This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZcGHRoUKyp2kH6AqJHd70ZACL_o.roa
File:                     ZcGHRoUKyp2kH6AqJHd70ZACL_o.roa (raw, json)
Hash identifier:          TGxN6KGhtXEGdLsydMO7FQd6SK7KYzKK5OF4kZMX8JA=
Subject key identifier:   65:C1:87:46:85:0A:CA:9D:A4:1F:A0:2A:24:77:7B:D1:90:02:2F:FA
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       6947D363
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZcGHRoUKyp2kH6AqJHd70ZACL_o.roa
Signing time:             Thu 10 Feb 2022 01:08:31 +0000
ROA not before:           Thu 10 Feb 2022 01:08:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:ddba:7b5e/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:db26:e5c4/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dab9:26f6/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:17e:da82:41aa/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dd83:3b9e/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dcde:5809/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:daf0:4034/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dc02:dc22/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dc39:b603/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:db5e:7e8/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1766314851 (0x6947d363)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb 10 01:08:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=65c18746850aca9da41fa02a24777bd190022ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:93:23:7f:e9:39:61:09:47:0c:b4:3b:25:
                    29:c4:67:82:29:e1:79:63:79:9c:c4:eb:5a:25:9b:
                    51:3e:61:ac:fb:71:ec:c9:97:1b:65:96:28:2c:92:
                    7d:5d:3a:2b:39:16:bb:b8:65:1e:2e:79:7e:73:0d:
                    5b:85:2a:d3:7b:f0:e1:9e:de:de:73:74:88:f1:27:
                    dc:a5:50:db:8e:dc:08:24:b3:6c:eb:d9:d0:88:7d:
                    64:e2:7c:8b:5b:54:f4:21:c3:98:4e:2a:11:54:37:
                    86:1f:39:e1:7a:31:71:65:9f:5d:33:bc:20:7c:3b:
                    9c:fb:cb:c2:9f:58:15:15:97:f7:1b:13:79:e0:61:
                    54:79:49:97:c8:1f:2a:a0:97:11:72:58:54:77:ec:
                    c9:6d:03:50:84:b9:18:a9:45:66:fc:af:75:ff:2f:
                    57:c2:8a:f2:66:86:32:9f:d2:c7:c4:dd:e6:b3:ed:
                    21:07:29:30:a2:32:f9:70:af:36:4c:1a:dd:37:28:
                    2d:4c:ae:15:97:92:3c:c3:7a:dc:87:62:12:bb:1e:
                    be:87:9b:17:26:9d:7e:2a:b9:2c:04:6c:84:ee:7b:
                    58:04:f9:c9:96:0e:f6:a0:71:14:56:52:b2:41:e6:
                    5d:c0:fa:0c:1b:b2:23:80:04:9a:18:24:bc:b7:75:
                    5a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C1:87:46:85:0A:CA:9D:A4:1F:A0:2A:24:77:7B:D1:90:02:2F:FA
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZcGHRoUKyp2kH6AqJHd70ZACL_o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:c4:88:e9:4f:4a:c1:38:9a:c5:02:ed:6f:ba:1b:c6:04:fa:
         f9:17:df:44:a1:a6:35:ad:01:48:10:6c:9e:15:81:37:75:67:
         40:18:63:32:f7:47:ed:6b:0b:c7:51:04:ce:9e:e4:79:47:0b:
         f6:cf:3a:bc:81:2e:d3:5f:c8:08:3f:a8:7b:56:b8:36:ea:8c:
         61:5d:ce:48:da:a8:56:0a:50:af:03:a4:cf:28:df:73:ad:24:
         41:96:46:aa:0a:8c:35:c4:29:46:a7:ad:18:31:5f:fa:81:eb:
         f6:37:37:2c:3d:27:e9:70:a6:c0:ed:c6:16:39:6e:48:3d:46:
         92:72:db:bf:65:3a:2e:f6:3e:ad:5e:ad:42:36:b7:8c:00:ef:
         bd:48:5a:56:68:af:19:f6:43:4c:e1:38:14:27:78:a3:1d:d7:
         a2:3e:d8:04:2c:37:53:ca:72:27:ac:d5:ac:b0:7c:5f:4f:ed:
         a4:e3:1c:ed:9a:56:8f:c5:4c:c3:f6:18:e1:6c:c5:28:85:cf:
         c6:8a:ba:b9:1e:e1:ab:bd:fb:8e:d0:d6:5e:15:10:71:67:c8:
         d0:c9:38:f3:87:88:33:3b:dc:a1:14:1b:a2:e2:c7:5f:56:67:
         85:94:4c:dc:d5:71:9f:10:b9:3f:96:b6:8f:a4:70:b6:6a:73:
         6f:e1:a2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 00:14:52 2025 by rpki-client