This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/keimI4HZA7Hy6b_xbMGWP4Uc_HY.roa
File:                     keimI4HZA7Hy6b_xbMGWP4Uc_HY.roa (raw, json)
Hash identifier:          o3LaO1z0BygyV4+5W/nNyCYaEmMewIKoeTC6b/LBOjM=
Subject key identifier:   91:E8:A6:23:81:D9:03:B1:F2:E9:BF:F1:6C:C1:96:3F:85:1C:FC:76
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018945BCDA6CB0BB12CF600C061207D8EBE2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/keimI4HZA7Hy6b_xbMGWP4Uc_HY.roa
Signing time:             Tue 11 Jul 2023 16:15:51 +0000
ROA not before:           Tue 11 Jul 2023 16:15:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:45:bc:da:6c:b0:bb:12:cf:60:0c:06:12:07:d8:eb:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 11 16:15:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=91e8a62381d903b1f2e9bff16cc1963f851cfc76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5b:90:27:d1:1c:07:8b:d4:ad:b6:d7:e8:9b:
                    5b:e0:39:5b:b7:fc:60:0b:79:e5:3e:fc:43:ca:72:
                    60:a2:3c:34:25:05:97:10:b7:97:8e:97:05:71:da:
                    17:c1:4c:97:ff:f6:c1:13:b8:2f:1f:c0:0a:c2:7c:
                    4a:06:d8:e6:a4:e2:ba:8c:c2:7f:ae:ad:11:b6:24:
                    ae:36:96:3a:25:a6:f5:b9:8b:2e:f3:8c:fd:17:c6:
                    36:7b:3a:76:f3:19:ae:41:fd:a3:10:5f:9d:61:86:
                    42:8c:39:a1:98:ed:9c:aa:2b:67:e9:44:10:fa:ba:
                    dc:93:a7:86:95:f2:27:55:ea:ec:16:a9:a3:0c:0f:
                    0a:76:75:37:e5:44:cb:60:b6:41:00:ac:bc:cf:f9:
                    13:ab:13:c2:28:54:68:68:2a:e7:cb:ef:21:7a:94:
                    2d:56:f0:b4:98:74:ab:25:c0:7d:1d:6d:20:20:1f:
                    14:f9:5b:b8:4d:be:be:c4:8b:90:d0:c7:6f:e7:61:
                    c8:d8:51:64:a7:06:3a:fa:27:52:4b:c7:30:c9:81:
                    8b:f2:f5:44:f7:f9:ad:42:d5:8f:bb:57:2b:b0:c2:
                    87:20:63:57:fe:7d:61:96:5f:7c:b3:db:c6:06:aa:
                    89:20:20:b1:cd:a4:43:19:4f:50:ba:d1:38:25:28:
                    9e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E8:A6:23:81:D9:03:B1:F2:E9:BF:F1:6C:C1:96:3F:85:1C:FC:76
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/keimI4HZA7Hy6b_xbMGWP4Uc_HY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:64:88:23:4c:2c:a2:b7:f3:89:30:5f:1f:f9:e7:3f:53:45:
         94:9e:72:d8:96:96:50:9b:06:c3:80:68:87:c0:c7:01:7b:25:
         0c:a9:f6:c3:6f:7d:18:5f:1e:c5:8c:3f:61:9d:17:55:7b:f8:
         ff:77:32:6f:7c:e4:1b:75:f4:91:32:92:0c:23:3c:3d:ba:80:
         21:6f:c4:6a:52:d1:60:58:17:11:79:23:91:ea:76:c6:fe:c4:
         9a:48:d7:b1:dd:af:94:b0:ba:19:6c:7b:2a:bc:f2:a9:58:f8:
         82:94:14:05:54:fc:a5:11:59:15:b5:11:dd:25:e6:ec:a4:37:
         4a:4e:0b:da:03:4e:e8:db:44:fd:68:d9:a5:80:b4:78:84:1e:
         b5:0e:c8:32:8c:47:56:86:3e:a3:8d:a7:94:35:81:3c:6f:cc:
         5a:83:09:ae:9a:35:2d:ac:09:4f:13:cd:c9:c1:13:43:30:c7:
         f4:88:d0:f4:c8:f4:13:18:c5:7a:2e:5f:44:c2:36:15:fc:12:
         7d:ec:03:e6:77:57:b3:cd:1e:53:6a:41:41:68:34:81:e2:73:
         ad:0f:12:39:0a:36:8f:15:f8:3d:77:d3:b7:f1:dd:41:99:fe:
         b9:a4:3e:6c:ea:76:17:a0:c6:e2:67:a5:07:d9:f0:28:78:3c:
         db:21:ea:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:09:25 2025 by rpki-client