This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m5VJyZuoeUFCIb8BOkCLWdT9r78.roa
File:                     m5VJyZuoeUFCIb8BOkCLWdT9r78.roa (raw, json)
Hash identifier:          WlOEaYp64lAFHaWEtQ3bgahs+2hgrnFIuQYTqniFsmU=
Subject key identifier:   9B:95:49:C9:9B:A8:79:41:42:21:BF:01:3A:40:8B:59:D4:FD:AF:BF
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186F0FCD7609003EBD691CECC124D05BE92
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m5VJyZuoeUFCIb8BOkCLWdT9r78.roa
Signing time:             Fri 17 Mar 2023 19:12:27 +0000
ROA not before:           Fri 17 Mar 2023 19:12:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:f0:fc:d7:60:90:03:eb:d6:91:ce:cc:12:4d:05:be:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 17 19:12:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9b9549c99ba879414221bf013a408b59d4fdafbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:20:7b:be:1d:4d:52:9b:6f:fb:ff:51:d8:bb:
                    25:55:2d:49:a0:d4:55:71:20:e4:5d:a1:7c:a5:fe:
                    d1:57:db:69:8d:86:80:40:58:17:76:24:a6:be:57:
                    6b:d8:41:d5:5c:0b:eb:9c:ca:39:22:df:3a:e2:c7:
                    2b:25:e7:e8:13:c9:a3:a3:ce:85:97:78:12:4c:c4:
                    30:60:27:d3:ac:e9:a9:9c:10:90:22:57:4d:ca:09:
                    66:b8:c1:67:dd:35:fe:67:61:fd:ac:9a:ed:ee:8e:
                    ce:a2:95:96:9f:9b:04:88:d8:bf:c2:4e:8b:d8:6b:
                    62:24:76:53:5b:22:cd:02:93:f1:44:3c:6c:e7:96:
                    bd:9e:1d:97:95:af:98:32:b0:4c:48:c7:6a:48:af:
                    cf:c3:d5:9c:2f:9d:c9:b8:a5:65:dc:cd:c3:97:05:
                    94:34:0a:35:89:0f:cf:fb:35:51:10:cb:34:3a:3a:
                    c9:da:2c:8f:1b:d1:c8:b9:31:2f:ee:cc:ee:ef:ae:
                    1d:e2:7e:8a:be:89:dd:00:fa:a5:14:2a:2c:48:5b:
                    95:b0:85:7d:14:de:58:e0:6a:c7:c7:2c:2e:44:99:
                    0c:25:45:62:b9:a7:81:ef:59:be:a4:93:2a:7b:6c:
                    f8:8b:2c:ba:b6:95:6d:ca:ed:ed:08:61:8b:5b:0b:
                    ee:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:95:49:C9:9B:A8:79:41:42:21:BF:01:3A:40:8B:59:D4:FD:AF:BF
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m5VJyZuoeUFCIb8BOkCLWdT9r78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:dc:ac:db:a9:60:69:9c:02:55:1d:54:47:04:6e:43:5a:20:
         47:7a:60:67:d0:47:cb:ab:b4:1f:79:6b:b1:52:79:80:0e:ca:
         50:1b:8f:35:2e:42:6e:92:ae:37:c1:e1:a1:98:df:0f:2b:ff:
         ed:e1:43:6a:6d:06:36:32:2f:25:4d:62:c1:0d:fd:92:d5:c6:
         1c:3c:c9:da:92:53:6b:8b:bb:df:36:5c:09:ed:0d:5d:31:b9:
         f0:23:94:aa:02:38:2e:7c:6b:13:ab:42:df:3f:97:8e:60:fa:
         b2:15:b0:90:d7:2d:a4:51:13:05:38:f3:91:36:03:5e:db:64:
         87:09:29:03:2a:e3:95:dc:93:5a:8d:fa:71:ba:55:a3:2d:0f:
         b1:d9:58:5b:27:49:f6:fd:04:50:a1:a2:37:c2:5d:1f:66:df:
         fb:69:fe:7f:0f:f2:b8:d0:6a:ba:8a:d9:f3:ed:2f:4a:42:13:
         98:5f:d1:44:5d:82:4e:72:d1:07:36:b5:ce:5c:f1:69:d2:0d:
         c9:bb:2a:7a:1b:4f:16:5e:30:9b:da:2f:18:45:f4:7c:ac:94:
         d9:cf:ae:30:01:3b:68:84:0a:f1:b7:db:cf:d6:2f:ca:73:e9:
         bf:b8:9c:6a:9b:b6:d0:d8:6f:97:f9:2b:c1:9c:50:b6:cd:9d:
         29:4b:bb:39
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbw/NdgkAPr1pHOzBJNBb6SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzE3MTkxMjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Yjk1NDljOTliYTg3OTQxNDIyMWJmMDEzYTQwOGI1OWQ0ZmRhZmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiB7vh1NUptv+/9R2LslVS1JoNRV
cSDkXaF8pf7RV9tpjYaAQFgXdiSmvldr2EHVXAvrnMo5It864scrJefoE8mjo86F
l3gSTMQwYCfTrOmpnBCQIldNyglmuMFn3TX+Z2H9rJrt7o7OopWWn5sEiNi/wk6L
2GtiJHZTWyLNApPxRDxs55a9nh2Xla+YMrBMSMdqSK/Pw9WcL53JuKVl3M3DlwWU
NAo1iQ/P+zVREMs0OjrJ2iyPG9HIuTEv7szu764d4n6KvondAPqlFCosSFuVsIV9
FN5Y4GrHxywuRJkMJUViuaeB71m+pJMqe2z4iyy6tpVtyu3tCGGLWwvuLQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJuVScmbqHlBQiG/ATpAi1nU/a+/MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbTVWSnladW9lVUZDSWI4Qk9rQ0xXZFQ5cjc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGXcrNupYGmcAlUdVEcE
bkNaIEd6YGfQR8urtB95a7FSeYAOylAbjzUuQm6SrjfB4aGY3w8r/+3hQ2ptBjYy
LyVNYsEN/ZLVxhw8ydqSU2uLu982XAntDV0xufAjlKoCOC58axOrQt8/l45g+rIV
sJDXLaRREwU485E2A17bZIcJKQMq45Xck1qN+nG6VaMtD7HZWFsnSfb9BFChojfC
XR9m3/tp/n8P8rjQarqK2fPtL0pCE5hf0URdgk5y0Qc2tc5c8WnSDcm7KnobTxZe
MJvaLxhF9HyslNnPrjABO2iECvG328/WL8pz6b+4nGqbttDYb5f5K8GcULbNnSlL
uzk=
-----END CERTIFICATE-----
Generated at Sat Dec 20 07:38:52 2025 by rpki-client