This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g7M5Rnq1ENMvmutO42oc2aQjhlo.roa
File:                     g7M5Rnq1ENMvmutO42oc2aQjhlo.roa (raw, json)
Hash identifier:          Nd/oN5OFuKeVGq17IljpMicd/Xz7sWdd6/hO0zCIt+o=
Subject key identifier:   83:B3:39:46:7A:B5:10:D3:2F:9A:EB:4E:E3:6A:1C:D9:A4:23:86:5A
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01883725CFC485DFCDF472E27C69DC5734F7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g7M5Rnq1ENMvmutO42oc2aQjhlo.roa
Signing time:             Sat 20 May 2023 03:13:24 +0000
ROA not before:           Sat 20 May 2023 03:13:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:37:25:cf:c4:85:df:cd:f4:72:e2:7c:69:dc:57:34:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 20 03:13:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=83b339467ab510d32f9aeb4ee36a1cd9a423865a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4f:9a:cc:e7:9d:99:5a:8f:38:d4:fe:23:a6:
                    20:75:0d:e0:22:5a:2d:87:a7:f3:be:79:a7:b1:c2:
                    1b:72:a3:80:3b:75:6c:ac:77:15:af:ec:94:00:47:
                    ba:9f:9f:2a:3a:6e:3f:08:5d:f5:b8:7b:b1:7a:bf:
                    95:e7:12:1c:28:2c:3c:b5:fb:02:fa:eb:59:23:87:
                    50:d4:96:0e:07:25:25:04:6f:69:8c:a8:64:4f:d1:
                    e2:01:86:f8:5d:c3:27:e1:27:0e:8c:03:47:d0:e0:
                    56:9c:a9:d1:ed:84:84:16:f7:1a:f5:fa:05:de:b4:
                    7a:d4:f7:21:a5:e9:93:ad:ac:de:e0:4c:e7:2e:d5:
                    a5:38:3c:78:2d:52:01:c3:92:c0:d6:55:97:3b:92:
                    34:64:3a:df:e5:62:07:1f:ac:e9:bb:e3:96:dc:b8:
                    2d:9a:a8:65:35:d1:e3:df:8b:ea:d1:02:d5:f5:9c:
                    d4:93:e6:75:4e:9c:2a:5b:fd:9d:c6:d0:6b:41:05:
                    ae:b1:95:98:6a:c6:f9:bc:f8:12:7e:fe:ff:66:4e:
                    aa:9e:67:e3:8a:2e:27:07:54:87:51:48:8b:ec:f0:
                    49:f3:f4:9c:78:92:c1:3f:a9:8e:ef:cc:d9:0a:ee:
                    9b:80:a1:65:b1:00:d2:61:21:8a:59:60:06:c1:29:
                    44:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B3:39:46:7A:B5:10:D3:2F:9A:EB:4E:E3:6A:1C:D9:A4:23:86:5A
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g7M5Rnq1ENMvmutO42oc2aQjhlo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:0a:cc:e5:7d:bd:e9:43:11:d7:fc:a7:3d:4a:e5:d6:35:34:
         9b:18:a9:50:6f:2f:91:d4:d3:e5:a8:ee:80:59:17:c5:f9:59:
         33:5e:4f:cf:89:28:69:91:06:45:88:ca:7d:9f:65:db:64:88:
         7b:a8:26:eb:5d:26:c8:19:ce:81:6d:de:87:51:c2:6b:22:b8:
         1d:cc:5c:17:26:d7:ac:58:ce:9b:85:6e:d9:2f:25:4e:8f:8a:
         78:ac:bc:1c:63:2a:e7:80:0d:5e:04:f5:03:16:d5:bf:5c:07:
         f3:ac:5e:a7:ad:4a:5c:6d:78:db:2e:e5:2f:70:45:42:19:1a:
         61:c5:31:7f:3c:f5:fd:e9:ee:01:f1:76:60:ad:e1:13:a8:d6:
         02:72:a3:a4:9b:0f:0b:89:be:04:2d:da:ce:f5:30:70:15:32:
         59:7e:eb:62:48:74:6f:07:b9:ff:1b:da:5b:ca:82:9f:e1:5a:
         d7:19:0a:1b:19:9b:5d:57:9f:f5:7f:86:f2:3c:d1:4b:0d:dc:
         25:c6:12:e8:9a:ca:5a:fc:0d:73:24:15:7d:04:7b:a6:a0:46:
         3f:09:3c:b9:e4:f2:74:77:ed:5d:f5:79:f7:95:7b:b3:d0:b7:
         8b:9c:2a:54:36:f6:03:76:a5:da:7e:b3:d8:5e:45:59:c9:8c:
         b1:c7:80:ae
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYg3Jc/Ehd/N9HLifGncVzT3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTIwMDMxMzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2IzMzk0NjdhYjUxMGQzMmY5YWViNGVlMzZhMWNkOWE0MjM4NjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU+azOedmVqPONT+I6YgdQ3gIlot
h6fzvnmnscIbcqOAO3VsrHcVr+yUAEe6n58qOm4/CF31uHuxer+V5xIcKCw8tfsC
+utZI4dQ1JYOByUlBG9pjKhkT9HiAYb4XcMn4ScOjANH0OBWnKnR7YSEFvca9foF
3rR61PchpemTraze4EznLtWlODx4LVIBw5LA1lWXO5I0ZDrf5WIHH6zpu+OW3Lgt
mqhlNdHj34vq0QLV9ZzUk+Z1TpwqW/2dxtBrQQWusZWYasb5vPgSfv7/Zk6qnmfj
ii4nB1SHUUiL7PBJ8/SceJLBP6mO78zZCu6bgKFlsQDSYSGKWWAGwSlE2wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIOzOUZ6tRDTL5rrTuNqHNmkI4ZaMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZzdNNVJucTFFTk12bXV0TzQyb2MyYVFqaGxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJEKzOV9velDEdf8pz1K
5dY1NJsYqVBvL5HU0+Wo7oBZF8X5WTNeT8+JKGmRBkWIyn2fZdtkiHuoJutdJsgZ
zoFt3odRwmsiuB3MXBcm16xYzpuFbtkvJU6PinisvBxjKueADV4E9QMW1b9cB/Os
XqetSlxteNsu5S9wRUIZGmHFMX889f3p7gHxdmCt4ROo1gJyo6SbDwuJvgQt2s71
MHAVMll+62JIdG8Huf8b2lvKgp/hWtcZChsZm11Xn/V/hvI80UsN3CXGEuiaylr8
DXMkFX0Ee6agRj8JPLnk8nR37V31efeVe7PQt4ucKlQ29gN2pdp+s9heRVnJjLHH
gK4=
-----END CERTIFICATE-----
Generated at Fri Dec 19 13:13:21 2025 by rpki-client