:37:
                    9a:dc:b0:e4:e4:56:6f:05:1f:30:3a:95:a5:6d:db:
                    53:2f:20:c0:2a:2f:91:a4:39:7b:94:69:d3:1c:af:
                    42:4c:d7:c6:a1:91:aa:f3:2d:19:db:6f:4b:3d:a0:
                    cc:95:be:7e:13:e1:b4:02:dc:73:1f:b8:bc:a6:88:
                    93:af:40:4d:dd:42:82:65:14:1c:f7:e8:06:72:b7:
                    3a:65:b4:bf:68:78:f7:49:87:07:36:0c:06:09:47:
                    91:d3:73:9b:a7:88:8d:1b:8d:d1:13:19:22:a7:06:
                    cc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:68:A6:07:EC:FE:5C:E3:9D:78:E9:53:CF:C0:B8:43:A3:18:D4:A1
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y2imB-z-XOOdeOlTz8C4Q6MY1KE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:72:1e:64:28:7f:20:4c:30:86:42:57:db:64:e0:de:83:1e:
         2c:10:43:a7:38:ee:00:82:d5:c2:5f:17:2a:75:32:21:77:84:
         aa:64:48:65:e3:12:82:7c:29:b9:4f:4f:b2:40:76:55:43:fc:
         d4:23:cd:8b:3a:9f:5b:3b:ed:a7:13:e6:d3:a7:23:86:23:ee:
         56:e5:72:44:01:54:43:22:d4:43:93:8b:e1:06:40:5c:1c:d1:
         90:f6:ba:08:58:13:d3:f1:49:56:35:fb:89:b6:2c:23:36:04:
         0c:9d:39:0d:1f:87:e8:e4:c9:9e:0b:2c:04:fa:ed:f4:e4:64:
         43:33:aa:62:73:cc:97:c2:bf:de:69:67:31:e3:61:4d:85:ff:
         d7:ce:e0:4f:61:a2:fc:7e:19:62:46:ed:22:b3:78:cc:c3:0e:
         ee:5b:40:2f:92:27:fd:d8:0b:a8:84:d3:46:80:10:c4:58:2c:
         11:02:f8:23:80:93:d0:8b:88:37:a0:8e:20:0a:a5:16:55:ca:
         2c:43:10:c0:af:92:01:44:3b:29:88:97:2e:ed:6c:6a:ab:b1:
         f8:80:b4:b8:ab:64:b0:fb:85:ac:37:58:01:a6:f3:5a:f2:6d:
         79:a0:9d:2b:94:94:17:ae:ca:7e:4a:88:d0:6d:1f:67:7a:4c:
         8a:db:e1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 13:21:13 2025 by rpki-client