This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hS61MA99BUV80wW0qFJgXh6U7iA.roa
File:                     hS61MA99BUV80wW0qFJgXh6U7iA.roa (raw, json)
Hash identifier:          X8VU4Iv0KWiu3GOX/OWKygqb0/unKAy56YuhlFCY5e8=
Subject key identifier:   85:2E:B5:30:0F:7D:05:45:7C:D3:05:B4:A8:52:60:5E:1E:94:EE:20
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0188838688FB990A0943413AAE9F9DD1F3F2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hS61MA99BUV80wW0qFJgXh6U7iA.roa
Signing time:             Sat 03 Jun 2023 23:10:12 +0000
ROA not before:           Sat 03 Jun 2023 23:10:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:83:86:88:fb:99:0a:09:43:41:3a:ae:9f:9d:d1:f3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun  3 23:10:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=852eb5300f7d05457cd305b4a852605e1e94ee20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e2:0c:38:2c:12:25:72:c2:ae:0b:d3:6e:4e:
                    9e:4a:8c:8f:1c:e9:71:b7:be:cb:58:08:c2:81:66:
                    10:c1:b3:f8:03:92:4c:0b:26:1d:81:4b:5a:01:1a:
                    6e:53:23:a8:b8:70:0d:25:19:2a:ac:73:b6:08:b4:
                    8b:7c:35:2c:e9:4d:8e:55:6a:0d:8b:43:f8:58:8a:
                    15:46:c6:84:a7:c0:7a:0e:f2:c7:e3:be:a7:da:20:
                    7d:3b:06:ce:91:ca:74:51:99:66:76:43:01:f9:89:
                    31:8a:48:a5:e7:59:55:a7:27:95:93:fd:b6:29:96:
                    07:31:ce:28:8e:c8:89:cb:c3:70:9c:dd:f3:84:70:
                    9c:4b:eb:ba:4e:c4:20:45:c9:60:7d:e3:c4:14:c2:
                    3d:53:71:ee:a8:80:39:4e:e7:21:d5:91:b6:6c:b9:
                    dd:0f:85:7d:53:10:ea:0a:b5:c7:9d:b9:8d:63:51:
                    7a:32:c9:a8:82:15:33:19:52:ff:24:9a:32:40:62:
                    8b:b1:b5:d3:00:5d:02:52:ff:13:09:e4:69:49:e9:
                    49:aa:d4:5b:82:a2:31:76:f8:52:7a:de:97:06:6e:
                    20:b1:01:d6:74:91:ce:61:26:29:dd:45:94:44:90:
                    99:e9:77:51:84:4d:8c:86:7c:2c:d7:7f:17:83:53:
                    31:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2E:B5:30:0F:7D:05:45:7C:D3:05:B4:A8:52:60:5E:1E:94:EE:20
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hS61MA99BUV80wW0qFJgXh6U7iA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:e6:b2:94:75:15:fe:3b:fc:61:d5:cb:58:92:22:e6:ce:62:
         49:af:42:62:7c:f1:b9:e8:dd:63:4b:b8:96:ea:02:71:a4:4c:
         ea:0d:a9:fc:cb:e0:3a:b3:b6:98:be:e6:05:73:5e:52:75:ce:
         2b:20:55:1e:00:01:33:09:f9:8b:56:1a:0a:5a:c4:ae:fe:6b:
         40:98:56:c3:c3:72:87:7a:c5:57:8f:15:0f:68:65:c6:61:51:
         ff:0f:cd:c3:5f:d1:97:d4:3d:75:b2:02:37:7a:c1:d7:08:87:
         15:a0:d2:b2:72:96:07:cd:cd:83:52:b0:c8:aa:d6:db:bc:62:
         b5:47:34:d5:2f:6d:04:47:91:5a:be:ab:d1:b9:bf:1c:15:ba:
         d3:96:89:0a:a0:4b:3f:6e:35:dc:02:86:86:0c:cb:22:59:c3:
         50:62:89:9e:da:03:d9:89:41:da:bc:f2:96:06:1a:eb:7b:66:
         0f:73:1e:af:b8:d3:b2:48:45:a1:c7:de:2c:59:89:59:e2:9e:
         11:99:30:13:78:45:cd:74:24:c4:8a:13:a3:22:ac:41:ff:e8:
         c1:fc:76:16:a3:0f:cc:98:15:cf:d1:05:42:6f:cf:54:f1:5b:
         cc:34:8f:63:28:60:b3:63:2f:dc:90:20:6e:ad:62:55:82:d3:
         dc:c8:89:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 08:26:00 2025 by rpki-client