This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gruyxlDI7hX-5ofcalt1UaJftl4.roa
File:                     gruyxlDI7hX-5ofcalt1UaJftl4.roa (raw, json)
Hash identifier:          BkzRnMYGoap7DaSgWoCXHwgoRsImESIubbK4Pzb2iCo=
Subject key identifier:   82:BB:B2:C6:50:C8:EE:15:FE:E6:87:DC:6A:5B:75:51:A2:5F:B6:5E
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0188BF9C2FFB063C019D4567ABA3FDE1BDD5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gruyxlDI7hX-5ofcalt1UaJftl4.roa
Signing time:             Thu 15 Jun 2023 15:11:03 +0000
ROA not before:           Thu 15 Jun 2023 15:11:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:bf:9c:2f:fb:06:3c:01:9d:45:67:ab:a3:fd:e1:bd:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun 15 15:11:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=82bbb2c650c8ee15fee687dc6a5b7551a25fb65e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9e:95:19:d3:98:48:06:22:55:85:15:b7:bf:
                    0b:bd:1d:92:63:ad:c1:6b:b2:d0:a0:1f:13:cd:6a:
                    91:01:a7:3e:e6:55:2a:03:d9:1e:0d:53:a3:cf:71:
                    80:f4:16:d9:51:3e:16:8e:d7:42:e9:6e:4b:be:25:
                    11:8c:77:72:16:96:74:a4:c5:3a:cb:e1:83:d5:7b:
                    a8:0c:09:35:53:63:5e:ed:67:95:db:22:37:80:4a:
                    26:16:42:4f:a1:d1:de:69:87:35:34:c8:68:fe:7f:
                    77:76:f5:0e:93:fe:75:c5:25:0f:48:3f:a6:cb:d0:
                    65:d0:60:c5:4d:c5:65:ad:5f:1b:53:03:aa:3e:a2:
                    5d:f4:60:8f:33:d6:a4:b0:10:5a:c7:7f:c0:37:6d:
                    92:4b:33:4d:41:92:7e:58:83:5d:c2:90:fb:04:37:
                    92:35:32:ed:82:1e:1f:08:ed:5c:de:63:e3:6e:46:
                    e6:6a:03:ed:c2:bd:4a:fa:ff:0e:00:43:9c:c8:41:
                    59:4c:fe:8e:11:17:56:92:a1:06:98:24:7a:44:be:
                    e3:27:7c:76:8e:33:26:d5:91:98:08:45:ec:cd:be:
                    af:5c:ba:0b:cf:5b:d3:62:61:3b:bf:24:22:ef:73:
                    39:3f:e9:cf:89:bd:c1:ad:53:7a:29:c4:97:e8:ac:
                    31:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BB:B2:C6:50:C8:EE:15:FE:E6:87:DC:6A:5B:75:51:A2:5F:B6:5E
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gruyxlDI7hX-5ofcalt1UaJftl4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:db:a4:dd:f6:32:ea:70:d1:8d:a6:b2:24:2f:8c:74:ef:7c:
         59:bc:46:ba:76:23:ca:0e:e4:97:ce:1c:01:77:94:34:66:c3:
         75:5a:c7:f3:11:cf:f3:b0:ba:30:ee:24:46:52:f2:cc:fa:32:
         d5:46:3a:e8:a0:ca:fb:d2:3d:50:48:7a:2e:16:8b:1a:f1:9c:
         f9:cb:7f:84:e7:a2:7b:9f:64:27:27:6d:51:4b:6d:00:a7:c2:
         8d:50:19:a7:dc:1b:0d:b0:ab:fd:6a:c9:84:fc:cc:19:8f:f7:
         dc:ec:ad:01:12:e1:bc:d9:a9:0e:84:d8:24:b8:cf:ac:0c:aa:
         4a:74:19:8d:49:d4:fd:55:80:6e:fb:8f:f2:0a:de:10:d5:06:
         42:07:11:55:6f:ce:22:f8:c1:9b:2a:95:f1:fa:e7:0c:d5:24:
         be:7d:50:4c:8a:bb:82:61:a3:b8:cc:37:71:52:05:d9:20:49:
         24:86:a0:8d:bb:e8:ef:00:7e:98:2d:06:c7:6f:bb:c8:3e:09:
         fd:22:fe:fd:35:45:de:9f:72:6f:43:60:fd:13:8f:35:b2:46:
         f3:63:56:a1:e5:3a:ce:9d:ad:ef:07:43:c2:08:05:25:ce:9d:
         a2:43:61:b6:70:73:03:70:c6:12:36:94:cc:f0:a2:2e:fc:0b:
         3c:b2:1c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 10:56:38 2025 by rpki-client