This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gTC42Nr_GMHVl6c4x9B_eeHWtr8.roa
File:                     gTC42Nr_GMHVl6c4x9B_eeHWtr8.roa (raw, json)
Hash identifier:          c/tamhHRHPDI6U50I4vbrc5Kr3sze2cmEsvxunlMCJE=
Subject key identifier:   81:30:B8:D8:DA:FF:18:C1:D5:97:A7:38:C7:D0:7F:79:E1:D6:B6:BF
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018203B723EE15CF56BE9C5A95378DE5698D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gTC42Nr_GMHVl6c4x9B_eeHWtr8.roa
Signing time:             Fri 15 Jul 2022 21:15:09 +0000
ROA not before:           Fri 15 Jul 2022 21:15:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:03:b7:23:ee:15:cf:56:be:9c:5a:95:37:8d:e5:69:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 15 21:15:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8130b8d8daff18c1d597a738c7d07f79e1d6b6bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a2:a1:8f:60:b4:4d:14:14:c0:8e:78:a0:06:
                    50:f4:24:ff:d5:ef:8e:ee:35:32:78:7f:ec:56:bd:
                    e7:eb:60:d9:b8:a8:7e:72:55:77:e2:14:bd:88:87:
                    ca:c6:a8:16:80:fe:b6:8e:9d:0f:85:df:14:42:1f:
                    0e:6d:3b:5a:b2:2f:cb:1d:73:61:f7:2d:b4:18:b9:
                    58:f8:00:52:e9:3c:79:a7:3e:3d:ce:d9:df:55:a4:
                    e7:7a:77:b1:20:10:c9:46:c9:a0:29:e0:45:af:44:
                    2d:85:d8:28:a1:e9:3a:84:58:ab:d9:5e:2f:33:e5:
                    09:c1:ed:98:53:ab:70:57:a3:1a:31:22:25:41:d5:
                    63:79:b4:85:b2:2f:93:d9:99:2e:76:ba:d2:99:74:
                    56:f0:64:97:ad:34:34:fd:26:58:f8:84:c0:59:f0:
                    b2:00:99:01:2a:50:91:d9:2b:87:5f:cc:ec:55:51:
                    2b:fd:07:f8:e7:22:5f:8f:60:da:1a:20:3e:43:99:
                    d6:7e:cd:23:1e:48:89:9a:55:c8:fa:4e:f0:a2:38:
                    d2:0b:3b:a8:5e:38:c4:fd:67:1c:2d:41:89:b3:74:
                    ed:df:cf:1f:fd:f1:51:7d:5d:b8:79:22:f1:17:33:
                    40:cd:81:8c:47:60:fe:17:86:5c:b4:9e:2b:96:28:
                    a5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:30:B8:D8:DA:FF:18:C1:D5:97:A7:38:C7:D0:7F:79:E1:D6:B6:BF
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gTC42Nr_GMHVl6c4x9B_eeHWtr8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:2c:5d:fe:24:2f:1b:4e:db:55:7a:29:51:08:2f:13:cb:34:
         7e:1c:44:88:57:7e:69:0a:a7:3b:31:8c:11:71:38:43:34:a5:
         f6:0b:dd:05:b9:a4:c0:0c:4e:b2:a8:1d:49:38:b4:97:c2:ae:
         90:9c:55:f4:bf:d2:ad:f9:7e:78:44:9a:06:24:6f:c3:54:7f:
         81:44:50:80:7c:44:b3:05:d6:68:3c:59:3c:bb:b8:cf:59:64:
         ba:15:73:95:db:49:cc:18:8d:38:67:25:3b:ff:4f:eb:b6:bf:
         b8:21:74:19:c2:dc:63:bd:2d:bf:18:c7:b3:36:d9:01:bb:60:
         72:bc:ea:b1:cc:a8:d6:66:d9:cb:a1:a1:0f:f4:d1:f3:72:ef:
         e3:be:5b:19:e1:6a:98:02:f9:db:fd:a4:11:9f:02:63:94:41:
         ae:44:09:33:14:d2:62:88:b0:66:a2:51:5d:e5:68:d3:00:1f:
         d6:c3:65:f9:d7:eb:c2:fb:f7:97:51:29:e6:19:9e:99:93:d2:
         4e:3a:09:b0:21:4c:af:65:b2:34:87:45:d0:c7:8a:d7:f2:cb:
         a6:9b:b3:cd:d2:62:1e:f2:56:62:63:49:40:4a:7b:84:63:96:
         c1:f4:8c:a4:ee:a2:8d:5d:42:ff:13:49:94:d1:de:c2:6d:13:
         89:9b:4b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 16:50:39 2025 by rpki-client