This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h-my4W5Fi0PtnLsGLrocZqSWovo.roa
File:                     h-my4W5Fi0PtnLsGLrocZqSWovo.roa (raw, json)
Hash identifier:          gd3DhdCgHbUioUyw2XzsVC9Ciz1loppBU7ml1BN/sxc=
Subject key identifier:   87:E9:B2:E1:6E:45:8B:43:ED:9C:BB:06:2E:BA:1C:66:A4:96:A2:FA
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018794ECD49B72DF29B59A7CCC8BBA18AA3D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h-my4W5Fi0PtnLsGLrocZqSWovo.roa
Signing time:             Tue 18 Apr 2023 15:12:41 +0000
ROA not before:           Tue 18 Apr 2023 15:12:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:94:ec:d4:9b:72:df:29:b5:9a:7c:cc:8b:ba:18:aa:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 18 15:12:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=87e9b2e16e458b43ed9cbb062eba1c66a496a2fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:21:52:78:92:0a:a8:44:0b:5f:f4:17:a7:88:
                    67:a0:d7:06:0f:8e:b9:0b:a2:34:94:b1:fe:29:c0:
                    c5:8b:26:b8:bf:3d:95:19:6f:e1:48:5a:a9:cd:61:
                    9e:91:82:1b:d7:da:9a:6c:74:44:d4:97:74:61:26:
                    d9:cd:fb:d8:50:3f:bd:07:2a:e8:bb:35:20:c6:a0:
                    05:70:83:7c:b9:f8:21:3d:07:1a:0e:2f:66:ef:48:
                    03:4a:05:ad:cf:70:96:f6:b8:a7:c4:4e:fc:a3:bb:
                    73:a3:f6:c1:62:24:95:8f:bc:a7:ba:f3:69:f5:2f:
                    55:a3:d7:c4:fe:a7:74:e3:35:66:4e:b6:65:7d:09:
                    67:74:ee:4c:b3:b7:00:d1:0d:ad:50:af:dd:96:5c:
                    fb:ef:c5:e4:30:e6:00:8a:73:0e:40:ab:d3:00:92:
                    3d:73:11:04:22:e6:b2:e0:2d:4d:d1:3f:70:26:42:
                    f8:74:ad:52:cf:f6:2c:9c:cd:8b:ff:08:8e:8a:c2:
                    36:ea:76:a8:46:a3:fa:13:34:c7:83:0e:2d:b6:5b:
                    73:c1:9d:57:10:e7:79:4b:a4:4c:7c:48:a7:84:97:
                    fb:64:0b:4a:d6:7c:56:11:a5:4f:a9:a1:70:a9:b6:
                    90:99:70:35:de:33:42:a7:1e:03:1a:16:88:63:fc:
                    18:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E9:B2:E1:6E:45:8B:43:ED:9C:BB:06:2E:BA:1C:66:A4:96:A2:FA
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h-my4W5Fi0PtnLsGLrocZqSWovo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:3d:1e:74:6c:67:eb:63:b2:78:b1:44:77:d3:b7:47:14:68:
         17:70:31:56:76:86:01:71:72:85:8a:2c:e6:32:24:80:65:65:
         81:ca:2e:5c:fe:da:9a:2f:20:1c:cc:7a:8b:40:7f:56:0b:f9:
         0d:26:df:65:3e:21:ca:09:22:28:1a:9f:67:59:f9:ca:9c:22:
         c0:39:e7:d0:21:f6:b5:d4:57:94:c2:b8:19:a2:6f:aa:b8:fa:
         8a:19:6f:fd:12:a6:cb:f1:14:af:c0:bf:48:3b:c9:19:62:54:
         c0:36:ba:68:f8:97:77:ec:16:9f:d5:36:a1:5d:7f:ea:3d:b3:
         92:1a:71:d8:7f:7b:14:25:de:4e:41:f0:4b:8f:6c:4e:a8:3d:
         4b:e4:7f:77:ea:5e:f0:94:ec:20:06:b5:30:e2:49:aa:da:54:
         b2:3d:c5:51:8e:aa:f4:88:b6:32:b2:76:56:95:9c:20:92:ff:
         8f:26:a1:51:a6:a0:0e:7a:78:23:1c:a9:10:8a:78:36:43:33:
         a6:8b:9e:d3:a8:46:6f:41:77:de:6c:22:c6:a0:56:be:c8:d3:
         61:b9:b8:ad:be:1c:34:a1:35:85:97:bf:f4:71:f0:37:e9:38:
         26:22:72:33:a8:86:6b:76:72:2a:3a:75:29:c6:39:c7:bd:3e:
         49:1d:b4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:16:25 2025 by rpki-client