This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n73pDAd2dMHnpJFhmCz8qL19Ys0.roa
File:                     n73pDAd2dMHnpJFhmCz8qL19Ys0.roa (raw, json)
Hash identifier:          vQCSfsqTe+U3hS0uBuUQUNfci4mOXQkqXsbr2xjidKc=
Subject key identifier:   9F:BD:E9:0C:07:76:74:C1:E7:A4:91:61:98:2C:FC:A8:BD:7D:62:CD
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0188BB4FB6CF279BCC12367E3BF5388160D2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n73pDAd2dMHnpJFhmCz8qL19Ys0.roa
Signing time:             Wed 14 Jun 2023 19:09:03 +0000
ROA not before:           Wed 14 Jun 2023 19:09:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:bb:4f:b6:cf:27:9b:cc:12:36:7e:3b:f5:38:81:60:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun 14 19:09:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9fbde90c077674c1e7a49161982cfca8bd7d62cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:71:27:ce:79:78:db:44:d4:45:59:43:34:96:
                    ee:a3:f2:95:20:2b:2a:7a:f0:da:26:e0:88:e7:cd:
                    32:3e:7e:3d:8d:c0:7c:b2:cd:29:60:c3:5c:1d:60:
                    f6:1f:3c:58:68:b9:f5:46:25:01:a6:bc:ca:18:34:
                    25:01:4a:b5:05:d0:54:e5:34:53:de:94:fa:33:85:
                    61:1f:ec:7f:07:de:f6:91:dc:31:c2:ae:ef:2d:76:
                    0f:36:c3:f5:a1:0d:70:4d:50:6e:f7:c9:1d:44:3f:
                    29:bf:c9:62:0d:12:dd:f6:b2:d1:55:88:a3:9b:16:
                    f0:8b:7a:2a:10:0e:aa:bf:a8:df:da:6a:9d:2a:d1:
                    b7:3e:1d:24:7b:b9:ba:89:9e:b0:7c:cd:e6:c7:61:
                    08:a2:cb:a9:46:be:f8:a1:df:5d:b2:3f:03:24:52:
                    a6:21:20:46:57:79:eb:d1:cf:e2:b7:ce:35:26:22:
                    f0:8b:28:c6:3b:b4:c7:0f:3d:69:f5:d5:ef:ce:79:
                    da:e6:43:79:13:39:3b:8c:13:5b:3b:f4:ff:08:c7:
                    08:f8:0a:69:6e:fb:46:b0:47:e5:d7:c9:0a:af:4f:
                    c9:af:00:ac:21:d9:fe:6f:ad:98:9d:96:78:15:85:
                    9a:b3:4b:8f:ec:82:99:d9:cf:3d:be:f5:03:38:ed:
                    65:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BD:E9:0C:07:76:74:C1:E7:A4:91:61:98:2C:FC:A8:BD:7D:62:CD
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n73pDAd2dMHnpJFhmCz8qL19Ys0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:fe:60:9b:72:a8:fb:cb:49:54:bd:37:ff:57:93:99:be:dc:
         19:10:87:46:39:e8:ea:93:13:1f:9e:52:51:f0:9a:f1:90:a7:
         76:57:2f:0a:bd:5f:36:22:9e:98:77:39:44:38:a5:1c:58:2e:
         87:eb:1e:5c:93:e8:56:fb:1a:66:b2:1f:66:44:ac:ac:c4:8a:
         87:21:8f:79:21:8e:1a:a2:cd:03:89:b4:85:9e:f8:a2:4a:13:
         be:09:f3:59:97:fb:c8:26:d0:f4:39:96:9a:f9:a1:ef:db:be:
         29:ee:88:59:3c:4a:42:fb:94:f6:ea:d1:34:57:2b:f4:29:d8:
         5b:d5:87:21:df:d4:6e:93:76:54:4b:0a:03:ee:a3:42:a7:23:
         1e:a0:53:31:0f:3e:f6:f2:10:70:27:87:05:44:8b:2a:ca:e3:
         10:11:93:13:1b:be:c4:fa:dd:da:2c:ad:3b:3f:e2:95:f7:fc:
         9d:3f:fe:27:21:68:87:1b:47:0e:3d:60:ad:ba:bf:c0:35:f3:
         6f:b1:96:a6:e8:71:5c:79:ab:18:75:12:be:3d:4c:d0:dd:4d:
         a3:33:b7:0b:d9:fc:a8:d5:83:4d:a4:7a:b0:0f:05:50:4d:2b:
         46:ae:d3:2c:a7:8e:24:8f:33:ac:ac:4d:b8:a2:43:49:8e:5f:
         78:95:9d:52
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYi7T7bPJ5vMEjZ+O/U4gWDSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjE0MTkwOTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmJkZTkwYzA3NzY3NGMxZTdhNDkxNjE5ODJjZmNhOGJkN2Q2MmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3Enznl420TURVlDNJbuo/KVICsq
evDaJuCI580yPn49jcB8ss0pYMNcHWD2HzxYaLn1RiUBprzKGDQlAUq1BdBU5TRT
3pT6M4VhH+x/B972kdwxwq7vLXYPNsP1oQ1wTVBu98kdRD8pv8liDRLd9rLRVYij
mxbwi3oqEA6qv6jf2mqdKtG3Ph0ke7m6iZ6wfM3mx2EIosupRr74od9dsj8DJFKm
ISBGV3nr0c/it841JiLwiyjGO7THDz1p9dXvznna5kN5Ezk7jBNbO/T/CMcI+App
bvtGsEfl18kKr0/JrwCsIdn+b62YnZZ4FYWas0uP7IKZ2c89vvUDOO1lUwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ+96QwHdnTB56SRYZgs/Ki9fWLNMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbjczcERBZDJkTUhucEpGaG1DejhxTDE5WXMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE7+YJtyqPvLSVS9N/9X
k5m+3BkQh0Y56OqTEx+eUlHwmvGQp3ZXLwq9XzYinph3OUQ4pRxYLofrHlyT6Fb7
GmayH2ZErKzEiochj3khjhqizQOJtIWe+KJKE74J81mX+8gm0PQ5lpr5oe/bvinu
iFk8SkL7lPbq0TRXK/Qp2FvVhyHf1G6TdlRLCgPuo0KnIx6gUzEPPvbyEHAnhwVE
iyrK4xARkxMbvsT63dosrTs/4pX3/J0//ichaIcbRw49YK26v8A182+xlqbocVx5
qxh1Er49TNDdTaMztwvZ/KjVg02kerAPBVBNK0au0yynjiSPM6ysTbiiQ0mOX3iV
nVI=
-----END CERTIFICATE-----
Generated at Thu Dec 18 23:36:45 2025 by rpki-client