This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mI_TpN1nfitc_mSQKh-Df47yJOc.roa
File:                     mI_TpN1nfitc_mSQKh-Df47yJOc.roa (raw, json)
Hash identifier:          2NERgonfdleE4ADPQawC8cymACICbzw4O7fwStLYSoc=
Subject key identifier:   98:8F:D3:A4:DD:67:7E:2B:5C:FE:64:90:2A:1F:83:7F:8E:F2:24:E7
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       756CD000
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mI_TpN1nfitc_mSQKh-Df47yJOc.roa
Signing time:             Fri 25 Mar 2022 01:10:22 +0000
ROA not before:           Fri 25 Mar 2022 01:10:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
                          2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1970065408 (0x756cd000)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 25 01:10:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=988fd3a4dd677e2b5cfe64902a1f837f8ef224e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e7:e5:d7:c6:7c:da:6c:f4:d4:6c:e3:1f:d4:
                    28:56:93:49:6f:d2:d8:04:6d:8d:47:66:7f:93:92:
                    ca:94:28:b9:08:73:bf:c4:d4:22:59:1b:e3:f8:2c:
                    f0:c1:31:55:b2:a4:a9:13:35:c3:23:94:35:5f:1a:
                    0c:f6:72:40:89:72:c4:d0:b0:1d:c7:fc:40:ff:1d:
                    38:ce:65:ab:00:fa:d3:dc:5e:45:27:00:21:3c:c9:
                    b3:50:da:7d:8b:4f:01:23:40:d3:51:94:e3:f3:18:
                    d4:b3:26:b5:d3:8b:4c:20:da:09:ef:38:54:ae:2b:
                    95:8c:7a:54:5f:f0:7d:79:f5:10:cf:3d:27:0b:76:
                    8b:e2:5d:69:d4:19:50:f1:fd:7b:61:8c:73:8e:9d:
                    a5:e0:6d:09:35:b8:87:47:53:07:81:52:40:06:c5:
                    d1:51:a2:12:58:4f:65:b7:15:87:8f:24:67:3b:de:
                    ed:15:08:f3:bb:18:c3:fc:fb:88:fa:c8:34:92:e4:
                    d7:77:85:21:a9:8b:42:79:07:7c:c0:cf:bc:5b:d2:
                    12:86:60:f8:89:73:61:e9:a6:dd:4c:a7:b2:1a:23:
                    62:3a:a0:71:75:48:32:a5:7a:07:53:da:54:21:00:
                    e2:0f:2c:34:93:85:b9:3c:fa:aa:3c:33:8e:e3:71:
                    99:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8F:D3:A4:DD:67:7E:2B:5C:FE:64:90:2A:1F:83:7F:8E:F2:24:E7
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mI_TpN1nfitc_mSQKh-Df47yJOc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:5e:90:61:71:08:96:3d:53:83:f7:f8:38:56:fb:d2:f9:71:
         92:32:27:d2:91:91:ce:80:09:4f:57:69:ba:ab:b9:db:30:ac:
         3f:eb:d4:29:77:5c:8c:3e:c3:2b:76:54:80:55:b4:9b:b7:81:
         6e:72:4b:38:18:ec:b7:2e:14:d4:94:7c:59:0f:17:a7:b1:81:
         c6:2a:01:f6:58:c1:04:92:6c:a8:ff:8a:76:cc:d7:45:75:a4:
         eb:7e:74:70:9d:4c:77:79:5e:13:bd:17:2f:6c:95:24:9c:5c:
         e0:74:e3:94:3b:55:0e:5b:d8:7b:9d:4b:79:1b:dd:d8:47:12:
         db:20:80:52:60:5c:34:9c:4a:a4:20:05:e7:97:2f:20:70:ca:
         c3:a0:96:9d:e0:b0:ac:6b:0e:ef:6f:b8:d6:5f:b9:5e:db:61:
         ff:66:f5:f2:ee:6d:40:a5:53:9d:17:e6:67:d9:7e:4c:ea:2a:
         f4:24:ca:8c:12:4e:6f:42:9c:85:38:70:dc:e7:c0:56:8c:c7:
         d6:6d:2d:9d:6d:a3:43:5f:6d:39:78:69:f5:22:1a:a9:fd:8f:
         96:2a:5d:51:f6:05:aa:cf:1b:2a:f5:6a:69:90:a8:63:34:33:
         d1:27:97:ac:a2:5b:3e:85:f6:d0:38:3d:a0:b2:56:a2:de:b5:
         a6:e0:87:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:05:06 2025 by rpki-client