This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c1dGj1DkI03-WNGjSXlAZ7wRYpQ.roa
File:                     c1dGj1DkI03-WNGjSXlAZ7wRYpQ.roa (raw, json)
Hash identifier:          gLjx0HxLtd0F7p7ZTVLCLLLFkERLpP/FlkHJYX6JIJA=
Subject key identifier:   73:57:46:8F:50:E4:23:4D:FE:58:D1:A3:49:79:40:67:BC:11:62:94
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0188DAA4A8167580A2C1918050CCCBC36F9B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c1dGj1DkI03-WNGjSXlAZ7wRYpQ.roa
Signing time:             Tue 20 Jun 2023 21:10:03 +0000
ROA not before:           Tue 20 Jun 2023 21:10:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:da:a4:a8:16:75:80:a2:c1:91:80:50:cc:cb:c3:6f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun 20 21:10:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7357468f50e4234dfe58d1a349794067bc116294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ee:fc:ee:e7:49:b3:24:7d:20:de:49:35:48:
                    54:b5:42:cf:8b:9e:0f:8f:21:d1:a0:12:25:07:42:
                    8b:dd:c1:48:c3:8c:86:c2:8b:59:77:58:55:30:00:
                    99:36:fb:97:10:98:89:61:39:eb:6a:87:81:5b:38:
                    3a:0f:db:27:d4:21:8b:24:08:17:14:89:7b:45:6b:
                    ff:d0:74:fc:3a:94:98:20:0c:7b:6e:94:7e:00:91:
                    ac:3a:86:f2:e6:05:65:50:ad:22:fc:1b:4e:67:c7:
                    87:1e:1f:97:06:40:14:47:d2:d2:10:f3:a9:fc:7c:
                    2f:df:5a:a6:df:f2:46:84:32:0f:2a:92:c6:01:44:
                    83:4b:12:46:c1:5d:00:4a:d2:34:99:e5:aa:c4:42:
                    5a:ee:de:37:f7:bf:7d:10:ff:33:2b:e4:7a:a6:48:
                    46:9c:f2:8e:13:a7:e0:bb:80:86:dc:1c:bd:5c:e2:
                    83:38:fb:6d:ba:d4:e7:ce:3e:b4:c2:90:5a:81:3c:
                    48:85:84:1c:be:1d:f0:c5:dc:4d:9d:d3:52:3d:60:
                    eb:d8:56:df:64:cb:00:35:a2:91:b8:7b:1a:cf:c7:
                    33:13:7f:1f:57:5e:8c:4d:78:c0:4f:a3:52:d1:14:
                    0c:2b:f9:3b:0e:81:16:7c:4e:4e:20:28:e3:a9:3c:
                    7a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:57:46:8F:50:E4:23:4D:FE:58:D1:A3:49:79:40:67:BC:11:62:94
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c1dGj1DkI03-WNGjSXlAZ7wRYpQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:12:c8:cb:ab:50:e5:94:78:fa:7e:9e:d9:8f:eb:5f:23:45:
         58:ae:59:0e:11:33:f3:ef:81:17:f0:75:e2:1a:f7:7b:7e:60:
         ad:86:43:01:cb:aa:9a:e4:36:7a:dc:7c:0c:ab:51:ea:8b:5d:
         2a:69:89:01:a7:c2:a5:85:97:28:df:14:06:06:49:eb:81:4e:
         db:f6:b8:77:27:58:a1:c7:95:28:8f:91:d1:5b:de:35:a1:dd:
         85:4c:d0:10:c4:4b:13:7f:f2:17:6c:75:64:5f:66:02:9e:d7:
         40:48:7b:52:68:59:f1:77:ec:cd:29:d5:4a:6a:46:e7:94:25:
         94:bd:10:38:3e:b4:2e:26:c5:ac:8a:ba:b1:97:88:96:c7:6b:
         d4:67:b2:4d:8f:4a:ba:e7:3e:22:b2:86:70:3c:0f:21:20:ad:
         67:bc:d4:cb:53:72:b2:c5:f6:df:a2:f1:92:ce:1f:c9:f8:64:
         67:ae:b1:6b:75:5e:4d:88:99:2a:62:33:11:fc:58:31:e0:7b:
         d9:74:b4:dd:b1:a9:50:fd:ef:4a:8b:92:a9:c2:8f:c2:b0:f3:
         54:d7:9c:99:53:ad:eb:47:3d:c5:0a:4c:03:c4:58:a2:a9:1a:
         47:25:4f:3f:bf:5a:8d:49:d2:67:db:c7:0f:94:37:74:43:b0:
         26:de:a0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 04:01:08 2025 by rpki-client