This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aSRG_AoWDycaOpAcuPH8eT1Iqs0.roa
File:                     aSRG_AoWDycaOpAcuPH8eT1Iqs0.roa (raw, json)
Hash identifier:          0qeVMGaXzLyd5K+1zyYAX9fhAAzolWYHUGP9c0pTLr8=
Subject key identifier:   69:24:46:FC:0A:16:0F:27:1A:3A:90:1C:B8:F1:FC:79:3D:48:AA:CD
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018971B3F77F9BB6EFFDE0F6C4FD7F0420A4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aSRG_AoWDycaOpAcuPH8eT1Iqs0.roa
Signing time:             Thu 20 Jul 2023 05:09:26 +0000
ROA not before:           Thu 20 Jul 2023 05:09:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:71:b3:f7:7f:9b:b6:ef:fd:e0:f6:c4:fd:7f:04:20:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 20 05:09:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=692446fc0a160f271a3a901cb8f1fc793d48aacd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:45:57:aa:09:09:83:c9:5f:8b:35:23:b4:c8:
                    dd:a9:cc:61:d3:37:c8:68:a7:4c:de:33:3f:10:86:
                    c9:9d:c4:2d:77:c2:71:b4:5a:04:c4:4b:55:23:11:
                    e8:9d:51:07:80:a5:01:d9:66:08:2a:10:21:dc:5e:
                    b4:b8:c4:7c:7b:e7:31:52:0b:e0:59:f9:d0:79:88:
                    10:3b:eb:f3:98:25:31:77:6b:16:c9:a3:47:30:84:
                    f1:f2:46:21:08:be:ce:73:d9:86:d2:e7:ab:fa:8c:
                    07:0d:79:1f:15:bd:fc:2f:f6:65:f6:2c:94:f9:89:
                    a5:e8:7f:50:3a:4a:5c:d4:8e:99:c7:36:64:da:4f:
                    24:6b:f5:cc:7d:c2:8e:06:eb:73:06:28:11:0e:94:
                    8b:72:53:20:d8:74:b8:68:41:69:bc:4a:77:df:7a:
                    04:f5:28:2b:5b:43:c4:41:76:d1:54:13:d9:97:03:
                    78:9e:7f:0c:2b:0f:03:10:1b:07:28:94:33:4a:77:
                    24:90:83:5e:31:a1:2f:55:02:3d:97:d4:01:06:28:
                    a7:5b:53:02:a1:18:1a:c2:c2:f9:ba:44:7b:ce:c1:
                    48:be:d0:50:b1:6d:d2:64:6b:8b:67:27:01:56:7a:
                    6e:28:1f:7b:f1:ec:7c:4c:05:bd:17:a8:23:dd:06:
                    94:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:24:46:FC:0A:16:0F:27:1A:3A:90:1C:B8:F1:FC:79:3D:48:AA:CD
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aSRG_AoWDycaOpAcuPH8eT1Iqs0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:52:fc:2b:01:b4:a7:62:bc:d2:ee:f6:c8:23:2b:fc:89:7b:
         d4:86:87:94:ff:4b:17:1b:00:b0:83:7d:c4:8d:6a:ee:a2:05:
         71:b0:8d:ec:28:3f:e1:91:2a:26:d6:3d:9d:e9:5f:58:a7:75:
         f6:fa:5b:60:ea:98:a3:96:55:cf:39:ab:77:bc:08:3f:b4:a1:
         90:66:ed:59:93:0f:c4:1b:ed:b3:87:a5:2e:a7:38:1f:e8:98:
         68:39:6e:b2:5f:0f:93:17:6a:c1:27:97:4d:74:47:5f:81:f5:
         28:c6:6b:15:13:26:8d:c7:0e:ed:21:da:d5:6b:db:ee:57:74:
         ae:8d:e7:35:62:bf:88:43:73:89:25:35:dc:7b:c9:3f:cb:d5:
         30:5b:89:86:e3:79:98:68:01:06:a6:9e:b8:26:7a:cc:64:fc:
         8e:ef:29:4b:ae:ad:1e:bd:5a:36:35:39:14:4d:5f:4e:8b:5c:
         3a:58:36:dc:a1:0e:84:65:31:5b:61:cf:24:b6:a2:f0:a3:96:
         1a:ba:36:6d:87:2f:e8:bd:6d:53:ae:d4:20:4c:3d:fc:cd:83:
         8a:0c:44:18:73:96:15:1e:4b:a7:85:e6:aa:12:32:86:ce:16:
         34:b9:ab:3f:a9:e4:08:b1:31:d0:c5:b4:7b:08:1f:46:96:b0:
         c6:6e:01:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 09:30:16 2025 by rpki-client