This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mhpy64DSwts61UpQsPCdk9rHI3U.roa
File:                     mhpy64DSwts61UpQsPCdk9rHI3U.roa (raw, json)
Hash identifier:          Yi7uGBfkfP3ktcmqEImaN53U+coWQCTLVFcsxCH4lNk=
Subject key identifier:   9A:1A:72:EB:80:D2:C2:DB:3A:D5:4A:50:B0:F0:9D:93:DA:C7:23:75
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01824DEB9E8B38E4616023C4F4F8F191E640
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mhpy64DSwts61UpQsPCdk9rHI3U.roa
Signing time:             Sat 30 Jul 2022 07:04:23 +0000
ROA not before:           Sat 30 Jul 2022 07:04:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:182:4deb:744b/128 maxlen: 128
                          2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:4d:eb:9e:8b:38:e4:61:60:23:c4:f4:f8:f1:91:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 30 07:04:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9a1a72eb80d2c2db3ad54a50b0f09d93dac72375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6e:ee:9a:96:00:f0:9b:ae:09:c2:da:b3:72:
                    b7:4d:c3:61:98:11:34:44:2c:46:0e:b1:21:97:5f:
                    e9:b4:8b:98:b3:53:07:8a:54:a5:40:0e:82:08:ce:
                    82:4d:fa:64:ef:43:05:cd:91:14:05:dc:fa:99:b5:
                    b3:8a:61:b1:1e:7a:46:68:d0:ed:86:88:c9:ab:37:
                    f7:ca:19:e9:cd:55:bf:37:07:59:8e:ae:e0:4f:bf:
                    dd:d8:96:e4:7b:ca:b8:b2:f8:e9:5d:dd:9f:25:63:
                    e9:a9:91:a3:86:2c:14:72:a5:85:71:64:49:f4:99:
                    90:41:0a:46:a2:6d:bb:1f:66:03:b8:78:d9:36:c3:
                    cb:2b:7d:03:76:f3:20:bc:07:0a:a1:70:95:01:41:
                    6f:6c:e7:a2:ff:bc:64:d9:15:2c:5a:b6:08:78:27:
                    7d:38:3b:b9:ff:41:f1:70:95:a8:0f:50:91:9c:6f:
                    30:3d:a0:af:e5:e0:33:85:00:d2:30:ae:c7:54:61:
                    80:c0:07:12:8b:e5:eb:f4:79:b2:21:88:83:be:ed:
                    6d:4a:fc:fd:36:44:53:bf:aa:26:48:d9:6f:e1:c2:
                    6a:95:0a:60:9b:1d:3a:22:8b:28:a6:af:0e:3f:19:
                    ab:80:fe:9f:5e:73:a7:0c:d2:ab:63:83:84:ac:4b:
                    52:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1A:72:EB:80:D2:C2:DB:3A:D5:4A:50:B0:F0:9D:93:DA:C7:23:75
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mhpy64DSwts61UpQsPCdk9rHI3U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:a2:fc:f2:4f:fe:73:ba:12:3f:38:17:37:0d:e4:b4:b3:b5:
         55:d0:f2:ce:b1:6b:49:07:c3:8e:24:31:15:26:25:28:de:2d:
         5f:13:b2:10:ca:7b:44:e3:3f:ba:0e:0a:3f:73:8c:45:de:21:
         a7:5a:6e:01:d4:94:bf:47:6f:9c:fa:a5:76:68:0d:aa:42:01:
         f0:e1:9a:12:e0:11:99:e1:21:82:92:3d:da:8c:35:71:e8:87:
         91:f0:7e:36:12:cb:14:88:d4:b6:c2:ae:0d:70:fa:d0:ed:3f:
         7e:35:fe:ec:64:41:00:c0:a1:a5:3d:14:cf:36:34:f9:6c:5f:
         d3:53:ed:8c:a8:13:bf:db:ae:a3:be:30:7d:23:5f:58:e1:77:
         f3:47:00:97:1f:4f:9a:73:b4:d7:33:60:f1:98:3b:55:14:65:
         04:81:59:ad:4e:7b:6d:13:e8:11:15:89:f6:a9:a7:db:6f:bb:
         62:e0:d7:46:90:11:13:49:75:3f:aa:77:0c:0c:c3:20:8f:e8:
         45:4c:fb:86:e8:eb:1b:10:34:99:e6:5c:ef:7f:be:80:b7:90:
         8c:82:72:0d:30:23:42:18:d5:2a:cd:e5:81:e7:a4:16:45:23:
         f5:25:f4:50:62:95:c6:2e:48:6a:7b:f2:b9:15:8d:4f:67:fe:
         a2:4b:22:9d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYJN656LOORhYCPE9PjxkeZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzMwMDcwNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTFhNzJlYjgwZDJjMmRiM2FkNTRhNTBiMGYwOWQ5M2RhYzcyMzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3W7umpYA8JuuCcLas3K3TcNhmBE0
RCxGDrEhl1/ptIuYs1MHilSlQA6CCM6CTfpk70MFzZEUBdz6mbWzimGxHnpGaNDt
hojJqzf3yhnpzVW/NwdZjq7gT7/d2Jbke8q4svjpXd2fJWPpqZGjhiwUcqWFcWRJ
9JmQQQpGom27H2YDuHjZNsPLK30DdvMgvAcKoXCVAUFvbOei/7xk2RUsWrYIeCd9
ODu5/0HxcJWoD1CRnG8wPaCv5eAzhQDSMK7HVGGAwAcSi+Xr9HmyIYiDvu1tSvz9
NkRTv6omSNlv4cJqlQpgmx06Iosopq8OPxmrgP6fXnOnDNKrY4OErEtSQQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJoacuuA0sLbOtVKULDwnZPaxyN1MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbWhweTY0RFN3dHM2MVVwUXNQQ2RrOXJISTNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGii/PJP/nO6Ej84FzcN
5LSztVXQ8s6xa0kHw44kMRUmJSjeLV8TshDKe0TjP7oOCj9zjEXeIadabgHUlL9H
b5z6pXZoDapCAfDhmhLgEZnhIYKSPdqMNXHoh5HwfjYSyxSI1LbCrg1w+tDtP341
/uxkQQDAoaU9FM82NPlsX9NT7YyoE7/brqO+MH0jX1jhd/NHAJcfT5pztNczYPGY
O1UUZQSBWa1Oe20T6BEVifapp9tvu2Lg10aQERNJdT+qdwwMwyCP6EVM+4bo6xsQ
NJnmXO9/voC3kIyCcg0wI0IY1SrN5YHnpBZFI/Ul9FBilcYuSGp78rkVjU9n/qJL
Ip0=
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:48:03 2025 by rpki-client