This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gjb_hBqKORJ0G9qfh9JiluDutbM.roa
File:                     gjb_hBqKORJ0G9qfh9JiluDutbM.roa (raw, json)
Hash identifier:          vd0updMIJifsKRwqrUq8nBjEYEoetW73pCjeLiHhQy8=
Subject key identifier:   82:36:FF:84:1A:8A:39:12:74:1B:DA:9F:87:D2:62:96:E0:EE:B5:B3
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       7438242E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gjb_hBqKORJ0G9qfh9JiluDutbM.roa
Signing time:             Sun 20 Mar 2022 19:09:30 +0000
ROA not before:           Sun 20 Mar 2022 19:09:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
                          2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1949836334 (0x7438242e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 20 19:09:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8236ff841a8a3912741bda9f87d26296e0eeb5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:14:2e:8e:79:d1:f3:ea:19:af:c8:8f:b4:c3:
                    b1:60:71:93:64:fb:b0:04:dd:62:57:39:7b:2d:76:
                    22:40:c3:f0:43:d4:b2:11:eb:26:cc:6c:64:19:54:
                    e0:4b:a4:95:8c:f7:dd:9c:14:29:38:d9:b1:32:25:
                    fc:50:38:70:2c:f7:aa:d3:9e:60:9e:cb:0d:af:b9:
                    7e:f9:2b:ea:95:da:36:4e:6f:be:91:7f:7e:80:0d:
                    fa:55:96:78:4d:df:27:30:bc:1d:bc:e3:16:87:c0:
                    95:db:e0:c9:92:2a:d3:d2:bb:2c:32:28:29:5d:10:
                    bc:f1:6f:91:d2:dd:a7:b9:7c:a6:0e:e3:dc:7c:f2:
                    18:5b:f0:dd:7f:ab:c4:cc:27:4c:e2:25:fa:4b:43:
                    19:5a:dc:31:a8:95:68:b5:c7:ff:2e:51:08:26:cb:
                    53:29:57:cd:0a:80:78:d2:b9:b9:db:e0:69:4f:3c:
                    ab:1c:4d:c2:52:11:36:c2:ec:f8:5e:59:f0:75:66:
                    4c:42:87:79:e2:35:be:32:f5:46:29:1e:f9:17:d3:
                    e1:f3:8d:02:55:22:5c:94:95:70:a2:9f:cc:22:0c:
                    ed:52:18:6b:71:77:b1:04:96:77:e4:b0:e0:05:bf:
                    a9:a7:19:21:94:cb:ed:3b:1c:6d:43:a0:2d:54:ae:
                    4a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:36:FF:84:1A:8A:39:12:74:1B:DA:9F:87:D2:62:96:E0:EE:B5:B3
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gjb_hBqKORJ0G9qfh9JiluDutbM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:28:9e:ed:c8:47:48:14:34:09:38:f5:fc:04:0e:07:cc:b8:
         31:c2:ec:16:52:64:1d:a1:77:3b:36:fc:54:22:39:fd:58:8e:
         67:c8:a9:b2:11:6a:e3:df:b6:9d:ee:dd:91:15:81:e4:5f:03:
         5d:1a:d5:0b:f6:ad:d8:eb:55:42:95:a4:e7:22:92:3c:13:1e:
         8b:58:74:cf:21:a7:17:67:fc:af:57:00:88:ed:6c:2e:66:04:
         14:69:1b:05:55:6d:b6:10:34:e5:41:57:c2:2b:56:ba:03:c9:
         8a:63:f1:e0:95:ba:8a:11:8e:c3:87:ea:eb:5e:5b:fd:5b:0a:
         c1:2b:a6:c7:ef:1d:29:9b:6c:46:8d:76:03:84:16:fb:ac:36:
         7c:33:60:3c:fc:e8:3a:85:3a:9f:aa:93:e6:da:6e:34:67:d5:
         19:80:39:41:77:3f:c4:44:d7:82:8e:bb:05:62:14:29:4f:96:
         f9:ca:cb:2e:09:13:f5:97:7e:a2:2f:d6:d1:8e:e2:2a:07:69:
         c9:6c:e4:0d:cb:0f:98:15:d0:2d:82:d8:21:b6:4e:ad:46:89:
         3a:ce:7a:f0:1a:70:d0:ca:3d:ae:ca:0f:18:b3:82:88:fd:25:
         1e:e7:c4:12:8d:74:a3:1f:b1:8a:10:93:e8:7a:5e:68:38:3d:
         24:06:71:15
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEdDgkLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMy
MDE5MDkzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODIzNmZmODQxYThh
MzkxMjc0MWJkYTlmODdkMjYyOTZlMGVlYjViMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM0ULo550fPqGa/Ij7TDsWBxk2T7sATdYlc5ey12IkDD8EPU
shHrJsxsZBlU4EuklYz33ZwUKTjZsTIl/FA4cCz3qtOeYJ7LDa+5fvkr6pXaNk5v
vpF/foAN+lWWeE3fJzC8HbzjFofAldvgyZIq09K7LDIoKV0QvPFvkdLdp7l8pg7j
3HzyGFvw3X+rxMwnTOIl+ktDGVrcMaiVaLXH/y5RCCbLUylXzQqAeNK5udvgaU88
qxxNwlIRNsLs+F5Z8HVmTEKHeeI1vjL1Rike+RfT4fONAlUiXJSVcKKfzCIM7VIY
a3F3sQSWd+Sw4AW/qacZIZTL7TscbUOgLVSuSmcCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSCNv+EGoo5EnQb2p+H0mKW4O61szAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L2dqYl9oQnFLT1JKMEc5cWZoOUppbHVEdXRiTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCXKJ7tyEdIFDQJOPX8BA4HzLgxwuwWUmQdoXc7
NvxUIjn9WI5nyKmyEWrj37ad7t2RFYHkXwNdGtUL9q3Y61VClaTnIpI8Ex6LWHTP
IacXZ/yvVwCI7WwuZgQUaRsFVW22EDTlQVfCK1a6A8mKY/HglbqKEY7Dh+rrXlv9
WwrBK6bH7x0pm2xGjXYDhBb7rDZ8M2A8/Og6hTqfqpPm2m40Z9UZgDlBdz/ERNeC
jrsFYhQpT5b5yssuCRP1l36iL9bRjuIqB2nJbOQNyw+YFdAtgtghtk6tRok6znrw
GnDQyj2uyg8Ys4KI/SUe58QSjXSjH7GKEJPoel5oOD0kBnEV
-----END CERTIFICATE-----
Generated at Mon Dec 22 20:32:37 2025 by rpki-client