This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i0LckyQQ-HIhsdwxsqg1O9HgPLA.roa
File:                     i0LckyQQ-HIhsdwxsqg1O9HgPLA.roa (raw, json)
Hash identifier:          lCtZ5KFyXDTl9zX3O9MOK2FgdOlJi3dN7qVMkM73dBc=
Subject key identifier:   8B:42:DC:93:24:10:F8:72:21:B1:DC:31:B2:A8:35:3B:D1:E0:3C:B0
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01882CA3867120AAC706ED734BF5BF267A7F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i0LckyQQ-HIhsdwxsqg1O9HgPLA.roa
Signing time:             Thu 18 May 2023 02:14:53 +0000
ROA not before:           Thu 18 May 2023 02:14:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:2c:a3:86:71:20:aa:c7:06:ed:73:4b:f5:bf:26:7a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 18 02:14:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8b42dc932410f87221b1dc31b2a8353bd1e03cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1d:01:d6:21:eb:c6:2f:e5:9d:27:fe:4f:80:
                    93:78:2c:31:bc:37:66:bb:be:76:2d:4d:0b:b4:ac:
                    17:e9:44:5a:77:b1:44:bc:ca:ad:60:c0:5b:2b:d5:
                    91:88:08:41:ac:27:17:15:bc:97:d5:6b:2f:09:cd:
                    23:94:2e:12:85:08:88:31:dd:9b:71:98:6a:7f:ff:
                    47:7c:68:87:be:63:47:f5:ba:46:f7:05:36:2e:a4:
                    75:1a:92:69:23:a2:6c:4d:50:3f:dc:4f:eb:b7:19:
                    c2:b2:8b:b1:da:cc:1c:7c:7b:1a:e3:ae:c8:8a:2c:
                    b2:2b:9a:0b:e3:11:0d:7e:03:ba:c0:62:ba:54:0a:
                    1f:4f:ff:95:68:0b:93:0b:9a:5b:39:a4:72:e4:6e:
                    a2:0f:69:53:1c:83:04:1b:75:e6:16:5b:03:fc:72:
                    de:3d:60:8e:90:ef:5d:95:b5:86:c6:a2:96:7a:d6:
                    a1:ce:19:33:77:19:97:53:d9:0f:dc:3f:10:e0:99:
                    9f:ed:66:1c:7e:48:33:4c:35:fe:e0:f7:dc:8d:e8:
                    74:c8:91:29:c5:01:6e:21:9f:d9:30:39:0a:be:08:
                    9b:b6:e1:d3:10:af:21:bf:93:7f:f0:36:b6:d6:40:
                    f1:a1:d9:c6:d9:5a:67:e5:e3:81:3f:5b:a1:fc:be:
                    5e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:42:DC:93:24:10:F8:72:21:B1:DC:31:B2:A8:35:3B:D1:E0:3C:B0
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i0LckyQQ-HIhsdwxsqg1O9HgPLA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:bf:75:13:c2:91:9d:0e:0c:9c:01:e7:e6:d0:61:55:b8:c9:
         2f:8b:cb:a3:31:ae:8c:88:ad:86:39:43:92:70:da:dc:e9:62:
         fe:63:66:f8:15:f7:f9:de:71:4a:c0:65:61:af:2a:fb:c7:70:
         f7:1b:96:b2:f2:de:67:8c:f5:9a:73:ac:04:f1:02:ca:ef:8b:
         50:89:e2:05:19:55:db:bc:24:e5:21:6d:66:db:bc:2c:86:40:
         26:e7:6a:ca:88:d5:cd:7d:6c:7f:28:da:d2:15:02:39:23:b6:
         fa:79:a5:6f:0d:8b:e1:51:f0:41:ba:ea:06:c0:a9:30:e8:ae:
         5b:01:bd:34:96:4a:1a:f8:53:cc:3b:a1:56:ba:de:93:c5:ee:
         aa:43:37:26:38:89:fb:d0:6c:e9:c6:15:5e:84:c9:ac:1d:c7:
         3e:26:50:34:f9:79:29:dc:86:05:0f:56:7b:74:de:b9:47:c2:
         fa:8e:5f:9e:f8:8c:cb:58:07:f2:58:ee:c9:b8:3e:df:d8:f1:
         eb:f6:d7:53:43:d9:41:51:54:2e:16:e9:75:6b:52:4f:ac:82:
         42:7f:4b:ee:49:3c:e3:50:24:af:45:a6:d1:bc:5c:c1:f4:51:
         f7:54:e6:77:ff:b4:b9:6d:00:21:84:ad:b5:07:51:71:4e:db:
         ab:c7:8d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:20:57 2025 by rpki-client