This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/byz_qPlgW9KUIVIkXDiT10GAcg0.roa
File:                     byz_qPlgW9KUIVIkXDiT10GAcg0.roa (raw, json)
Hash identifier:          SSmv6mwCDUiGaGnOfLIE9AOviJA198RFViXGu6xPamM=
Subject key identifier:   6F:2C:FF:A8:F9:60:5B:D2:94:21:52:24:5C:38:93:D7:41:80:72:0D
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018973373E14AF890B59DB101824D069D00C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/byz_qPlgW9KUIVIkXDiT10GAcg0.roa
Signing time:             Thu 20 Jul 2023 12:12:27 +0000
ROA not before:           Thu 20 Jul 2023 12:12:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:73:37:3e:14:af:89:0b:59:db:10:18:24:d0:69:d0:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 20 12:12:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6f2cffa8f9605bd2942152245c3893d74180720d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d0:76:63:95:af:7c:92:39:16:57:d7:b9:58:
                    98:2d:59:2d:39:00:e8:b7:8d:5f:5e:96:9b:5a:e7:
                    69:0e:ad:ff:23:83:61:5b:f4:4e:a9:12:c2:16:a1:
                    99:89:d1:15:1c:53:fb:e4:2e:3f:0e:c0:95:29:b3:
                    28:0a:1c:5c:3f:4e:1e:22:18:87:10:75:f5:75:49:
                    fb:98:93:24:da:eb:2f:87:ad:bd:a2:0b:8f:05:e7:
                    24:5a:61:78:d4:b0:18:02:08:23:7d:69:87:db:5e:
                    6c:dd:84:a8:5a:84:f5:68:a1:07:6d:48:16:9e:3a:
                    7c:b7:da:85:d5:3d:a3:a1:97:74:a5:01:68:43:3e:
                    b8:4c:32:a9:59:85:4e:71:f6:85:d1:28:04:be:4e:
                    18:b6:c8:77:cf:47:c3:d1:6c:ca:28:39:f2:f1:58:
                    e9:93:23:36:ad:6f:3f:fa:2f:8b:22:3a:1d:7b:87:
                    64:ac:b5:94:80:74:59:c1:f5:ac:a7:ff:db:11:e3:
                    d1:ce:0f:24:35:5a:73:e6:72:0e:b7:d9:52:ff:5a:
                    57:f5:83:0b:92:da:51:86:01:85:47:39:02:a6:de:
                    cb:9d:a2:68:08:ca:24:8b:28:47:11:92:59:46:b0:
                    82:94:df:9d:2f:f6:f8:7e:a5:3e:ac:8a:bc:b8:6e:
                    1b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2C:FF:A8:F9:60:5B:D2:94:21:52:24:5C:38:93:D7:41:80:72:0D
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/byz_qPlgW9KUIVIkXDiT10GAcg0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:e0:77:41:6a:b4:b5:89:6e:91:c5:22:0e:cb:0e:0c:e1:6e:
         09:3e:25:86:c0:13:03:41:de:84:0c:12:71:85:45:c5:67:f6:
         67:69:94:1e:97:a5:88:31:cd:a3:1a:c2:75:51:a4:39:9c:f2:
         e1:be:cd:e3:6c:8d:58:b4:cc:ff:6f:ce:a7:30:88:9b:f7:ca:
         e8:bd:da:1f:04:89:ea:78:08:35:a2:e6:13:42:31:a1:46:8f:
         1a:10:ca:f0:97:97:05:b1:66:c5:e3:63:a5:cc:10:80:02:28:
         a6:6a:08:1b:6d:36:e5:45:00:77:f3:70:0a:20:34:93:78:e0:
         40:20:6d:b5:2f:8f:12:52:2e:82:48:0b:0c:80:1d:a9:81:ba:
         94:b2:55:c6:c1:3e:89:9d:8e:6e:3b:7e:fc:5d:af:42:f8:05:
         7a:a5:8c:b7:a3:fb:13:c4:54:8c:63:7a:d4:65:1b:41:e0:26:
         4a:91:32:4f:99:07:ee:dc:4a:35:03:b8:63:2d:74:26:63:8c:
         5a:9b:7e:f2:d7:6c:c9:cc:41:49:e7:47:b5:c6:ac:dd:a0:77:
         17:07:24:6d:b3:f1:59:bf:53:a4:40:c9:0d:e5:38:1e:e5:b8:
         11:39:56:41:02:a2:9d:b3:07:fa:f4:cc:34:10:f9:1a:8a:69:
         76:8f:3c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 22:39:07 2025 by rpki-client