This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mOojSEp0vtezmLkgFnSXwCkujM4.roa
File:                     mOojSEp0vtezmLkgFnSXwCkujM4.roa (raw, json)
Hash identifier:          5bMpm9G/kLqYqQ46JNrfSVXEY0WVzBO4UIb9/SCA6KY=
Subject key identifier:   98:EA:23:48:4A:74:BE:D7:B3:98:B9:20:16:74:97:C0:29:2E:8C:CE
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0184E97EEDF5622AB061FEC2722C88EB6226
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mOojSEp0vtezmLkgFnSXwCkujM4.roa
Signing time:             Tue 06 Dec 2022 22:12:00 +0000
ROA not before:           Tue 06 Dec 2022 22:12:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e9:7e:ed:f5:62:2a:b0:61:fe:c2:72:2c:88:eb:62:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Dec  6 22:12:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=98ea23484a74bed7b398b920167497c0292e8cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:19:86:5d:d4:f9:51:98:07:93:e0:7b:cb:8b:
                    85:fc:2a:b0:f5:62:61:13:6f:70:3e:18:58:70:ba:
                    b3:23:f0:c6:4e:9f:d9:5e:84:af:f5:02:53:2b:4e:
                    9e:ad:cb:22:78:65:c4:99:77:82:77:41:42:82:df:
                    e1:f4:a8:75:bd:3e:ba:e6:7f:29:88:28:80:3a:35:
                    1b:fd:27:45:ad:74:5b:35:f7:a4:e8:4b:91:ae:2a:
                    cc:96:c5:af:24:44:16:2f:3a:20:83:d6:b4:cf:8f:
                    d9:b7:bc:5a:2d:2f:98:de:13:45:4e:1d:58:5d:ff:
                    b6:ad:d3:1f:6b:7e:14:cc:d7:b7:d3:23:ea:38:f0:
                    b0:f2:e3:a5:53:9c:10:56:16:b4:6b:76:69:05:5d:
                    49:7c:e1:26:64:a6:63:11:87:e5:96:7e:49:49:b9:
                    83:cf:39:eb:5a:50:8a:fa:96:3c:17:76:aa:be:96:
                    8f:e7:cd:58:86:bd:3a:7b:ed:ed:90:a1:b2:4f:5b:
                    b6:81:1b:0a:41:9c:1e:32:39:4e:1d:82:57:9c:c6:
                    17:ce:0b:c7:25:d6:5f:f2:54:4e:d9:00:b1:29:c9:
                    83:e3:17:ad:c3:cd:3f:ff:61:31:d8:71:83:46:b3:
                    3a:0f:63:25:42:5c:31:99:a1:62:da:e3:90:00:01:
                    51:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EA:23:48:4A:74:BE:D7:B3:98:B9:20:16:74:97:C0:29:2E:8C:CE
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mOojSEp0vtezmLkgFnSXwCkujM4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:db:f0:40:77:ea:2a:28:00:69:17:7b:26:33:99:8c:8c:a5:
         ee:8d:aa:e0:2e:82:99:1c:ec:3c:41:81:0c:42:d9:ce:ae:81:
         7b:95:c7:ed:1b:84:6b:ad:0b:83:2b:51:7a:94:30:f2:04:53:
         a8:7e:09:55:d7:46:99:63:f1:d3:a6:74:b1:05:78:23:fc:1d:
         37:9b:a6:e6:18:bb:ab:f4:e5:16:82:91:f7:5a:d7:f8:ac:15:
         b8:58:e4:83:98:7e:3e:82:ea:10:b8:ff:15:e1:94:b0:b5:e2:
         27:0f:c1:dd:de:e5:61:70:78:f4:4b:4c:c8:33:45:ac:88:a0:
         ea:86:dc:f6:29:48:69:37:7f:6b:2b:a3:9d:54:56:a0:18:6c:
         09:37:f2:c1:15:48:ec:bd:6f:82:68:20:c6:23:0d:25:f4:3b:
         7d:f0:d4:be:7c:33:13:04:ad:4a:c6:c8:d2:41:b5:94:80:7f:
         e8:39:6d:41:a1:13:da:ac:5a:6b:f7:01:68:c0:d7:69:19:ac:
         2f:63:74:72:d2:71:21:38:48:aa:b9:43:7d:ea:c3:ac:56:47:
         39:4f:18:5a:51:ee:57:7e:7e:ca:01:c9:fb:ef:3c:20:50:01:
         67:4f:d2:a7:9e:54:a0:08:90:89:2d:3c:91:c5:6d:cd:34:e3:
         f6:f5:01:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:13:20 2025 by rpki-client