This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lH1uvD3GWp-mY034JokGaxi9pVI.roa
File:                     lH1uvD3GWp-mY034JokGaxi9pVI.roa (raw, json)
Hash identifier:          UMdaRwZ4ja6dHA/OkZ+WWMTf7DOIrZHZ45IsdKUl1mg=
Subject key identifier:   94:7D:6E:BC:3D:C6:5A:9F:A6:63:4D:F8:26:89:06:6B:18:BD:A5:52
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186F133C5A0FE976E8FEE5EBDFAEC0D46A0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lH1uvD3GWp-mY034JokGaxi9pVI.roa
Signing time:             Fri 17 Mar 2023 20:12:27 +0000
ROA not before:           Fri 17 Mar 2023 20:12:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:f1:33:c5:a0:fe:97:6e:8f:ee:5e:bd:fa:ec:0d:46:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 17 20:12:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=947d6ebc3dc65a9fa6634df82689066b18bda552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:36:95:29:01:53:b5:1a:00:ed:b4:89:10:89:
                    21:a5:ee:d8:9f:9e:82:a2:a6:53:59:ed:88:c4:77:
                    40:31:ec:c7:a1:e6:01:ca:29:94:62:b0:da:9c:22:
                    65:cc:b3:f3:b9:68:e7:ff:d8:9a:91:09:3c:6d:c4:
                    04:f6:4b:5e:12:3c:12:79:47:14:63:5d:49:57:27:
                    a2:02:c7:be:14:22:3e:28:fb:2a:42:b0:ac:d9:9a:
                    79:29:45:e0:a2:87:61:1d:04:be:dd:8d:a5:4e:f8:
                    e5:ff:bb:18:62:08:77:c1:63:f7:1a:44:00:9e:f0:
                    50:75:fe:7f:b5:c6:ba:a0:8a:51:87:0e:b0:18:94:
                    21:01:9c:ef:0b:bc:fd:65:f4:47:4e:ad:4e:84:4d:
                    44:9d:5c:55:8b:1a:ff:86:9a:5f:a1:81:86:b8:1c:
                    4f:bc:bc:f1:49:fe:94:54:e9:78:ec:ea:e7:a9:52:
                    5f:3b:68:9a:24:ad:96:46:8b:bf:92:bc:65:44:3a:
                    ec:2d:06:6a:a3:23:c5:3c:a4:85:b4:51:a3:b2:05:
                    c3:c2:5b:95:dd:7c:5d:4f:47:26:25:d1:3b:26:6d:
                    31:2c:b1:4a:18:35:7e:0a:5c:06:1a:0b:cb:86:cd:
                    6d:28:f1:3e:73:c8:59:25:ef:01:8e:72:85:1a:bb:
                    54:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7D:6E:BC:3D:C6:5A:9F:A6:63:4D:F8:26:89:06:6B:18:BD:A5:52
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lH1uvD3GWp-mY034JokGaxi9pVI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:69:2c:50:de:80:7f:5b:e7:aa:c2:ce:67:62:69:91:be:78:
         ab:ab:e4:dd:f4:b7:4e:8c:54:4d:ef:aa:e2:5c:68:5e:a9:b0:
         ee:d0:bf:ff:6f:70:69:f1:f9:84:7b:61:7e:ad:4f:96:8e:47:
         1d:3a:15:62:d8:39:c4:3f:d2:b2:75:08:22:7f:59:d6:50:97:
         c1:2b:40:0e:46:41:9f:fb:c7:d6:28:5b:83:e8:68:25:80:ef:
         35:3f:76:b3:5e:3f:f4:23:37:b8:0c:72:87:21:37:7c:9a:2f:
         9f:53:af:78:1a:7c:b0:c2:15:b9:3a:4c:99:60:92:a3:81:55:
         98:05:1a:3a:39:9f:e9:56:5a:03:aa:c3:f8:8e:6e:fb:4b:bc:
         6c:5c:88:fc:fd:5e:c5:47:35:d8:26:b8:8e:5c:73:59:95:93:
         d0:4f:fb:61:59:35:73:7e:54:ec:00:26:e0:50:83:8b:fe:cd:
         da:d5:5a:b2:a6:ce:c8:7a:d7:1a:17:31:0f:f0:c2:e7:7f:66:
         6c:b0:08:8c:f3:77:05:60:de:e0:78:ef:31:70:ab:47:d0:e9:
         4e:78:a3:34:e7:d3:b0:a1:9c:5a:f2:65:0c:ab:8f:e8:d0:b6:
         41:bb:be:07:77:09:0f:04:be:1a:89:e7:07:a1:9e:1f:3c:60:
         4f:e7:78:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:19:53 2025 by rpki-client