This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jn_TLWXVWMsAvXNGo7HteeSseMI.roa
File:                     jn_TLWXVWMsAvXNGo7HteeSseMI.roa (raw, json)
Hash identifier:          YlwqHmU0g3SJ5C19d6Y/H4TMOGerUgX1n3/o8okwNp0=
Subject key identifier:   8E:7F:D3:2D:65:D5:58:CB:00:BD:73:46:A3:B1:ED:79:E4:AC:78:C2
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0189F841C9283D6EE71767601E81CC0F827E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jn_TLWXVWMsAvXNGo7HteeSseMI.roa
Signing time:             Tue 15 Aug 2023 08:13:28 +0000
ROA not before:           Tue 15 Aug 2023 08:13:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:f8:41:c9:28:3d:6e:e7:17:67:60:1e:81:cc:0f:82:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Aug 15 08:13:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8e7fd32d65d558cb00bd7346a3b1ed79e4ac78c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:25:7e:b2:65:85:86:6f:4d:30:a7:de:95:3c:
                    39:df:8f:ca:c7:3e:47:e0:00:ac:0b:8e:d4:e6:e5:
                    13:1c:27:ed:bf:4e:83:e2:be:46:e1:65:c7:23:79:
                    81:5c:3e:3f:58:07:77:69:46:1c:1b:14:ad:7d:bf:
                    65:52:77:66:c8:46:50:64:ac:10:6f:f7:62:c2:8b:
                    82:6b:5f:17:1f:a9:b0:44:a5:96:e9:a1:7b:a6:e7:
                    13:04:ef:52:8f:6e:e5:08:50:c6:ef:9e:a3:49:04:
                    9c:ca:9c:09:c3:a1:a1:f8:9b:86:d1:22:25:1a:3f:
                    28:55:04:4a:a6:e4:b1:f4:c3:4b:a0:a1:36:19:51:
                    c9:1a:bf:ce:64:d8:05:56:07:69:ef:6d:33:48:e0:
                    33:2b:61:c4:62:bf:17:11:a1:54:34:ad:60:66:65:
                    39:f5:c4:ef:5b:73:7d:f3:d7:2f:c8:7c:da:92:ec:
                    26:30:54:e3:4f:b3:6c:43:a5:09:41:dd:ab:1a:7f:
                    5a:4a:65:e3:ca:0f:7f:4d:3a:62:6f:30:e4:02:d0:
                    ae:b0:21:e2:15:4a:0a:30:14:fa:eb:e3:bd:25:87:
                    16:1e:c1:c8:bf:5b:b0:16:03:99:11:96:24:5f:58:
                    db:0b:38:13:12:5a:36:01:b8:2e:73:f3:d0:70:0b:
                    93:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:7F:D3:2D:65:D5:58:CB:00:BD:73:46:A3:B1:ED:79:E4:AC:78:C2
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jn_TLWXVWMsAvXNGo7HteeSseMI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:da:43:87:83:86:f6:8f:da:3e:d0:46:f6:24:e3:42:b3:c1:
         50:b5:69:76:b5:e8:ab:0b:3e:77:68:d8:f6:d0:90:f4:9e:43:
         01:06:fd:4c:0a:49:bd:db:69:b9:b2:9b:85:ab:1f:73:3d:41:
         c5:bf:1c:a9:a1:fa:6d:1b:38:bd:5a:95:26:6e:82:01:15:9c:
         f1:07:b2:b0:c5:9e:65:4f:d8:8d:3f:f1:a8:b7:1e:81:d5:27:
         7a:a3:5f:d7:4e:f6:d3:38:83:e7:f3:93:8e:16:96:5a:99:2b:
         c8:c5:3f:3c:65:3f:a7:bb:a4:80:8c:23:85:51:d4:25:67:05:
         6a:e8:4d:e0:3d:f7:c4:1d:05:9e:de:23:61:05:f8:d3:0b:ec:
         52:c2:52:41:73:5f:db:67:50:58:c6:48:7d:da:b9:b7:d7:4b:
         f2:86:e3:32:df:f3:e1:27:d8:f6:9d:58:b1:1a:86:3b:4c:a6:
         d8:35:6f:83:77:00:8c:1a:23:d0:a2:2d:8c:d6:74:03:02:da:
         a3:96:8e:ab:cb:58:4b:2e:25:4e:92:78:ec:08:df:78:2f:07:
         76:71:17:29:e6:d7:b6:18:6b:d5:0c:c4:f7:f1:39:dc:81:59:
         12:d0:62:6c:15:33:93:40:f2:84:14:56:a3:10:8d:d1:36:ba:
         40:aa:19:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 16:52:13 2025 by rpki-client