This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k5fNCZx5Bx4zFlpFxCOfAgm_B24.roa
File:                     k5fNCZx5Bx4zFlpFxCOfAgm_B24.roa (raw, json)
Hash identifier:          0weDEZ/Udt1hHTUqhbnhKphmXefrf5dXeSYzojfVrSs=
Subject key identifier:   93:97:CD:09:9C:79:07:1E:33:16:5A:45:C4:23:9F:02:09:BF:07:6E
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       6D10674F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k5fNCZx5Bx4zFlpFxCOfAgm_B24.roa
Signing time:             Wed 23 Feb 2022 17:16:00 +0000
ROA not before:           Wed 23 Feb 2022 17:16:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
                          2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1829791567 (0x6d10674f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb 23 17:16:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9397cd099c79071e33165a45c4239f0209bf076e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7f:76:c7:ce:6b:d5:d6:83:ff:fa:4b:a0:d7:
                    4e:ef:d3:54:9c:ff:3b:29:3a:5a:ac:96:29:da:c4:
                    87:cf:6f:f2:22:41:97:db:f5:fa:20:ef:14:43:d5:
                    6a:ae:c7:c2:8a:53:5c:16:e5:f2:fa:69:28:49:46:
                    14:8b:23:b8:a9:93:fb:a4:b2:8c:3a:e1:f2:58:23:
                    dc:a1:3f:9f:2d:59:2f:87:56:5b:7c:d6:1b:92:dc:
                    15:92:ee:cd:d5:26:42:3c:7c:84:96:43:84:09:17:
                    88:56:f6:b3:b1:56:e9:63:84:db:89:e6:87:b2:c2:
                    cb:e3:4f:c1:2c:af:0b:18:88:47:c5:56:d0:55:75:
                    4c:77:9e:3c:8f:de:f3:79:0b:54:27:36:ac:4d:e5:
                    cf:13:6d:95:32:bb:8b:fd:11:70:cd:a8:40:0b:cf:
                    09:8d:99:e7:02:09:a0:7a:35:ad:b5:7e:01:8e:a0:
                    2e:35:98:cd:6d:31:27:b6:99:9f:98:9c:10:77:8c:
                    6e:8d:f2:59:78:2d:9d:4b:9c:a2:a0:a0:c0:42:9b:
                    1a:c0:6c:e1:7f:7e:5c:d7:b9:12:a8:35:5c:83:a2:
                    ce:0a:ad:8f:49:8f:bf:08:07:3b:18:65:fd:5c:92:
                    51:75:52:bc:46:9a:a6:50:d8:64:78:34:13:64:0f:
                    aa:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:97:CD:09:9C:79:07:1E:33:16:5A:45:C4:23:9F:02:09:BF:07:6E
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k5fNCZx5Bx4zFlpFxCOfAgm_B24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:3c:29:bb:77:d2:37:7e:ea:1f:b9:ae:5f:f3:f6:73:f6:27:
         6b:41:8a:dc:41:94:f8:c6:72:13:a1:73:55:f0:6f:d4:b8:9d:
         05:5c:00:c5:84:a5:2c:33:0e:38:98:54:20:f8:92:0c:65:75:
         6a:8b:54:cd:68:4a:f8:0f:02:a0:b5:48:ea:5c:10:b5:6f:fb:
         7a:aa:a7:26:b7:e9:f6:de:e2:ee:a0:21:cd:77:25:91:0d:7c:
         bb:6e:47:04:73:41:76:dc:59:d3:e9:c9:59:07:5e:7f:d2:41:
         d2:18:da:f2:5a:e3:df:19:c9:82:3b:d7:af:35:ef:ff:aa:7b:
         2a:95:6e:d5:b9:3e:f0:44:1a:79:4c:77:1d:81:cd:25:7f:81:
         f4:d0:37:38:26:a9:26:45:43:8c:2a:a8:14:3d:37:37:8b:9b:
         b6:b3:fe:7d:eb:8a:a0:90:8c:47:d7:ef:02:a2:a5:23:59:0e:
         de:3a:50:dc:e3:51:89:bd:42:bc:2f:d4:c5:d6:b3:93:16:55:
         d3:6b:75:07:f7:1f:17:a7:89:b6:5e:b6:b7:a0:08:08:bb:b9:
         b9:05:ce:fe:ed:f3:12:e6:37:8e:07:4a:40:6f:b5:3b:bf:b6:
         16:b3:f7:45:8c:6c:31:ac:c8:be:d5:e9:ad:bf:ed:fe:60:a4:
         5c:2e:67:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:35:08 2025 by rpki-client